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", 0x1000}, {&(0x7f00000018c0)="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", 0xc66}], 0x5}, 0x0) [ 220.782285][ T27] audit: type=1400 audit(1653379201.501:254): avc: denied { setattr } for pid=6136 comm="syz-executor.3" path="/dev/net/tun" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 08:00:01 executing program 2: sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x2, 0x7ff, &(0x7f0000000100)) 08:00:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) close(r0) 08:00:01 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) syz_clone(0x40208100, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 08:00:01 executing program 1: socketpair(0x15, 0x0, 0x0, &(0x7f00000000c0)) 08:00:01 executing program 2: syz_clone(0xe802080, 0x0, 0x0, 0x0, 0x0, 0x0) 08:00:01 executing program 3: syz_clone(0x20008100, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="218024277e44cd1693c9e9b19a9baa07c145660a6f5948cf56897e") 08:00:01 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0x8, 0x0, 0x92) [ 221.203204][ T27] audit: type=1400 audit(1653379201.921:255): avc: denied { create } for pid=6157 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 08:00:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, 0x0) 08:00:02 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000005c0)=0xa5) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r0, 0x1}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r1, 0x1}, 0xc) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) openat$cgroup_devices(r2, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0xa, &(0x7f0000000280)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc31}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x6, 0xb, 0x4, 0x2, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x4c, &(0x7f0000000340)=""/76, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x1f}, 0x10, 0x21745, r0}, 0x80) syz_clone(0x40208100, &(0x7f0000000040)="2829f72a4744067d741a927a2ffb70693f9667fdbd111cd5030f25d3c6f645944378062ef16a7cd8ab4b0dd0695a48b63e45283634c5c83a9ed4bfbb5bb46c410d684de671ae73963fd776488c7fb17a37c54fdfd79ce7191ea4d77443a0abdfe9d6bddb84146223a57b98fbd40753cb83eba089e7a073473375ded4ea163f1eb8bbfdd12fb4bd4f0ead1b50cc6c33ed8e9e6052dd70af81e721e03d7a2387f24cbd91f93d47ef2dddb6bf831640e519", 0xb0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="5caaa9dfa2bd69cb95ed26f83c431e935fc6ecf09cae25f6fbe6f45c4f0720f28ce728017265fe3b5375e0017689e6484aefa2b4a3edfb372c2ee38956d512db0f3278157e24fee254af1e056a") 08:00:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40) 08:00:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x7, 0x102, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) 08:00:02 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 08:00:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000140)={'veth0\x00'}) 08:00:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) 08:00:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="a6", 0x1}], 0x1}, 0x0) close(r1) 08:00:02 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) syz_clone(0x40208100, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 08:00:02 executing program 2: socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000080)) 08:00:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) 08:00:02 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) 08:00:02 executing program 5: socketpair(0x11, 0x2, 0x0, &(0x7f0000000100)) 08:00:02 executing program 3: socketpair(0xf, 0x3, 0x2, &(0x7f0000000480)) 08:00:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454d4, 0x0) 08:00:02 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x26a42, 0x0) 08:00:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) 08:00:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4042) 08:00:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x0) 08:00:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0xfffffffa, 0xc04, 0xfffffffc}, 0x48) 08:00:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 08:00:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) 08:00:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) 08:00:03 executing program 4: unlink(&(0x7f0000000040)='./file0/file0/file0\x00') 08:00:03 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x120c0, 0x0) 08:00:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454dc, 0x0) 08:00:03 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:00:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) 08:00:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x2, 0x8, 0x7fffffff, 0x40}, 0x48) 08:00:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000140)={'veth0\x00'}) 08:00:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 08:00:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4b49, 0x0) 08:00:03 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="a65343ad679b5547009260ad22fda37e307b98b2318cf4aa9a03800e229244b271ebf97e3384501d5d20453781b9957c5408d985b1df6aa8836ddf43e471739e7cb93746882256cc6aac0338ea4e70e5db261705f3a48dd58f2346a99bd033a5bf8c232cdfa009614fd505f607128ddaa2c8297a37c954d1f5df", 0x7a}, {&(0x7f0000000080)="545a4151ad25c713e452c72fe0dc0b65518a883aaaec7e1ad38315debdda08bacd1e9a42f7a54ebf4e34273e7be43e87d68103a35483d7f1e5b27aef54b4b41f7ae9d8bcfd54ff26b66208bffb3d9a23661c7dd8b103194946edb5c565be21086e9675f82843633e0a66dfd8931d847394cdf869e6130fa7132ee8b1eac039d458392817bbeb357db388ebf0bf78faf254bb67f16c4bb1bad0998e7f7cb53d57958506ddd476bd343b20d1dc94532ea535fafdcfebdc6d8fed29aad099d100fdd4596bfbc34f3876a7aec28caa912b02648e0e9b095461609de3", 0xda}, {&(0x7f0000000180)="ae268fc8c2ae75913a97a6673cd7446cfabb76e050d8a66905f50714484a99cbe65d67b793a4407a341926194e1b08b6c5a0781ab29482b3fa13bf8af817fcb370a78865892d635f5919033e73e697ec2de164386d29215644c66cdfffc1cc12ddb9a2d8caec4075f76dff5fa1179559d2151a7f6b1a5b05b4914bd94c9f2e584cbc199ad5b8543f224d4ff898c99de38ba86eca0c4987eeba5df0d55cfe7b5c77483045829e38b7a7e5cbfd79c24d09ff593b21fb84429320ac6aaa8e8a83b11b2e6bd23e8df580", 0xc8}, {&(0x7f00000008c0)="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", 0x800}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="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", 0x7fffd5e4}], 0x6}, 0x0) 08:00:03 executing program 1: syz_clone(0x20008100, 0x0, 0x0, 0x0, 0x0, 0x0) 08:00:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) 08:00:03 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000100)) 08:00:03 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000005c0)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x4c, &(0x7f0000000340)=""/76, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x1f, 0xbba8}, 0x10, 0x21745}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0x22}, 0x10) syz_clone(0x40208100, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 08:00:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00'}) 08:00:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 08:00:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x2, &(0x7f0000000140)={'veth0\x00'}) 08:00:03 executing program 2: syz_clone(0x20008100, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="218024277e44cd1693c9e9b19a9baa07c145660a6f5948cf56897eb9") syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') 08:00:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x7, 0x102, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/53}, 0x20) 08:00:03 executing program 3: socketpair(0x4, 0x0, 0x0, &(0x7f0000000100)) 08:00:03 executing program 2: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000001700)=""/205) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/182, 0xb6}, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001800)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000001b80)=[{0x0}], 0x1, &(0x7f0000001c00)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0x24048000) [ 222.999337][ T27] audit: type=1400 audit(1653379203.711:256): avc: denied { create } for pid=6265 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 08:00:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x541b, 0x0) 08:00:04 executing program 1: r0 = gettid() r1 = syz_clone(0x40000000, &(0x7f0000000000)="e7c979773a720647d74171f023cebb407e803ce0fec707bd0db7be13050a1f1900d4013ab025a52d829856aff48b5d106926f76ce7fa1a43e2ab753c5024b20341f007304bcb3ab288101e30531a8b4e414acbf10e50c091656751aeb7a1d7d56d35acd4e422acc1d7814d80bccb967739faaa57", 0x74, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d82af6889c1c7b4c5e1f1670c0774b1e9ea789ee4bd309910fd209f824a34eb1cc7fcde86adc19b84e2135d140141038c4705f02f9993d112dcb2905b7ec61c752129e8106dea071e5e65dd8671f78e5dd263d58351303037657aae82beaa4cd4f5fd501d59eaafb4a15292ba2c0c6c9ec4efd345d706b3909f57a05c046b7c100208b9872a7f4997583b7100181cadf90260e14659e9e3bf6550728dba71517968217c2a0f07a9d7f8f394ee1861a2934f54dc1cd22c6b14dbd37c3953b3701105f35e701867fddb3ee8bf4a58deec9d5468ea80bce066d7e60b461593ca8477d01e449eea3") r2 = socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=r1, 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='rdma.current\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x946}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0}, @generic={0x1, 0x3, 0xf, 0x3, 0x1000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, r4]}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r2}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r6}) recvmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/7, 0x7}], 0x1, &(0x7f0000000380)=""/168, 0xa8}, 0x10000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=0x1, 0xffffffffffffffff, 0x1d}, 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') 08:00:04 executing program 5: syz_clone(0x80020000, 0x0, 0x0, &(0x7f00000002c0), &(0x7f00000006c0), 0x0) 08:00:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) 08:00:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[{0x18, 0x0, 0x0, '}'}, {0x10}], 0x28}, 0x0) 08:00:04 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x10b202, 0x0) 08:00:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x8933, 0x0) 08:00:04 executing program 4: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="09f000002200070ad20480648c64940d7e60fc2b12003e0e25090700111c82c137153e370248038047000000d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4c000000}, 0x9000000) 08:00:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) 08:00:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1, &(0x7f0000000100)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x6, 0xe0, &(0x7f0000000180)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TUNSETQUEUE(r0, 0x5450, 0x0) 08:00:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="09f000002200070ad20480648c64940d7e60fc2b12003e0e25090700111c82c137153e370248038047000000d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4c000000}, 0x9000000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 223.694587][ T6292] netlink: 61337 bytes leftover after parsing attributes in process `syz-executor.4'. 08:00:04 executing program 3: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) [ 223.811750][ T6292] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 08:00:04 executing program 1: bpf$MAP_CREATE(0x2200000000000000, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x20000000}, 0x48) 08:00:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x17, 0x0, 0x29, 0x40000002}, 0x48) 08:00:04 executing program 5: socketpair(0x2, 0x2, 0x11, &(0x7f0000000080)) [ 223.854365][ T6299] netlink: 61337 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.880780][ T6292] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 08:00:04 executing program 5: gettid() r0 = syz_clone(0x40000000, &(0x7f0000000000)="e7c979773a720647d74171f023cebb407e803ce0fec707bd0db7be13050a1f1900d4013ab025a52d829856aff48b5d106926f76ce7fa1a43e2ab753c5024b20341f007304bcb3ab288101e30531a8b4e414acbf10e50c091656751aeb7a1d7d56d35acd4e422acc1d7814d80bccb967739faaa57", 0x74, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d82af6889c1c7b4c5e1f1670c0774b1e9ea789ee4bd309910fd209f824a34eb1cc7fcde86adc19b84e2135d140141038c4705f02f9993d112dcb2905b7ec61c752129e8106dea071e5e65dd8671f78e5dd263d58351303037657aae82beaa4cd4f5fd501d59eaafb4a15292ba2c0c6c9ec4efd345d706b3909f57a05c046b7c100208b9872a7f4997583b7100181cadf90260e14659e9e3bf6550728dba71517968217c2a0f07a9d7f8f394ee1861a2934f54dc1cd22c6b14dbd37c3953b3701105f35e701867fddb3ee8bf4a58deec9d5468ea80bce066d7e60b461593ca8477d01e449eea3") r1 = socket$kcm(0x29, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=r0, 0x12) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='rdma.current\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x946}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0}, @generic={0x1, 0x3, 0xf, 0x3, 0x1000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, r3]}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r1}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r5}) recvmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/7, 0x7}], 0x1, &(0x7f0000000380)=""/168, 0xa8}, 0x10000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=0x1, 0xffffffffffffffff, 0x1d}, 0x10) 08:00:04 executing program 0: r0 = gettid() r1 = syz_clone(0x40000000, &(0x7f0000000000)="e7c979773a720647d74171f023cebb407e803ce0fec707bd0db7be13050a1f1900d4013ab025a52d829856aff48b5d106926f76ce7fa1a43e2ab753c5024b20341f007304bcb3ab288101e30531a8b4e414acbf10e50c091656751aeb7a1d7d56d35acd4e422acc1d7814d80bccb967739faaa57", 0x74, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d82af6889c1c7b4c5e1f1670c0774b1e9ea789ee4bd309910fd209f824a34eb1cc7fcde86adc19b84e2135d140141038c4705f02f9993d112dcb2905b7ec61c752129e8106dea071e5e65dd8671f78e5dd263d58351303037657aae82beaa4cd4f5fd501d59eaafb4a15292ba2c0c6c9ec4efd345d706b3909f57a05c046b7c100208b9872a7f4997583b7100181cadf90260e14659e9e3bf6550728dba71517968217c2a0f07a9d7f8f394ee1861a2934f54dc1cd22c6b14dbd37c3953b3701105f35e701867fddb3ee8bf4a58deec9d5468ea80bce066d7e60b461593ca8477d01e449eea3") r2 = socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=r1, 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='rdma.current\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x946}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0}, @generic={0x1, 0x3, 0xf, 0x3, 0x1000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, r4]}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r2}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r6}) recvmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/7, 0x7}], 0x1, &(0x7f0000000380)=""/168, 0xa8}, 0x10000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=0x1, 0xffffffffffffffff, 0x1d}, 0x10) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/net\x00') syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') 08:00:05 executing program 3: syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="9a") 08:00:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:00:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) accept4(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r3, @ANYBLOB="01"], 0x20}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x51, 0x10122, 0x0) 08:00:05 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "c9eb3a2e4ec5f2069576022afd5b59886fb4ddc4acd08586d6d2221148371cde2367a25e20dcfb6eade1743125d0e24a8ba642c4abc54b49c461e1af937c0128"}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f00000003c0)='pkcs7_test\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, r0) 08:00:05 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7083aab5ac67b23d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:05 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @dev={0xac, 0x14, 0x78}, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "2b8cef2bc9b0c5de93bbbd54f41b1866f36146a9f333b3ff93a9cc88bb822db8", "430e00b7ecdc01937865ee9d65b94754", {"a0b9aa038fbd0f75f25dc15f8183480f", "c1077f456595c08c924defa3ceb1c2fe"}}}}}}}, 0x0) 08:00:05 executing program 5: pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 224.691516][ T27] audit: type=1400 audit(1653379205.411:257): avc: denied { accept } for pid=6321 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 224.747955][ T6323] Zero length message leads to an empty skb [ 224.794120][ T6323] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 08:00:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) 08:00:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000300)=""/199, 0x32, 0xc7, 0x1}, 0x20) 08:00:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f00000001c0)=""/213, 0x26, 0xd5, 0x1}, 0x20) 08:00:07 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0x6700000}, {&(0x7f0000011a00)="020000000c0001", 0x7, 0x4000}, {&(0x7f0000000580)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000013b00)) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/226, 0xe2) 08:00:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) accept4(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r3, @ANYBLOB="01"], 0x20}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x51, 0x10122, 0x0) 08:00:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}, {}]}) 08:00:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x7a}]}}, &(0x7f0000000300)=""/183, 0x2a, 0xb7, 0x1}, 0x20) 08:00:07 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@func]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xe1, &(0x7f0000000440)=""/225, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 226.945317][ T27] audit: type=1400 audit(1653379207.661:258): avc: denied { unlink } for pid=6350 comm="syz-executor.0" name="#1" dev="sda1" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 226.947274][ T6351] overlayfs: failed to resolve './file0': -2 08:00:07 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r1}, 0x10) 08:00:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x92, 0x10122, 0x0) [ 226.999953][ T6354] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 227.032751][ T6354] bond2 (uninitialized): Released all slaves 08:00:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x1, 0x200, 0x1}, 0x48) 08:00:07 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1a5000, 0x0) 08:00:07 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x142, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)='+', 0x1}], 0x1, 0x0, 0x0) 08:00:07 executing program 3: r0 = gettid() r1 = syz_clone(0x40000000, &(0x7f0000000000)="e7c979773a720647d74171f023cebb407e803ce0fec707bd0db7be13050a1f1900d4013ab025a52d829856aff48b5d106926f76ce7fa1a43e2ab753c5024b20341f007304bcb3ab288101e30531a8b4e414acbf10e50c091656751aeb7a1d7d56d35acd4e422acc1d7814d80bccb967739faaa57", 0x74, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d82af6889c1c7b4c5e1f1670c0774b1e9ea789ee4bd309910fd209f824a34eb1cc7fcde86adc19b84e2135d140141038c4705f02f9993d112dcb2905b7ec61c752129e8106dea071e5e65dd8671f78e5dd263d58351303037657aae82beaa4cd4f5fd501d59eaafb4a15292ba2c0c6c9ec4efd345d706b3909f57a05c046b7c100208b9872a7f4997583b7100181cadf90260e14659e9e3bf6550728dba71517968217c2a0f07a9d7f8f394ee1861a2934f54dc1cd22c6b14dbd37c3953b3701105f35e701867fddb3ee8bf4a58deec9d5468ea80bce066d7e60b461593ca8477d01e449eea3") r2 = socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=r1, 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='rdma.current\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x946}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0}, @generic={0x1, 0x3, 0xf, 0x3, 0x1000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, r4]}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r2}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=0x1, 0xffffffffffffffff, 0x1d}, 0x10) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/net\x00') syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') 08:00:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) accept4(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r3, @ANYBLOB="01"], 0x20}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x51, 0x10122, 0x0) 08:00:07 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003a00), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 08:00:07 executing program 4: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x4400, 0x116) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c880}, 0x20010) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x8004) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000002c0)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000008c0)={0x4, 0x5}, 0x10) 08:00:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000006c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000700)={0xa2c7}) 08:00:08 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x142, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)='+', 0x1}], 0x1, 0x0, 0x0) 08:00:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)=@newtfilter={0x24}, 0x24}}, 0x0) [ 227.337123][ T6378] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 08:00:08 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair(0xa, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x40000) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000880)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}) socket$inet_udp(0x2, 0x2, 0x0) [ 227.397229][ T6378] bond2 (uninitialized): Released all slaves 08:00:08 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x20}, 0x20}}, 0x0) 08:00:08 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x142, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)='+', 0x1}], 0x1, 0x0, 0x0) 08:00:08 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000003300)="90", &(0x7f00000033c0)="c8"}, 0x48) 08:00:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) accept4(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r3, @ANYBLOB="01"], 0x20}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x51, 0x10122, 0x0) [ 227.588826][ T27] audit: type=1400 audit(1653379208.301:259): avc: denied { nlmsg_write } for pid=6395 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 227.680457][ T6401] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 227.689533][ T6401] bond2 (uninitialized): Released all slaves 08:00:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x14, r1, 0xe12c3c3dab5cbf77}, 0x14}}, 0x0) 08:00:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x0) 08:00:08 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x142, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)='+', 0x1}], 0x1, 0x0, 0x0) 08:00:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}}, 0x40) 08:00:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000002c0)=0x200, 0x4) 08:00:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000006800010928bd7000fddbdf2502003f0002df96062313"], 0x50}}, 0x0) 08:00:08 executing program 1: r0 = socket(0x2, 0x3, 0x3) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x14) 08:00:08 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) connect$caif(r0, &(0x7f0000000000), 0x18) 08:00:08 executing program 5: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) 08:00:08 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/sas_host', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:00:08 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x202) [ 227.941067][ T6416] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 08:00:08 executing program 3: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') 08:00:08 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000180)) 08:00:08 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 08:00:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000063c0)={0x0, 0x0, &(0x7f0000006340)=[{&(0x7f00000022c0)={0x18c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @pid}, @generic="bdee40d89b45b2ed175a1c38b2120bf12a9535c6d22580e3cd29a4f4ac6bc4c0e1c156aa10aa4e003df1b6f7f099a59d0847e0480c56003cc3337a1a4535e89e509511d3de13a22a3d92092594c86c4b8b1183182eddb276aa0ea78235d89d071fb2b5be6bc6f9eccb26e5f1eea01957c5f3eb68a9350af109bdfbdc69fd13006b6f0208e140ad0476fc68cef19483c117d37c5d4b43f04f478e1496117a24de40ca5eaedde4cf7bc20bf24555f89aae6ba7e283a5eb61312c8e95ce89ef43aa91bafe834f4946382a", @generic="17f03b5f56618691c1a3837bd222f997f04ebe5ed3d25de5d3f7fac662e9a732de93522316dd9ef4ca0a7848e023de9d7580f467e5a3486725d86504a0cf32416e32527dd64d884b549cb13143a9872a352d21bc7769625c90d30c2d780bbd593a48008f4133e319bcf28093d3cf1944f9cea73cc08bf33d9762cb90913232848011af74e29431aff76f44d615cde51902577a281de2cf458b69e6cced090b5617d4f8e3d16bdcde"]}, 0x18c}, {&(0x7f0000002480)={0x200, 0x0, 0x2, 0x0, 0x0, "", [@generic="0a2a400b4a3e7751d488ea41f21e3095b4deda0b4bb9999fdef2859de3547bfe1c5b61a70235df58f11b80788819630512ce6dfb689f99a30146b697963f27b17880a568d882ca7fcf28599a839c09c208453d47cd62023fa1bd9a43c3ac3aa1ee83c1e2b098245fb088dd66b36123a2d0e5309b44a7ba35ae186bb6eacedfbc639fa33ad42195364f390aa2d013381dbb8a295c58f19fe9420cd11cb1dd03ae816dc109620665b39073cba3379c799887", @typed={0x4, 0x81}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x6, 0x0, 0x0, 0x0, @str='\xc2\x00'}]}, @nested={0x69, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="aac3dde60b036fd0d1a740c2855d402357a1be", @generic="08a94e68ca42405395a24e361de406e821be24540fcfc94a6565b2990e7049bf79d7ec2c2775e974596d068b97a2a5b6e5c78d5909975ad4594887e0806c1c4921a8"]}, @generic="33d2cb576a600b9fc355cf5e7bfe2433eb65c66916ee05341417e76b454e52c55cf58cb1c09b647497b4efdd83c04da6b0febc1569b7efa8d8ca116a15f4e8f55988c96e11bf6e4215c279ab922157261b00a50efe7f49df7cf996f7053458218afbb1baeb6fc169a6dc9f05b85c3bc64ecbc00d20b039757739c5bfb3ea3900c26bd60c8841d2e0085425396785f16cf6c21c14b7591e05246216eb4e2ad4f54dc946cfa5b39ef8", @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x200}, {&(0x7f0000002680)={0x6cc, 0x15, 0x0, 0x0, 0x0, "", [@nested={0xc1, 0x0, 0x0, 0x1, [@generic="db1382e397d5165c4137e4a2a58df3e765d30609ff9d9ca69811c5a1783c160024ed4bcff37a6ea4d6233c5ae39dbdd6ecac7c00ac2e2de58d988cd31ed11c452b1ee54b43386d37a0f92d2550234fe652bc57582d64294ac74dd34dc68d0c550911a6d4c52192e4e6a7a946d6c9125bc91810c4e94e289bdf993a32d955ed58d935bb5dbc82fa866166c862114ddbaf91d7922ad18d3d24f8a786c816f19eb353dea2b0c0de4c789008a91a0cac892c61793439be6f14fc4d3409d53d"]}, @nested={0x5f5, 0x66, 0x0, 0x1, [@generic="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", @generic]}]}, 0x6cc}, {&(0x7f0000006400)=ANY=[], 0x46c}], 0x4, 0x0, 0x0, 0x84}, 0x0) [ 228.002353][ T6422] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 08:00:08 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x50141, 0x0) [ 228.075252][ T27] audit: type=1400 audit(1653379208.791:260): avc: denied { write } for pid=6424 comm="syz-executor.2" name="mice" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 08:00:08 executing program 3: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[0xfff]}, 0x8) 08:00:08 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x202) 08:00:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003f543b"], 0x14}}, 0x0) 08:00:08 executing program 4: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000040)=']^\x00', &(0x7f0000000140)='[}--\x02&}q(\x00'], 0x0, 0x100) 08:00:08 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) [ 228.201313][ T6436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6436 comm=syz-executor.1 08:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000680001"], 0x50}}, 0x0) [ 228.280889][ T6436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6436 comm=syz-executor.1 08:00:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) 08:00:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000063c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006340)=[{&(0x7f00000022c0)={0x18c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="bdee40d89b45b2ed175a1c38b2120bf12a9535c6d22580e3cd29a4f4ac6bc4c0e1c156aa10aa4e003df1b6f7f099a59d0847e0480c56003cc3337a1a4535e89e509511d3de13a22a3d92092594c86c4b8b1183182eddb276aa0ea78235d89d071fb2b5be6bc6f9eccb26e5f1eea01957c5f3eb68a9350af109bdfbdc69fd13006b6f0208e140ad0476fc68cef19483c117d37c5d4b43f04f478e1496117a24de40ca5eaedde4cf7bc20bf24555f89aae6ba7e283a5eb61312c8e95ce89ef43aa91bafe834f4946382a", @generic="17f03b5f56618691c1a3837bd222f997f04ebe5ed3d25de5d3f7fac662e9a732de93522316dd9ef4ca0a7848e023de9d7580f467e5a3486725d86504a0cf32416e32527dd64d884b549cb13143a9872a352d21bc7769625c90d30c2d780bbd593a48008f4133e319bcf28093d3cf1944f9cea73cc08bf33d9762cb90913232848011af74e29431aff76f44d615cde51902577a281de2cf458b69e6cced090b5617d4f8e3d16bdcde"]}, 0x18c}, {&(0x7f0000002480)={0x200, 0x0, 0x0, 0x0, 0x0, "", [@generic="0a2a400b4a3e7751d488ea41f21e3095b4deda0b4bb9999fdef2859de3547bfe1c5b61a70235df58f11b80788819630512ce6dfb689f99a30146b697963f27b17880a568d882ca7fcf28599a839c09c208453d47cd62023fa1bd9a43c3ac3aa1ee83c1e2b098245fb088dd66b36123a2d0e5309b44a7ba35ae186bb6eacedfbc639fa33ad42195364f390aa2d013381dbb8a295c58f19fe9420cd11cb1dd03ae816dc109620665b39073cba3379c799887", @typed={0x4}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x6, 0x0, 0x0, 0x0, @str='\xc2\x00'}]}, @nested={0x69, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="aac3dde60b036fd0d1a740c2855d402357a1be", @generic="08a94e68ca42405395a24e361de406e821be24540fcfc94a6565b2990e7049bf79d7ec2c2775e974596d068b97a2a5b6e5c78d5909975ad4594887e0806c1c4921a8"]}, @generic="33d2cb576a600b9fc355cf5e7bfe2433eb65c66916ee05341417e76b454e52c55cf58cb1c09b647497b4efdd83c04da6b0febc1569b7efa8d8ca116a15f4e8f55988c96e11bf6e4215c279ab922157261b00a50efe7f49df7cf996f7053458218afbb1baeb6fc169a6dc9f05b85c3bc64ecbc00d20b039757739c5bfb3ea3900c26bd60c8841d2e0085425396785f16cf6c21c14b7591e05246216eb4e2ad4f54dc946cfa5b39ef8", @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x200}, {&(0x7f0000002680)={0x117c, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xc1, 0x0, 0x0, 0x1, [@generic="db1382e397d5165c4137e4a2a58df3e765d30609ff9d9ca69811c5a1783c160024ed4bcff37a6ea4d6233c5ae39dbdd6ecac7c00ac2e2de58d988cd31ed11c452b1ee54b43386d37a0f92d2550234fe652bc57582d64294ac74dd34dc68d0c550911a6d4c52192e4e6a7a946d6c9125bc91810c4e94e289bdf993a32d955ed58d935bb5dbc82fa866166c862114ddbaf91d7922ad18d3d24f8a786c816f19eb353dea2b0c0de4c789008a91a0cac892c61793439be6f14fc4d3409d53d"]}, @nested={0x10a5, 0x0, 0x0, 0x1, [@generic="7977403291346957bc9b266a942649859e4faaf5df9a405a0e78ac40f734c18e44b9b1ac8f8ce21e638bf06e28259c52cf0c8e8b059089a52df34076928bce21475c949cc11f855367a6be9d03bd41e3c8e595a6f67b4a11a9eb0471db5119361a8b4d1e09f333f1b29ec3b4a6ed87bf485057e55df53c79841a590d0381002c8bd7a7dccdc39b310ac5c7413753017e98aa3066bed8a07ad5e0dfaec1c4da846ec0df20617c07df65e5e7b44422a86b0ab47722322fffc91e6240824bdf89849eb1e3e48af556c1301aae763fe989afb7fed96ba64149197a66073663bc7bb10b4b277cc1f0611f02f30ef23b9aca7233c789d16f78b4839eec0d9345393d2d5feb4e817516d9fddb4f25f5232c9cfee0c7420040b1e4a3cd33d5eb294811828660bb810168dc133a17cdd1795ebab2fb3b7bcdc146e5002388ed075a764f70481cd5d55aaa44289eee364e3314d83719d52f755d7770132c1e4553e7d199b5f8e41f08d06402026b7f95f83bcc474c8b3e56bf7a84fded5b66aa43fc141e3eea98e1e3c779a7c4c10c11b17584b5b2fd4ab3bb5eb15b70476706fe25daf98f728010046cc7d83e167c79f074623d179b6fe5cc6b316f814e09bb0af09f054529e0a1249f33dc2df603f0d80f1efd5aa0e4dc02cad6398f2f68baa8a36439acff9e5096c2ff6ead43c42d5509b08208be6054382395b683b1e7dab59c827194848e91a2e1336202ab39cca7ce7713921bb7c5843dd2d25cf762b08bbe853de9da8f581a926a8372e0f22c7c72f25e032139b49a23b228ba60b3a7d57b946b663c279cf502fa05551420d5211030b4b1c318d7013f961ded71f30caa8ef52e52af5908c1a9c7cf2caf5288d97a31573705a2d9ffa311be107b18bf8c2cfd5b8c053deae54b5ca261784cd5d2689867ee4b7923e674501ed5b80183a43c43a5fd0f92e774dae304c21706040abb67bdc27407260780b7d9812a1bed55428e9957a3e98eeec09e22211f11bd61f8785e4e9580c6fe19dbad60475010f35a0f4b893248c0aac566074354f6a9f2fca4e3d2572f040f6e6379438e2273ee19e435f1c99d80b5b52a751b68989b1ed844ed7b48fcb1c3d1e0fd8065ecbc178657fbb143ff9c507a94940376a6d8ef744734f5e8b4fbff5bdc84fed8e7288f39eda46a4e48b6758a85d22bae6ea6e37045079e2ec5f80c6db77da34122b31a5b4d5d149d129a4c181994f93c97e82fd62af40f1af15a48738e6a9c60843db2228cb4de98c124db677f24f92848e939eae6b056c8810bab2c315dc5e966533049b809b00b214e7e91b879bdc4ee50b6b9157abfd23f0844ec4af731e15c5aecdc551cb5a69310f76b82ba4500bf1329218ada2596f9a80972be8c7e88ca54ba7616b749e777648e77c19f6e6c5901857810c249d3e5031e5b20d64faa5bf5cfccf5335553673471d646a190c00712e85156fcd161ae6aece625abc32524a38cbedd8a165ce92050f7ad0df38356c5cb3683b29c9520016626b323c36b314f7b53aef33493384abefeca8ac7c3053d3240bcf662cba381d90b4108831288244266e2d98c2dbf68da40cfba29dc0ec982926ee079cc6297d71feb758c5bed23a6b41414cf9e720cecb2f7004a8e8c00b0a4808fd5174c5b478e903a84add01e65ce564dec7d64760da6318771e6bf886360fe69cdc8e2228e15afa6eab0d098dface8682918da00b10bbb77a6846936d51d348c22587f92b3082a93355dc04c40267c16e06280dff365141f05ca5e9cbd53de0502c30b5ed8de96975770f0fd3ec81d0ed1dbbb5ade0260e3ee55af66b1368ab7a75d796fb429b0c8cbabad5d5576ebae9fbaf09c2a8a0947cbd5e3869b051d2c1f9723e83a2ba40d5544944a20db820de5e556cac7cc2df778b915234b2037804b639847b921780e18ea36f4561675adc0004c593603815c711caea7fd87535e2288de8339ba3d4f1f1599254fd98e20237869b3116bb3efeb3233dd98eee90afc83997268c936f5d832b71b399d48ebde1ecdc2e6cc60bbe8f354b48faad5f47bb27671e4c423d4c89399dae3b1be1207e0622f3ba7a9a8e38299ff6f09a1f7821b732374407557d72ac21b5861d21225e47c5afa332c24bb7e47f93727d7d2de626d2b0b25c2da096b1d8ee6755c8f10231189f09158545b46c1a7b75443dde010e3ff4629f992c44bb09c420653405e3b6d70da36e3f6c98bbfd67edf5110449962f90fe91687cf952a9dfdb2bc661397fbb160fccb137aaf4519c2309dcbe0cbe97426e8a37ca2d3aee4f041538cd3b2970a1effc208ce20fd1f46ad13460f6f6a383f5caf458196bf3a65db116abb0ca92f7ae6c831d376db645bd38c2ab6447acfd9c58f775b1d81ae3146e21d9e35cd58703353fdb8de6fe95bf594abb681a0a7cd27d5e3ce7018971a728461213a1a50b1b37f4db1d65d1b6c529137df6a77394f261c3503d0a540b4831e7096f4285fd56b40c0e6632b72c0d9f1a82a713fc4e88a6db1d28b9dacc88d74c45043d87bd23dac34c0c9f381eee4df2957f246a09e9f3742052bdea0539fbc6cf5bb11950b01a0a0162e8185ba77927598ddce217905c9195489d7fffdfbf63173c478565f23091b512d32e7f0dcb7bf291ef6d390f79323836aad84e2e03e6fa79c25c77787cc92d25139601a7af9fbea4d224b33cfc88eb47c7d5296315bb201ff0c95c248a37a1a651c5b3f82073101def5e45a1ff41e7567c0fb3fdee071100c0e419c06bc07307040cdce68c72d81377d8779e9416be8efd3c600d1a355ab02dad7aa4e8446ff7c18161e6dd0a7eaffbe540bee039e634afcacf5fa72b5b0481d89a50315086837ad3d2e9e8e1bf3306790290c6018f39e7f651009c4cfc6f8332590484655a5263f2d579d81ef76c6b4bd40f61175c85aa3d733acf7e60aba22814848481bc59e2b4daaf4963e8869df85d5805977cbd84adae78c89b7591538c954a62a84979c830f26d4ced494e1f0847c22fe12876fbc185c4d6bc7e33ba8e665e84bee69451264d825bd1f7f8b9b6cf0701990dd82ed7c666dba573758befd8217c591197453fc31e742a04b64f91b7fd9d0721044021a0dfce91ac9fc8f55e126326ecdba81822bdda9c13cf981352940835edbdf54300f22f59be019419c863cf1108ce50e19731318b3c4163a1a335a9406dcbfb77df12fd78bb4942e383ad31fd6153eaf5880822528f92a18f64e357a7025eae6de8410bc2c51c188d8c47c0919f76387db5ba4b47b51669f014d652c14c6bebd599fdcffa32a91176570bf43c34c25760f29c5e4d65081f471a8647d4ceb6adee0d1c8642c33b0c8b4f1164140dbf74a0bb4d934b42999da2053c257fc1035494b9d9b981e186d5dc3c12857bedb7af0aafd3b77c2ba29dc47869d2b501a47e565039492b3db9121a66e91112fbf5f08a7f4f9e35335067937024b301a1bf17350f72719b565c4bb583f88f521a0422bf3f6c5bb1239bfd0204c7449b6d97a3f63626a4c505e62c1f8bcf5d256af14406fab081edfe90265756c4fcba68c0937a44bcfc61ab2d0abfd63d6d4ae6bf91bf7fff861d96aa97989582ef2943ed539ef3661f33535086bb4fd0a3cabe166b7b5464b3d3d63cf4801c105e7f208ca2988adfefa5f7d2c3d4a50d1ac2c90ded4dbc77084eaa3e8e52254745ea60e48d26c0a9b7a941e6d0a9975bd6de68399a80c7e5fe3585c9a41f2c0512f34de5a5c5a1479a9fbac5dbf6b699918fd225062a0e91e8a0fe5cd2a9db9d39d1f197f512457f422817cdcab248fceb8f0ef46948f5a9ad31b1cba17f727c808dc080a3af0347db13d696dcfcedd2cd0c8b69e019a25c5fcad975648377b3d9b7c905d5b8840628d9f4ee1a535089863b3fbebdf17891f8accdcf9ceb269d586b0d99d91a6dd66605637a7ffe78c31e0e41adf05698c8d70127eaceb2ad73349e5f36d1429f3e8132ad6fafe5ab08a9dbf4fbf5765cddf23302fb63d95f48168178b3697c6d83ce71d57a56bcf3eb31573d717e49d9cc5b2be75b84670a4e4d789ec475cc50b9ffc387fd12120f6744a73e5bea052ee2fc474be366459cfef2e93d069782c1d3b8c3519e572056eca6b26976636b7ffc8f4fa614b5f0cd196addfbce0aa017de9c2b4a1fc339a5dfd97e944908f7ae93bca7203714e53880d1aa35bcd266658bfc706cbe56f080d6908e4d35215eec96832dad6438e22903529e1fdffea9e36bee4151af4190a60d2fc77f7810759c3b82547c92a282bd233e97dfae051e2ac1cd2655dfda03d437a05460fe145859fc0b9955cb1df0233bd4bfbd68e30fd90a543d5d63a052ab3cc54ea281e610aeeaffb4ce9a71a4bcffa40763a8e23bacf19308192f0affa8ac7d7182ccba542cff61bd020bc1ad71e0959a27d0ebc2f6d62df648e21b5aa4779934383073f5cbe6d7966e1f85b794fe80989491eaed7b4e165f97c2aeb62630b9b10f9881ebf785a79ef0462e7340b56bc73f1c1eee3b6f92871269f95afde7dc23ebe91bc717101d4659d871f870ebca4a53216fc991663cfe9e00e0ac311f6f39d3d04daa5c53c1724a10dd730593c9ee73e30ad29677263de3796aef7bca9334b325fa0d4bdc0cec9e24492d2ddfdf115f648a55e4de639a224744eb7f98a24d8c38f70ab7d7f37ee2074f4c8054c570d5049d1790350fe23022b7fbd2e0485029ad82956c28d52da2c1f7180684e49e54783a6a26d7b4e492d8fdc22e332ad3b6219a6adda5ae50d7b61a218d01177b0b6be7282a92f4c53781fa4a709ffee7381837748bddd745e117a4c8cdd905e86b197303245d1974f60df530c04eca85849a0837bb7d71294b0babfe0e3cc232646904ef6fb6078d0956f3125e721ca948bd55f8aa868b89d296d103a94b607ae861a56c8116d395337bea715fb59308963d369eac9dad78e204567dab34089c407b530f7e051713009141345fac563364d74e8adf25c6cc52a96a37f8e6a88f02cdc611dbe7f7570c615def0cf74e736a685c38e9a18583c1373c8d7c5142e7fa6eaf5c86a448603d4907c01310d302b6066389be1352bd567904d10f357e5830184765f15a6a26cce4529d15364c540674fdc6a5a92c3187456baaf56ccb0a81cb3fc52c9acc0430a1b9ee593d5588792fb43114362c4a9045721d76455fbc502b18008ed00b34b9816a4ff59327a86a512a21ee2401d80f67b2b22064463e3e76d5b5394e858a4855fb44aa7bae44ff2ecd31eed1630988cb047502e40c347a24705cced88cd46bfdf1757b327fa8ab6c57615358ad41a4c9238f7fd05e379a712aa1dcc2fd354b80ba7cae54e50834c2674a95259417593f0481f9bb73854f73c589fa71acd9365bf4682fd50a84681e84ed21f92e512f7e59dedac731a1a4ca21fd9f26a01394b1e36dacdb9b16c83808fbb0481692811abc0d63ecff56e5c0d90a00d4513636b15880aba27a317e2a159341fe37084b1611807cf447abc890cad2a509434e78cc20eb43a7aa574388c5e79d2019be0b7fee3a331ebe3a8d0647447624286c7d4841550dbea57959d2b08439540dbdf6b0a970c4da217c10a4bb40f9a318a4b0fd39e0e54b380c5fc8d1a35ad7af5d4062878845b1e6b9a0e646f7c4d3a6aa8b83158514f1db445cb1a90c2a962e7dfc00b6cf5e811aeab22e6f8bbe6ccd935fa9f9f3ce3a65d2c1a2b8d62f4dec3840e77eb8b97097597149b1d6f09ca29d7e5c4162f40654bc42956c700085fb8f70176fadb3905ff2f61d8b05f4058e61cd1", @generic="47ddfd7eedb68de9b3c9f8227fb2f8ea1b577db921b478700c75b2723c24f0ba9ba10543e344bb82fc7a0a3efa0e9516744217d0f443bf17b49553379a9051e87cb77b20424c9a4842a9d1475b559ad3c869fa4b5e2e54c9be59056f70340015b16217430f09ff567c8e17ed57229509a8c16d591a148a1dea37acaa2494dbea7113e37f10e7b60fa25d49ffa1ca82f4db045c9c78f9e0e4e1", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x117c}, {&(0x7f0000003800)={0x238, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @generic="b90a863a63b6872c15457004adee0c2f23b489d6a677d719cdad023390b5f5d7ede6ea147332af0995f99e2a56a59098d35918871eb02d267ddd386cdac9df965ecac94eeb456384448c72d4f6fd803be3629dca0e70fd409193671d8998b84216dea999a74a1d377dfe5c96d1c8c361258db244e31c659130688c7ad57dcceee9594b2781161b310b3ee4a7d073519faa0d9b90f18303e02c4f304cd950fb7348aa005bbc5e0b3d9bab2febcf6c8bbe1107a3d645d6c2b07fbd6f81799429d773b3e67d4e74fed3483ff73e5c76620a98d9f565d9b8f3152ae4a7fee07fe2ff90b8be9e3c198a", @generic="683f24a19f72d59f0c874f5da34e341659010b86d3b4aa2d9b3f2189715c471db2b11766cdf2640745f0e21be7df7d6562254978089cf2cc1771b56682430eb6bfb1deb29ced93d4b2c4496dd24e46799ffc5670d11dfa", @generic="0c2c2719b214e6ae03ee64fc066895f325d00a79b484f1bd982054473cecc255c10fe6f81bca98674dea7069a2563790b579e918d1c4db5914be7e504ad956aa6662ce5d7b4cbf0933f732445ef6cffd9abe3b0beba6e0eaeab4b70c21a687a6ceeb9298f7a192471ccd93bb8bfc3f549257ee5d261762aa0c11b9260754b0741da02c5c83482769ccd7c27da0310debedbfa9fee8faa10f816b80616115670c5331da881fd2a61557fb936c1c7af06b4961ad6677e36a4cbe3589558277fd5586f1282643101bb59d847fb4988c9b583f112e7f69a2d158afadb8"]}, 0x238}, {&(0x7f0000003a40)={0x168, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x2d, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="be25889faca54f77fcc6c268cd9828b4a61efd281d42c25e4f8c6baac2"]}, @generic="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", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x168}, {&(0x7f0000003bc0)={0x1b0, 0x0, 0x0, 0x0, 0x0, "", [@generic="f90efad857726804b7b1c4617451dc4b7270faee0d9a6be457a525f00b1c5e6c0c44fc23746af8a9773ccd716170629a4f73196784a6fd24bcdb18f37b597a8c572a5ccfd4449dc68ce1af224f", @nested={0x14d, 0x0, 0x0, 0x1, [@generic="855f8bd8c60167502ec83d1d1833c4497216b6d9d9b85a555f", @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="f76dd828229bdde56c83bdd477535bf8e50a02e5afac29a691b9dbad3688200197319c655d916c5c34f1617a425e5516219a9ec517876d361c8d29c8b946b2aef44999e2ccceb16b66eaede34ec8ae8e3f6c7c87afe409dbd02068db", @generic="c921197fbf9480ab1b63611ded0983a9ec4ce7602cf090bdad3bd6f59ef718d64feb438cbb426f451b676786770f5da3a82f6e3f121894230c4710a7c4abbe5024b487", @generic="16b46935b20803f632b81ce87c036c019a2b7a9a12d4f235a57ae2170edc365335c3b36712fabecefb34427aa6810df265d6f356f18a777d651d56b6128256e7ba2d433e6a5b4b2eac2130bc270200022ee9d518ba07876b0db044b829315830612c566dc2c629e45231c4354bd3b7a45ad9c258e1c0b67786a09ccdfd32601ef774d3f25a858ac2da"]}]}, 0x1b0}, {0x0, 0x46c}], 0x7}, 0x0) 08:00:09 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "056283269afc6a55e2c3c35a3ba26bad"}) socketpair(0x23, 0x0, 0x0, &(0x7f0000000640)) 08:00:09 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x80086601, 0x0) 08:00:09 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044041}, 0x4004050) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair(0xa, 0xa, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x40000) socket$packet(0x11, 0x2, 0x300) 08:00:09 executing program 4: epoll_wait(0xffffffffffffffff, &(0x7f0000000480)=[{}], 0x1, 0x0) [ 228.450922][ T6452] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 08:00:09 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 228.486190][ T27] audit: type=1400 audit(1653379209.201:261): avc: denied { create } for pid=6454 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 08:00:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000840)='.pending_reads\x00', 0x8200, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), 0xffffffffffffffff) 08:00:09 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000002380)='\x00', 0x0, 0x0, 0x1000) 08:00:09 executing program 0: socket(0x2, 0x1, 0x2) 08:00:09 executing program 5: socketpair(0x23, 0x0, 0x0, &(0x7f0000000640)) [ 228.573499][ T27] audit: type=1400 audit(1653379209.261:262): avc: denied { getattr } for pid=6459 comm="syz-executor.5" path="pid:[4026532835]" dev="nsfs" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 08:00:09 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) 08:00:09 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) 08:00:09 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xb703, 0x0) 08:00:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 228.710935][ T27] audit: type=1400 audit(1653379209.371:263): avc: denied { read } for pid=6467 comm="syz-executor.3" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 08:00:09 executing program 2: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002500), 0x400, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 08:00:09 executing program 1: socket(0x18, 0x0, 0x1000) 08:00:09 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0189436, 0x0) 08:00:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000006800010928bd7000fddbdf2502003f0002df960623"], 0x50}}, 0x0) 08:00:09 executing program 3: socket(0x3, 0x0, 0x7fff) [ 228.854330][ T27] audit: type=1400 audit(1653379209.381:264): avc: denied { open } for pid=6467 comm="syz-executor.3" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 08:00:09 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0), 0x10) 08:00:09 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x101000) 08:00:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x684}, 0x48) 08:00:09 executing program 1: ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000002100)={0x3, 0x0, [{}, {}, {}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000003600), 0x200, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:00:09 executing program 5: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000180)) 08:00:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) [ 228.988835][ T27] audit: type=1400 audit(1653379209.381:265): avc: denied { ioctl } for pid=6467 comm="syz-executor.3" path="/dev/input/mice" dev="devtmpfs" ino=829 ioctlcmd=0x5541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 08:00:09 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x801c581f, 0x0) 08:00:09 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) 08:00:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) 08:00:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:00:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000200), 0x4) 08:00:09 executing program 3: socketpair(0x18, 0x0, 0x0, &(0x7f00000021c0)) [ 229.161532][ T27] audit: type=1400 audit(1653379209.651:266): avc: denied { append } for pid=6488 comm="syz-executor.2" name="pfkey" dev="proc" ino=4026532970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 08:00:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) 08:00:10 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x4020940d, 0x0) 08:00:10 executing program 5: msgsnd(0x0, &(0x7f0000001180), 0x8, 0x0) 08:00:10 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9}}}]}}]}}, 0x0) 08:00:10 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:00:10 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000180)) 08:00:10 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xb704, 0x0) 08:00:10 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x14, r1, 0xe12c3c3dab5cbf77}, 0x14}}, 0x0) 08:00:10 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00), 0x1002, 0x0) 08:00:10 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc020660b, 0x0) 08:00:10 executing program 2: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000010c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) 08:00:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000008c0), 0x10) 08:00:10 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000500)={0x0, 0x2}, 0x18) 08:00:10 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 08:00:10 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18}, 0x18) [ 229.660786][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.942088][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 230.081268][ T26] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 230.321058][ T26] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.40 [ 230.330487][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.340021][ T26] usb 4-1: Product: syz [ 230.344537][ T26] usb 4-1: Manufacturer: syz [ 230.349143][ T26] usb 4-1: SerialNumber: syz [ 230.397016][ T26] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 230.620865][ T26] usb 4-1: USB disconnect, device number 5 08:00:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000a180)={0x0, 0x0, &(0x7f0000008080)=[{0x0}, {0x0}], 0x2, &(0x7f000000a100)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40}, 0x0) 08:00:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter, 0x48) 08:00:11 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) epoll_wait(r0, &(0x7f0000000480)=[{}], 0x1, 0x2) 08:00:11 executing program 0: mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:00:11 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x400201) 08:00:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003f543b"], 0x14}}, 0x0) 08:00:11 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x20, 0x4}) 08:00:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4020940d, 0x0) 08:00:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x90) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000880)={0x0, 0x0, {0x2a, 0x3a}}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:00:11 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) 08:00:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000008e00)={0x0, 0x1, &(0x7f0000008bc0)=@raw=[@generic], &(0x7f0000008c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 08:00:12 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 08:00:12 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5460, 0x0) 08:00:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x3a8, 0x0, 0x238, 0xffffffff, 0x238, 0x128, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@ah={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @gre_key, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 08:00:12 executing program 0: socketpair(0x0, 0x800, 0x0, &(0x7f0000000640)) 08:00:12 executing program 1: getresgid(&(0x7f000000af00), 0x0, 0x0) 08:00:12 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000002500), 0x400, 0x0) 08:00:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) 08:00:12 executing program 5: syz_open_dev$admmidi(&(0x7f0000006a80), 0x0, 0x10d42) 08:00:12 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000003600), 0x0, 0x0) 08:00:12 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/si4713', 0x0, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x60) 08:00:12 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x40086602, 0x0) 08:00:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003f543b"], 0x14}}, 0x0) 08:00:12 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5452, 0x0) 08:00:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dccp', 0x400, 0x0) 08:00:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) 08:00:12 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') [ 231.688472][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 231.688488][ T27] audit: type=1400 audit(1653379212.401:271): avc: denied { setattr } for pid=6597 comm="syz-executor.4" path="pid:[4026532837]" dev="nsfs" ino=4026532837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 08:00:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000063c0)={0x0, 0x0, &(0x7f0000006340)=[{0x0}, {&(0x7f0000002680)={0x10}, 0x10}], 0x2}, 0x0) 08:00:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x71, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x24}}, 0x0) 08:00:12 executing program 4: statx(0xffffffffffffffff, &(0x7f0000000780)='./file0/file0\x00', 0x400, 0x0, 0x0) [ 231.730594][ T6605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21567 sclass=netlink_route_socket pid=6605 comm=syz-executor.0 08:00:12 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000206a057a034000010203010902"], &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 08:00:12 executing program 1: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x400, &(0x7f0000000080), 0x8) 08:00:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000063c0)={0x0, 0x0, &(0x7f0000006340)=[{&(0x7f00000022c0)={0x18c, 0x0, 0x8, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="bdee40d89b45b2ed175a1c38b2120bf12a9535c6d22580e3cd29a4f4ac6bc4c0e1c156aa10aa4e003df1b6f7f099a59d0847e0480c56003cc3337a1a4535e89e509511d3de13a22a3d92092594c86c4b8b1183182eddb276aa0ea78235d89d071fb2b5be6bc6f9eccb26e5f1eea01957c5f3eb68a9350af109bdfbdc69fd13006b6f0208e140ad0476fc68cef19483c117d37c5d4b43f04f478e1496117a24de40ca5eaedde4cf7bc20bf24555f89aae6ba7e283a5eb61312c8e95ce89ef43aa91bafe834f4946382a", @generic="17f03b5f56618691c1a3837bd222f997f04ebe5ed3d25de5d3f7fac662e9a732de93522316dd9ef4ca0a7848e023de9d7580f467e5a3486725d86504a0cf32416e32527dd64d884b549cb13143a9872a352d21bc7769625c90d30c2d780bbd593a48008f4133e319bcf28093d3cf1944f9cea73cc08bf33d9762cb90913232848011af74e29431aff76f44d615cde51902577a281de2cf458b69e6cced090b5617d4f8e3d16bdcde"]}, 0x18c}, {&(0x7f0000002480)={0x200, 0x0, 0x0, 0x0, 0x0, "", [@generic="0a2a400b4a3e7751d488ea41f21e3095b4deda0b4bb9999fdef2859de3547bfe1c5b61a70235df58f11b80788819630512ce6dfb689f99a30146b697963f27b17880a568d882ca7fcf28599a839c09c208453d47cd62023fa1bd9a43c3ac3aa1ee83c1e2b098245fb088dd66b36123a2d0e5309b44a7ba35ae186bb6eacedfbc639fa33ad42195364f390aa2d013381dbb8a295c58f19fe9420cd11cb1dd03ae816dc109620665b39073cba3379c799887", @typed={0x4}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x6, 0x0, 0x0, 0x0, @str='\xc2\x00'}]}, @nested={0x69, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="aac3dde60b036fd0d1a740c2855d402357a1be", @generic="08a94e68ca42405395a24e361de406e821be24540fcfc94a6565b2990e7049bf79d7ec2c2775e974596d068b97a2a5b6e5c78d5909975ad4594887e0806c1c4921a8"]}, @generic="33d2cb576a600b9fc355cf5e7bfe2433eb65c66916ee05341417e76b454e52c55cf58cb1c09b647497b4efdd83c04da6b0febc1569b7efa8d8ca116a15f4e8f55988c96e11bf6e4215c279ab922157261b00a50efe7f49df7cf996f7053458218afbb1baeb6fc169a6dc9f05b85c3bc64ecbc00d20b039757739c5bfb3ea3900c26bd60c8841d2e0085425396785f16cf6c21c14b7591e05246216eb4e2ad4f54dc946cfa5b39ef8", @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x200}, {&(0x7f0000002680)={0xb38, 0x15, 0x0, 0x0, 0x0, "", [@nested={0xc1, 0x0, 0x0, 0x1, [@generic="db1382e397d5165c4137e4a2a58df3e765d30609ff9d9ca69811c5a1783c160024ed4bcff37a6ea4d6233c5ae39dbdd6ecac7c00ac2e2de58d988cd31ed11c452b1ee54b43386d37a0f92d2550234fe652bc57582d64294ac74dd34dc68d0c550911a6d4c52192e4e6a7a946d6c9125bc91810c4e94e289bdf993a32d955ed58d935bb5dbc82fa866166c862114ddbaf91d7922ad18d3d24f8a786c816f19eb353dea2b0c0de4c789008a91a0cac892c61793439be6f14fc4d3409d53d"]}, @nested={0xa61, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0xb38}], 0x3}, 0x0) 08:00:12 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1200) [ 231.842910][ T6613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6613 comm=syz-executor.5 08:00:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) 08:00:12 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002500), 0x400, 0x0) 08:00:12 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) 08:00:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), 0xffffffffffffffff) [ 231.951374][ T6623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6623 comm=syz-executor.0 08:00:12 executing program 3: r0 = epoll_create(0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000002200)) 08:00:12 executing program 1: getgroups(0x2, &(0x7f0000002f80)=[0xee01, 0xee00]) 08:00:12 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0xffffffe1) [ 232.035994][ T6623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6623 comm=syz-executor.0 08:00:12 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001380), 0x1, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) write$usbip_server(r0, &(0x7f0000000380)=@ret_unlink={{0x4, 0x0, 0x0, 0x1, 0x9}}, 0x30) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair(0xa, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 232.201585][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.247889][ T6639] nvme_fabrics: missing parameter 'transport=%s' [ 232.260273][ T6639] nvme_fabrics: missing parameter 'nqn=%s' [ 232.470866][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 232.690748][ T26] usb 3-1: config 0 has no interfaces? [ 232.880937][ T26] usb 3-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.40 [ 232.890017][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.899459][ T26] usb 3-1: Product: syz [ 232.903910][ T26] usb 3-1: Manufacturer: syz [ 232.908512][ T26] usb 3-1: SerialNumber: syz [ 232.929580][ T26] usb 3-1: config 0 descriptor?? [ 233.198479][ T6344] usb 3-1: USB disconnect, device number 7 08:00:14 executing program 2: syz_open_dev$amidi(&(0x7f0000000080), 0x898c, 0x86d3ad4b9f184473) 08:00:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/workqueue', 0x210000, 0x0) 08:00:14 executing program 1: ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) 08:00:14 executing program 5: socket(0x1e, 0x0, 0x5) 08:00:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 08:00:14 executing program 0: ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 08:00:14 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0xfffffffffffffffd, 0x0) 08:00:14 executing program 3: getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) 08:00:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000a180)={0x0, 0x0, 0x0, 0x0, &(0x7f000000a100)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40}, 0x0) [ 233.777878][ T27] audit: type=1400 audit(1653379214.491:272): avc: denied { map } for pid=6647 comm="syz-executor.4" path="/dev/input/mice" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 08:00:14 executing program 2: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "056283269afc6a55e2c3c35a3ba26bad"}) socketpair(0x0, 0x0, 0x6, &(0x7f0000000640)) 08:00:14 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x7fffffffffffffff, 0x109140) 08:00:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) 08:00:14 executing program 5: socket$kcm(0x29, 0xf, 0x0) 08:00:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 08:00:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x0, 0x238, 0xffffffff, 0x238, 0x128, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@ah={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'ipvlan0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @gre_key, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 08:00:14 executing program 5: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000008c0)={0x4, 0x5, 0x0, 0x4b}, 0x10) 08:00:14 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 08:00:14 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044041}, 0x4004050) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair(0xa, 0xa, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x234, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x1f0, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffc00}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70f10227c0c3bba5700084024e3a2f4952490185be2dd58d982c2d604c172691"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcc05}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xeadd}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cb202ee84b7c8c69508d9ab355a10da7123a1a3e0fb9697e91e0c68af272eec4"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4322, @loopback, 0x50}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @mcast2, 0x9}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004) connect$caif(r2, &(0x7f0000000700), 0x18) socket$packet(0x11, 0x2, 0x300) 08:00:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), 0xffffffffffffffff) 08:00:14 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 08:00:14 executing program 1: syz_open_dev$sndctrl(&(0x7f00000010c0), 0x0, 0x0) [ 234.159814][ T6679] x_tables: duplicate underflow at hook 1 08:00:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000006800010928bd7000fddb", @ANYRES32, @ANYBLOB="04000b000400040014"], 0x50}}, 0x0) 08:00:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x541b, 0x0) 08:00:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:00:15 executing program 1: syz_open_dev$media(&(0x7f00000003c0), 0x0, 0x400000) 08:00:15 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x2, 0x0) 08:00:15 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)={0x27, "507bb0a3397caa07f01657643e802c6fbb0412df4467c3d5576cef6bf00b1fc9f300941cd5b424"}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x148, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70f10227c0c3bba5700084024e3a2f4952490185be2dd58d982c2d604c172691"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xeadd}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x148}}, 0x8004) connect$caif(0xffffffffffffffff, &(0x7f0000000700), 0x18) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$packet(0x11, 0x2, 0x300) 08:00:15 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000003080)=[{&(0x7f0000000000)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "1323daae2b7a650972dfaca0c6c141f3187783070aaa7eba0585a70e199bb7e413455d040862a908b11e6bb280e972f7ca433c0906ba500ee762c9d8f5fb79"}, 0x60, 0x0, 0x0, &(0x7f0000000480)={0x10, 0x1, 0x1}, 0x10}], 0x1, 0x0) 08:00:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000380)) 08:00:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8993, &(0x7f0000000040)={'gre0\x00', 0x0}) 08:00:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 08:00:15 executing program 5: request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) 08:00:15 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) 08:00:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001d00ad382cbd7000ffdbdf2507000000", @ANYBLOB="80"], 0x34}}, 0x0) [ 234.627442][ T27] audit: type=1400 audit(1653379215.341:273): avc: denied { write } for pid=6715 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.650918][ T6721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.658705][ T6721] IPv6: NLM_F_CREATE should be set when creating new route [ 234.665987][ T6721] IPv6: NLM_F_CREATE should be set when creating new route 08:00:15 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x56a}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000000c0)=@string={0x2}}]}) 08:00:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32, @ANYBLOB="010000000000f6001c0012000c000100626f6e"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x30, 0x10, 0x401, 0x2ce, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) 08:00:15 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "b8f15805b6f23441e7fdee5c5086974650c61f0a2b14f0fabd53a02353e4995475c0317403fae70392158c2eea5a34695caaec24b0a8d0c6ed8acbb75cf92dde"}, 0x48, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) 08:00:15 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "3e45983a72ea4851bf8268097643ab91a85352c1fa7ae992b6de021d433b6901d20256395930d96983a90eab899bfa8a1082e5fdb221300710e8654ed6887635"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 08:00:15 executing program 3: socketpair(0x2c, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) [ 234.779837][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:00:15 executing program 1: r0 = openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 08:00:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x0, 0x0, 0x0, &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:15 executing program 0: r0 = openat$vcs(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) [ 234.853110][ T27] audit: type=1400 audit(1653379215.571:274): avc: denied { ioctl } for pid=6730 comm="syz-executor.4" path="socket:[41678]" dev="sockfs" ino=41678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.853760][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:00:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xf, &(0x7f0000002640)=@framed={{}, [@map_idx_val, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa8}, @generic={0x9, 0x5, 0x1, 0x9, 0xffffff78}, @generic={0x81, 0x4, 0x4, 0x5, 0x5}, @call={0x85, 0x0, 0x0, 0x10}, @map_val, @jmp]}, &(0x7f00000026c0)='syzkaller\x00', 0x7fff, 0x9d, &(0x7f0000002700)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800), 0x10}, 0x80) 08:00:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sync() 08:00:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8924, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x8}]}) [ 235.050772][ T6335] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 235.320856][ T6335] usb 6-1: Using ep0 maxpacket: 32 [ 235.440854][ T6335] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.451841][ T6335] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.500892][ T6335] usb 6-1: language id specifier not provided by device, defaulting to English [ 235.620849][ T6335] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.40 [ 235.630189][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.638362][ T6335] usb 6-1: Product: syz [ 235.642617][ T6335] usb 6-1: Manufacturer: syz [ 235.647243][ T6335] usb 6-1: SerialNumber: syz [ 236.033214][ T6335] usbhid 6-1:1.0: can't add hid device: -71 [ 236.039180][ T6335] usbhid: probe of 6-1:1.0 failed with error -71 [ 236.055628][ T6335] usb 6-1: USB disconnect, device number 6 08:00:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x101}]}) 08:00:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894a, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:17 executing program 2: r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='[\x00', &(0x7f0000000100)='\xe0@:+J-@.\x00', 0x0) 08:00:17 executing program 1: syz_clone3(&(0x7f00000005c0)={0x900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:17 executing program 4: rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x0, 0x0, 0x1}) 08:00:17 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 08:00:17 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0xfda12adcfc4e11ac) 08:00:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40049409, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:17 executing program 3: r0 = getpgid(0x0) ptrace$peek(0xffffffffffffffff, r0, 0x0) [ 236.458372][ T27] audit: type=1400 audit(1653379217.171:275): avc: denied { mount } for pid=6755 comm="syz-executor.2" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 08:00:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/if_inet6\x00') connect$caif(r0, &(0x7f0000000c80)=@util={0x25, "266b89c12f19a1e21657ee7fc8cdf65e"}, 0x18) 08:00:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r0) 08:00:17 executing program 0: syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 08:00:17 executing program 4: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x3a69) [ 236.549192][ T27] audit: type=1400 audit(1653379217.261:276): avc: denied { read } for pid=6765 comm="syz-executor.1" name="autofs" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 08:00:17 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) 08:00:17 executing program 3: syz_clone3(&(0x7f00000005c0)={0x269ae000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 236.621328][ T27] audit: type=1400 audit(1653379217.261:277): avc: denied { open } for pid=6765 comm="syz-executor.1" path="/dev/autofs" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 08:00:17 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f0000001080), 0x200280, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x0) 08:00:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x4f800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 08:00:17 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000c80)) 08:00:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) [ 236.730560][ T27] audit: type=1400 audit(1653379217.261:278): avc: denied { ioctl } for pid=6765 comm="syz-executor.1" path="/dev/autofs" dev="devtmpfs" ino=97 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 08:00:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8995, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:17 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/47, 0x7f) 08:00:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xf, &(0x7f0000002640)=@framed={{}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa8}, @generic={0x0, 0x5, 0x1, 0x9, 0xffffff78}, @generic, @call, @map_val, @jmp]}, &(0x7f00000026c0)='syzkaller\x00', 0x7fff, 0x9d, &(0x7f0000002700)=""/157, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:17 executing program 0: syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb6) 08:00:17 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={0xffffffffffffffff, 0x22, 0x0, 0x0, 0x0}, 0x20) 08:00:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/stat\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 08:00:17 executing program 0: syz_open_procfs(0x0, &(0x7f0000000500)='net/anycast6\x00') 08:00:17 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:00:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x1f}, {0x6}]}) 08:00:17 executing program 5: syz_clone3(&(0x7f00000005c0)={0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) 08:00:17 executing program 1: syz_clone3(&(0x7f0000000040)={0x98c0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a3, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0xd6d4798f04a7f27, 0x1}, 0x48) 08:00:17 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x7) 08:00:17 executing program 4: openat$loop_ctrl(0xffffff9c, &(0x7f0000002540), 0x0, 0x0) 08:00:17 executing program 3: memfd_create(&(0x7f00000000c0)='\x00', 0x5) 08:00:17 executing program 4: syz_clone3(&(0x7f00000005c0)={0x100001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8948, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:17 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x4, 0x0) 08:00:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8954, 0x0) 08:00:18 executing program 3: io_uring_setup(0x62cb, &(0x7f0000000000)={0x0, 0x0, 0x4}) 08:00:18 executing program 5: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) 08:00:18 executing program 2: syz_clone3(&(0x7f00000005c0)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x402c5828, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:18 executing program 4: io_uring_setup(0x469f, &(0x7f0000000100)) 08:00:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x1ff}]}) 08:00:18 executing program 3: fsopen(&(0x7f0000000180)='fuseblk\x00', 0x0) 08:00:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x402c5839, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:18 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) 08:00:18 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/stat\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/stat\x00') 08:00:18 executing program 1: syz_clone3(&(0x7f00000005c0)={0x1f000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:18 executing program 4: r0 = getpgid(0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, r0], 0x2}, 0x58) 08:00:18 executing program 3: syz_io_uring_setup(0x5b4e, &(0x7f0000000000), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c22000/0x3000)=nil, 0x0, 0x0) 08:00:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xf, &(0x7f0000002640)=@framed={{}, [@map_idx_val, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa8}, @generic={0x9, 0x5, 0x1, 0x9, 0xffffff78}, @generic={0x81, 0x4, 0x4, 0x5, 0x5}, @call, @map_val, @jmp]}, &(0x7f00000026c0)='syzkaller\x00', 0x7fff, 0x9d, &(0x7f0000002700)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:18 executing program 5: syz_clone3(0x0, 0x0) getpgid(0x0) clock_gettime(0x6, &(0x7f00000003c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50}, 0x50) 08:00:18 executing program 2: r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='[\x00', &(0x7f0000000100)='\xe0@:+J-@.\x00', 0x0) 08:00:18 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0xd, 0x0, 0x0, 0x0}, 0x20) 08:00:18 executing program 4: r0 = fsopen(&(0x7f0000000180)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='[\x00', &(0x7f0000000100)='\xe0@:+J-@.\x00', 0x0) 08:00:18 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 08:00:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8955, 0x0) 08:00:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x3}]}) 08:00:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x402c5829, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:18 executing program 1: io_uring_setup(0x7529, &(0x7f0000001100)={0x0, 0x0, 0x20}) 08:00:18 executing program 4: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='[\x00\xb3\xfd\x0f\x9f\x95\xe2\xd4', &(0x7f0000000100)='\xe1)\xb9\x00\x00\x00\x04\xf4a', 0x0) 08:00:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891b, 0x0) 08:00:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8902, 0x0) 08:00:18 executing program 2: syz_open_procfs(0x0, &(0x7f0000000500)='net/anycast6\x00') syz_open_procfs(0x0, &(0x7f0000000500)='net/anycast6\x00') 08:00:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) 08:00:18 executing program 4: r0 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) 08:00:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x0, 0x3, &(0x7f0000002640)=@framed, &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:18 executing program 1: r0 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x202000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1, {r0}}, 0x58) 08:00:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 08:00:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894a, 0x0) 08:00:18 executing program 3: syz_clone3(&(0x7f0000000000)={0x34002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:18 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x408a071, 0xffffffffffffffff, 0x10000000) 08:00:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x4a, &(0x7f0000000380)=""/74, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 237.966999][ T27] audit: type=1400 audit(1653379218.681:279): avc: denied { map } for pid=6897 comm="syz-executor.4" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 08:00:18 executing program 2: msgget$private(0x0, 0x0) r0 = msgget$private(0x0, 0x0) r1 = msgget(0x0, 0x46) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee00, 0xffffffffffffffff}}) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x2, 0xee00, 0xffffffffffffffff}}) msgsnd(r2, &(0x7f00000000c0)={0x0, "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"}, 0xfffffffffffffdef, 0x0) fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) r3 = msgget(0x3, 0x100) msgctl$IPC_RMID(r3, 0x0) 08:00:18 executing program 5: openat$vsock(0xffffff9c, &(0x7f0000000000), 0x189001, 0x0) 08:00:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0x3, &(0x7f0000002640)=@framed, &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800), 0x10}, 0x80) 08:00:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x3, 0x0, 0x0, 0xbae}]}) 08:00:18 executing program 1: io_uring_setup(0x0, &(0x7f0000000000)) 08:00:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8994, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:18 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xa1) 08:00:18 executing program 0: syz_open_procfs$userns(0x0, &(0x7f0000000680)) 08:00:18 executing program 4: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x80000}, 0x20) 08:00:19 executing program 5: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x20200, 0x0) 08:00:19 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x9c52a84256c64cb0, 0xffffffffffffffff, 0x0) 08:00:19 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1}) 08:00:19 executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x430001) 08:00:19 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000340)={0x0, 0x5}, 0x0) 08:00:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 08:00:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8940, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, 0x0) 08:00:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:19 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xf, &(0x7f0000002640)=@framed={{}, [@map_idx_val, @map_idx_val, @kfunc, @call, @generic, @generic, @call, @map_val, @jmp]}, &(0x7f00000026c0)='syzkaller\x00', 0x7fff, 0x9d, &(0x7f0000002700)=""/157, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000027c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002800)={0x1, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), 0xffffffffffffffff) 08:00:19 executing program 3: openat$vsock(0xffffff9c, 0x0, 0x200280, 0x0) 08:00:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, 0x0) 08:00:19 executing program 5: syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x7114, &(0x7f0000000100)={0x0, 0xdeba}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 08:00:19 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, 0x20) 08:00:19 executing program 3: r0 = openat$urandom(0xffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:00:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='limits\x00') setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 08:00:19 executing program 0: syz_io_uring_setup(0xcf, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:00:19 executing program 1: socketpair(0x1, 0x0, 0x4, &(0x7f00000001c0)) 08:00:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)) 08:00:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8917, 0x0) 08:00:19 executing program 3: r0 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x202000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 08:00:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891c, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:19 executing program 1: syz_clone3(&(0x7f0000001300)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:19 executing program 4: r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x4, &(0x7f00000000c0)='[\x00', &(0x7f0000000100)='\xe0@:+J-@.\x00', 0x0) 08:00:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 08:00:19 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x3a69) 08:00:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0, 0x134}}, 0x0) 08:00:19 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0xe, 0x0, 0x0, 0x0}, 0x20) 08:00:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8912, 0x0) 08:00:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) 08:00:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0x4, &(0x7f0000002640)=@framed={{}, [@kfunc]}, &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002bc0)={&(0x7f0000002a80), 0xc, &(0x7f0000002b80)={0x0}}, 0x0) 08:00:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5452, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8949, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:19 executing program 1: openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/custom1\x00', 0x0, 0x0) 08:00:19 executing program 3: sync() syz_open_dev$loop(0x0, 0x0, 0x0) 08:00:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x20}]}) 08:00:19 executing program 4: syz_clone3(&(0x7f00000005c0)={0x204000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:19 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) 08:00:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8992, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 08:00:19 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x10000000) 08:00:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, 0x0) 08:00:19 executing program 0: syz_clone3(&(0x7f00000003c0)={0x40000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:19 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x481143) 08:00:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 08:00:20 executing program 3: r0 = getpgid(0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0xee01, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) 08:00:20 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x0) [ 239.291875][ T27] audit: type=1400 audit(1653379220.011:280): avc: denied { map } for pid=7023 comm="syz-executor.1" path="/proc/7023/task/7026/pagemap" dev="proc" ino=43270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 08:00:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @rc={0x1f, @none}, @xdp, @isdn, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bond0\x00'}) 08:00:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xd, &(0x7f0000002640)=@framed={{}, [@map_idx_val, @kfunc, @call, @generic, @generic, @call, @map_val, @jmp]}, &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:20 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4180) 08:00:20 executing program 3: syz_clone3(&(0x7f00000005c0)={0x9000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8947, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:20 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002840)='blkio.bfq.sectors\x00', 0x0, 0x0) 08:00:20 executing program 1: syz_clone3(&(0x7f0000000180)={0x10024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) 08:00:20 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 08:00:20 executing program 3: openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/custom1\x00', 0x2, 0x0) 08:00:20 executing program 5: openat$vcs(0xffffff9c, &(0x7f0000000000), 0x801, 0x0) 08:00:20 executing program 0: syz_clone3(&(0x7f0000000280)={0x80004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 08:00:20 executing program 4: mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='./file0\x00') 08:00:20 executing program 2: openat$vsock(0xffffff9c, 0x0, 0x420080, 0x0) 08:00:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x11, 0x5, &(0x7f0000002640)=@framed={{}, [@map_idx_val]}, &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[0xffffffffffffffff]}, 0x80) 08:00:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8919, 0x0) 08:00:20 executing program 1: syz_clone3(&(0x7f0000000180)={0x10024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) 08:00:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8942, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:20 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/if_inet6\x00') sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 08:00:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0xc0800) 08:00:20 executing program 5: syz_clone3(&(0x7f0000002c80)={0x0, 0x0, &(0x7f00000029c0), &(0x7f0000002a00), {}, &(0x7f0000002a40)=""/172, 0xac, 0x0, &(0x7f0000002c00)=[0x0, 0x0, 0x0], 0x3}, 0x5e) 08:00:20 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 08:00:20 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/stat\x00') 08:00:20 executing program 2: syz_clone3(&(0x7f00000005c0)={0xf002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:00:20 executing program 0: syz_clone3(&(0x7f0000002c80)={0x0, 0x0, &(0x7f00000029c0), &(0x7f0000002a00), {}, &(0x7f0000002a40)=""/172, 0xfffffffffffffda6, 0x0, &(0x7f0000002c00)=[0x0, 0x0, 0x0], 0x3}, 0x58) 08:00:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8971, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891e, &(0x7f00000000c0)={'vxcan0\x00'}) 08:00:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) syz_io_uring_setup(0x10b2, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 08:00:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 08:00:20 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0xbf6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x850000) 08:00:20 executing program 5: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/228) 08:00:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 08:00:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={0x0}}, 0x0) [ 240.092879][ T7097] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:00:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000011c0)='l', 0x1, 0x0, &(0x7f0000001180)={0x10, 0x2}, 0x10) 08:00:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000032000122000000000000000000000000040001"], 0x18}}, 0x0) 08:00:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x850000) [ 240.179191][ T27] audit: type=1400 audit(1653379220.891:281): avc: denied { ioctl } for pid=7100 comm="syz-executor.4" path="socket:[43419]" dev="sockfs" ino=43419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 08:00:21 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0x7f000004}}}}}}, 0x0) 08:00:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:21 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000206a057a0340000102030109022400010100c0060904"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) [ 240.282465][ T7109] tc_dump_action: action bad kind [ 240.297051][ T7111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:00:21 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) [ 240.350794][ T6335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 240.640948][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 240.720973][ T26] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 241.010876][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 241.180944][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 241.271206][ T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.460958][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 241.477601][ T26] usb 6-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.40 [ 241.482464][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.501710][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.509725][ T26] usb 6-1: Product: syz [ 241.535855][ T6335] usb 1-1: Product: syz [ 241.540518][ T6335] usb 1-1: Manufacturer: syz [ 241.540643][ T26] usb 6-1: Manufacturer: syz [ 241.549575][ T6335] usb 1-1: SerialNumber: syz [ 241.549731][ T26] usb 6-1: SerialNumber: syz [ 241.612070][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 241.832310][ T6343] usb 6-1: USB disconnect, device number 7 [ 242.230904][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.663678][ T6335] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 242.669347][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 242.883477][ T26] usb 1-1: USB disconnect, device number 6 [ 242.906375][ T6335] ath9k_htc: Failed to initialize the device [ 242.913423][ T26] usb 1-1: ath9k_htc: USB layer deinitialized 08:00:24 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0xbf6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x850000) 08:00:24 executing program 1: add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "ed072a58b89e9cab5a7f8e36e18c888eed5ee61142c3191f309fd66d96a891d78491b54e79a625d1b992a7373869b4004e31967639ddb68bd45fad02430c3e21"}, 0x48, 0xfffffffffffffffe) 08:00:24 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001280), &(0x7f0000001300)=0x80) 08:00:24 executing program 5: mount$fuseblk(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000022c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@fsname}, {@dont_hash}]}}) 08:00:24 executing program 1: getrusage(0x0, &(0x7f00000000c0)) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 243.453828][ T27] audit: type=1400 audit(1653379224.171:282): avc: denied { getopt } for pid=7121 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 08:00:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 08:00:24 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0xee01, 0x0, 0xffffffffffffffff}}) 08:00:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) 08:00:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4031072, 0xffffffffffffffff, 0x0) [ 243.576113][ T27] audit: type=1400 audit(1653379224.291:283): avc: denied { map } for pid=7134 comm="syz-executor.4" path="socket:[42843]" dev="sockfs" ino=42843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 243.795229][ T6335] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 244.081203][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 244.880861][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 244.889930][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.898323][ T6335] usb 1-1: Product: syz [ 244.902765][ T6335] usb 1-1: Manufacturer: syz [ 244.907364][ T6335] usb 1-1: SerialNumber: syz [ 244.951719][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 245.520747][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 245.963953][ T6344] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 245.969620][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 246.171683][ T26] usb 1-1: USB disconnect, device number 7 [ 246.184283][ T6344] ath9k_htc: Failed to initialize the device [ 246.190458][ T26] usb 1-1: ath9k_htc: USB layer deinitialized 08:00:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:27 executing program 5: setresuid(0x0, 0xee01, 0xffffffffffffffff) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) setresuid(r0, 0x0, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioprio_set$uid(0x3, r1, 0x0) 08:00:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x40087602, 0x0) 08:00:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0xc0045878, 0x0) 08:00:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4031072, 0xffffffffffffffff, 0x0) 08:00:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x12}, @val={0xc}}}}, 0x28}}, 0x0) 08:00:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4031072, 0xffffffffffffffff, 0x0) 08:00:27 executing program 5: pipe2(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000077480)={0x0, [], 0x0, "8f88aacec13d5a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000079480)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000007b680)={0x0, 0x0, "6cbc9cc9fbb75c1ab6302a27a2df8937fa44e0964bf4ae06fa0b133e38fd6f081e4be12fdc5e495ac4e1535a47a02f519173537a599dc90f62a3ff3eddd874bb0eaa4eb180dbfe92623f002fa6bf7aa4f5198fddd930b1895d5bc326cb6629a9f7036cf69c7493a45692b797350a690c6f09833f88a19390aeae5fc4972a6c626f0b37f46b2ab7a329fc5a597532761213955587c25daeee8303707198be259e56b9111e14cbb297c2477138abbaed85780e1af55eba734d9eef5e3fb2b8acfef4bb116c28968bbb56266a9905a1f8b184b7d7254cac1eea6803c7e5d43667347ba35b8cba16ce9d49adf003d66722f39fbd393aa887ee2a7622f2c3d8b274e8", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007c680)={0x0, [], 0x0, "d624671c3a680f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007e680)={0x0, [], 0x0, "c2a985eff421da"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000080680)={0x0, [], 0x0, "001600d1f82281"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000082880)={0x0, [], 0x0, "1ba9a7e5a4c9b1"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 08:00:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 08:00:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x29, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 08:00:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4031072, 0xffffffffffffffff, 0x0) [ 246.837263][ T7159] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 246.941756][ T7167] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 246.998943][ T7167] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 247.130841][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 247.430993][ T26] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 248.321150][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.330228][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.338854][ T26] usb 1-1: Product: syz [ 248.343326][ T26] usb 1-1: Manufacturer: syz [ 248.347923][ T26] usb 1-1: SerialNumber: syz [ 248.392767][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.031034][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.483103][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 249.489793][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 249.688387][ T3695] usb 1-1: USB disconnect, device number 8 [ 249.699039][ T3707] ath9k_htc: Failed to initialize the device [ 249.707092][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized 08:00:30 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:30 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x171843, 0x0) 08:00:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 08:00:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x1ffff000, 0x0, 0x11, r0, 0x0) 08:00:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000040)={0x14, 0x0, 0x0}) 08:00:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 08:00:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 08:00:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x74) [ 250.221702][ T27] audit: type=1400 audit(1653379230.941:284): avc: denied { read } for pid=7171 comm="syz-executor.2" name="usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 08:00:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 08:00:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x108813, r0, 0x0) [ 250.341009][ T27] audit: type=1400 audit(1653379230.941:285): avc: denied { open } for pid=7171 comm="syz-executor.2" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.428965][ T27] audit: type=1400 audit(1653379230.941:286): avc: denied { map } for pid=7171 comm="syz-executor.2" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.523674][ T27] audit: type=1400 audit(1653379230.981:287): avc: denied { ioctl } for pid=7172 comm="syz-executor.5" path="/dev/input/event0" dev="devtmpfs" ino=831 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 250.559698][ T6340] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 250.871394][ T6340] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 251.690964][ T6340] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 251.700007][ T6340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.708195][ T6340] usb 1-1: Product: syz [ 251.712448][ T6340] usb 1-1: Manufacturer: syz [ 251.717046][ T6340] usb 1-1: SerialNumber: syz [ 251.761765][ T6340] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.330934][ T6340] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 252.773256][ T6340] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 252.778943][ T6340] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 252.978726][ T6343] usb 1-1: USB disconnect, device number 9 [ 252.992858][ T6340] ath9k_htc: Failed to initialize the device [ 252.999067][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized 08:00:34 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) 08:00:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "75def1c1f8cb9abc"}, 0x1}}]}, 0x2c}}, 0x0) 08:00:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff000, 0x1, 0x11, r0, 0x0) 08:00:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40044590, &(0x7f00000001c0)=""/69) 08:00:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 08:00:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:34 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 08:00:34 executing program 2: io_setup(0x1f, &(0x7f0000000040)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 08:00:34 executing program 4: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x200000, 0x0, 0x4024031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 08:00:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xc, 0x0, &(0x7f00000011c0)) 08:00:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 253.621723][ T27] audit: type=1400 audit(1653379234.341:288): avc: denied { create } for pid=7205 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 08:00:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e008bef7b25802cc64efa193f7ee8adf5f34640bd"], 0x20}}, 0x0) [ 253.665377][ T27] audit: type=1400 audit(1653379234.341:289): avc: denied { read } for pid=7205 comm="syz-executor.2" path="socket:[42922]" dev="sockfs" ino=42922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.755970][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.871644][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.170938][ T26] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 255.050917][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 255.059994][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.068657][ T26] usb 1-1: Product: syz [ 255.073158][ T26] usb 1-1: Manufacturer: syz [ 255.077757][ T26] usb 1-1: SerialNumber: syz [ 255.125699][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 255.352893][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.359241][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.740746][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.150309][ T6335] usb 1-1: USB disconnect, device number 10 08:00:37 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee6f04a0e8afc22f732ef713b239f8821971e5228f586dba49c25f66742b956de2895ce24a36046ceb836e6284e2d77b75cebb668bcce475743666a7ca02d93d9ec10319d0bf77f9e6264e22fa3fe33a44bfd14973c69ae67d5b2e3eec7a342afadd823183e7a15c2e66b5f4e57004eb3d893e5336253e0c217b804ec5c3c1e2df151c54bbe02905b3b0b0f761d9401a583ce4f49d122130fee7ee5a5dccf3c4ced20b66ecf918c98f6f26fe962e1900970a45bcd39bc2939b66ffe6926ac5dfad25c8e9d4006b06ca3f13c3bd14a70d26878b380ec723be29cde95ffa76f2fd584230607abb18d004ad536280c0c8e6be3f0b1ca457ee172c3c3865b59f83e4c75cba8226aa5806e5d7c817aa7c6d3e3ea097af99eaf7fccc30a492353480c4f595a3d84a4af62c487ca88cba7923a78828bf13b7ff6bcbb0f4a5fd87bbf5d49babde7bd104d8641ca81a764cb5922a1851d02a91764a5b9b6cbf897744f56994d892a4e7cbc378b0727f90a1fe56c528b7e1000bff9d4a5ba6269143a748745459bf0234d0d9dbd43b86b63fb10137436ceae610a6a931679352ca2ce091d59bc6208bf543a5989232a3ba9704c998dae570c0126e778b0405ee7494fd114eeabbdacab6f2d52679cca20ff37abca49bcf89fad4048275be2b05107c6e4dd86df7122f105e8ab47940f0f01d1be4a65f21317e56ede376294cd0e96abfe7bab46bff4d256cc09b10f28ba46b2927c60dac271e9fb72e08ed1240517f99cc3e80d8f336043a5dc14af71a9d0c0bd1959d2ccfdd7cf2488e2da0a5c28d60429f30999e9e0490fe217fa265d72f8d5cfb274413ba39bd651aa8482a84c272a3819a1cf2b9d954a6be89937f71c270c60fdb7afa22fc54850d3b0fd9f3bb376c384e859a2b37106b88cdca09aa741a22be4310bf4bcf19454e113ae350b918efa0f84685bba5879f9057b5b54c0a0f1bd5946c0f9452902923f3c1719035cb2fc4765d17f4a8b3caa6f2bafad4e498e94ed7290f11f0f4fff7a2f91a67d3b45d9bb9b72344dbfd0935256e2267eabd88a61552ecb041318f899b689b4dbc11e0b2796a871d786eb673e64f4a671884c07ec5f928d3e8e7005c010fd81e0e3009d5ebd696fb1f0abef84700d5fd6626a7f3c60b1002fe28f9878e33561514fe082ad7ce8d4a9995c24c3c81022582564700df3cb643f5f3a72a5db8071b77b2722357e2c7396492c34af27160d40030b1e12232cc8ba3d15072ee2e26b4a64335bba47e53456cf381ce89e39b936ddfdef4610e98522ba2dc1b7d73c8906669eebe6a218c914fa87e62f62bb030064c4307f2c8711732f0e23bfc163e2d910079b0ae2710f6601508d9957251138f8b90577c585d22f345fe264d184c3d7b2d0d3ea8962c44e1cad0d33328b05919d4eba008a49e34eb852f70c877394e487b92246c35dde2f4e7c922bc3f22325286a9ba98e92a9a8bf0fabb79d4c3df6429d2ab3a9fc4dec6be0e7928a31fcc99cbd4a5a474d16affa17f7c244d10526cb4ff14ebd93a216189dc73c87f237430f8a5684b084de3377d0beb980d6b6ce56a11fb6cde89dbafb68eb81de95c72449e787fd07f0066f1939ab15d32c2df6ecd6e31ba1568d0c601929b6909cb32"}]}) 08:00:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x4, 0xb}, @val={0xc}}}}, 0x7ffffffff000}, 0x10}, 0x0) 08:00:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a40000001200010226bd7000fbdbdf250d1872fe", @ANYRES32=0x0, @ANYBLOB="1400060036000000090000007200000000000000080012"], 0xa4}}, 0x0) 08:00:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x1ffff000, 0x1, 0x11, r0, 0x0) 08:00:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x1}, 0x18}, 0x3d}, 0x0) 08:00:37 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x1e, &(0x7f0000000200)=@string={0x1e, 0x3, "4b146a45d07d8418dddefac7c6357be4d601d225da519c0bb2db4bff"}}]}) 08:00:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 08:00:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "75def1c1f8cb9abc"}, 0x1}}]}, 0x34}}, 0x0) [ 256.695342][ T7227] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.730247][ T7227] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. 08:00:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 256.770308][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.799950][ T7233] binder_alloc: binder_alloc_mmap_handler: 7231 20ffa000-20ffe000 already mapped failed -16 [ 256.907226][ T7241] binder_alloc: binder_alloc_mmap_handler: 7239 20ffc000-21000000 already mapped failed -16 [ 257.040882][ T3707] usb 1-1: Service connection timeout for: 256 [ 257.047076][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 257.055357][ T3707] ath9k_htc: Failed to initialize the device [ 257.064929][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized [ 257.080835][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.440844][ T6335] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 257.493464][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.503187][ T26] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 257.710926][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 257.720128][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.720963][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 257.728778][ T26] usb 2-1: Product: syz [ 257.740492][ T26] usb 2-1: Manufacturer: ᑋ䕪緐ᢄ쟺㗆ǖ◒凚ஜｋ [ 257.748505][ T26] usb 2-1: SerialNumber: syz [ 258.051851][ T26] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 258.067316][ T26] usb 2-1: USB disconnect, device number 5 [ 258.082040][ T26] usblp0: removed [ 258.562785][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.572000][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.580016][ T6335] usb 1-1: Product: syz [ 258.585174][ T6335] usb 1-1: Manufacturer: syz [ 258.589784][ T6335] usb 1-1: SerialNumber: syz [ 258.642866][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.230896][ T6340] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.642193][ T6343] usb 1-1: USB disconnect, device number 11 08:00:40 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee6f04a0e8afc22f732ef713b239f8821971e5228f586dba49c25f66742b956de2895ce24a36046ceb836e6284e2d77b75cebb668bcce475743666a7ca02d93d9ec10319d0bf77f9e6264e22fa3fe33a44bfd14973c69ae67d5b2e3eec7a342afadd823183e7a15c2e66b5f4e57004eb3d893e5336253e0c217b804ec5c3c1e2df151c54bbe02905b3b0b0f761d9401a583ce4f49d122130fee7ee5a5dccf3c4ced20b66ecf918c98f6f26fe962e1900970a45bcd39bc2939b66ffe6926ac5dfad25c8e9d4006b06ca3f13c3bd14a70d26878b380ec723be29cde95ffa76f2fd584230607abb18d004ad536280c0c8e6be3f0b1ca457ee172c3c3865b59f83e4c75cba8226aa5806e5d7c817aa7c6d3e3ea097af99eaf7fccc30a492353480c4f595a3d84a4af62c487ca88cba7923a78828bf13b7ff6bcbb0f4a5fd87bbf5d49babde7bd104d8641ca81a764cb5922a1851d02a91764a5b9b6cbf897744f56994d892a4e7cbc378b0727f90a1fe56c528b7e1000bff9d4a5ba6269143a748745459bf0234d0d9dbd43b86b63fb10137436ceae610a6a931679352ca2ce091d59bc6208bf543a5989232a3ba9704c998dae570c0126e778b0405ee7494fd114eeabbdacab6f2d52679cca20ff37abca49bcf89fad4048275be2b05107c6e4dd86df7122f105e8ab47940f0f01d1be4a65f21317e56ede376294cd0e96abfe7bab46bff4d256cc09b10f28ba46b2927c60dac271e9fb72e08ed1240517f99cc3e80d8f336043a5dc14af71a9d0c0bd1959d2ccfdd7cf2488e2da0a5c28d60429f30999e9e0490fe217fa265d72f8d5cfb274413ba39bd651aa8482a84c272a3819a1cf2b9d954a6be89937f71c270c60fdb7afa22fc54850d3b0fd9f3bb376c384e859a2b37106b88cdca09aa741a22be4310bf4bcf19454e113ae350b918efa0f84685bba5879f9057b5b54c0a0f1bd5946c0f9452902923f3c1719035cb2fc4765d17f4a8b3caa6f2bafad4e498e94ed7290f11f0f4fff7a2f91a67d3b45d9bb9b72344dbfd0935256e2267eabd88a61552ecb041318f899b689b4dbc11e0b2796a871d786eb673e64f4a671884c07ec5f928d3e8e7005c010fd81e0e3009d5ebd696fb1f0abef84700d5fd6626a7f3c60b1002fe28f9878e33561514fe082ad7ce8d4a9995c24c3c81022582564700df3cb643f5f3a72a5db8071b77b2722357e2c7396492c34af27160d40030b1e12232cc8ba3d15072ee2e26b4a64335bba47e53456cf381ce89e39b936ddfdef4610e98522ba2dc1b7d73c8906669eebe6a218c914fa87e62f62bb030064c4307f2c8711732f0e23bfc163e2d910079b0ae2710f6601508d9957251138f8b90577c585d22f345fe264d184c3d7b2d0d3ea8962c44e1cad0d33328b05919d4eba008a49e34eb852f70c877394e487b92246c35dde2f4e7c922bc3f22325286a9ba98e92a9a8bf0fabb79d4c3df6429d2ab3a9fc4dec6be0e7928a31fcc99cbd4a5a474d16affa17f7c244d10526cb4ff14ebd93a216189dc73c87f237430f8a5684b084de3377d0beb980d6b6ce56a11fb6cde89dbafb68eb81de95c72449e787fd07f0066f1939ab15d32c2df6ecd6e31ba1568d0c601929b6909cb32"}]}) 08:00:40 executing program 5: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\"']) 08:00:40 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xf0ff7f}}, 0x101d0) 08:00:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:40 executing program 4: setresuid(0x0, 0xee01, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/59, 0x3b}], 0x1, 0x0) 08:00:40 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x280a}}, {0x1c, &(0x7f0000000200)=@string={0x1c, 0x3, "4b146a45d07d8418dddefac7c6357be4d601d225da519c0bb2db"}}]}) 08:00:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002100fd3f0000000000000000020000"], 0x20}}, 0x0) 08:00:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x29, 0x0, 0x0, {{0x7}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 08:00:40 executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:41 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x42041, 0x0) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x0) 08:00:41 executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 260.274245][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 260.460928][ T6344] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.498272][ T6340] usb 1-1: Service connection timeout for: 256 [ 260.504862][ T6340] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 260.519021][ T6340] ath9k_htc: Failed to initialize the device [ 260.526168][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized [ 260.890894][ T6344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.900568][ T6344] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 260.910298][ T6344] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.923225][ T6343] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 261.110967][ T6344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.120148][ T6344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.128492][ T6344] usb 2-1: Product: syz [ 261.133124][ T6344] usb 2-1: Manufacturer: ᑋ䕪緐ᢄ쟺㗆ǖ◒凚ஜ [ 261.140305][ T6344] usb 2-1: SerialNumber: syz [ 261.250809][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 261.409403][ T3707] usb 2-1: USB disconnect, device number 6 [ 262.160947][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.170016][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.178062][ T6343] usb 1-1: Product: syz [ 262.182349][ T6343] usb 1-1: Manufacturer: syz [ 262.187674][ T6343] usb 1-1: SerialNumber: syz [ 262.239966][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 262.830832][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 263.247631][ T3716] usb 1-1: USB disconnect, device number 12 08:00:44 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3) 08:00:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002100fd3f0000000000000000020000"], 0x20}}, 0x0) 08:00:44 executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:44 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0xf9}}]}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x1e, &(0x7f0000000200)=@string={0x1e, 0x3, "4b146a45d07d8418dddefac7c6357be4d601d225da519c0bb2db4bff"}}]}) 08:00:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1a, 0x0, &(0x7f00000011c0)) 08:00:44 executing program 2: syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 08:00:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x11, 0x0, &(0x7f00000011c0)) 08:00:44 executing program 3: r0 = socket(0x0, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 263.808663][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:00:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002100fd3f0000000000000000020000"], 0x20}}, 0x0) 08:00:44 executing program 1: socket$xdp(0xa, 0x3, 0x0) 08:00:44 executing program 3: r0 = socket(0x0, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 263.962045][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 264.060990][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 264.070779][ T6343] usb 1-1: Service connection timeout for: 256 [ 264.078234][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 264.098164][ T6343] ath9k_htc: Failed to initialize the device [ 264.113775][ T3716] usb 1-1: ath9k_htc: USB layer deinitialized [ 264.470976][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.480718][ T26] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.500939][ T3716] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 264.650858][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 264.659979][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.668286][ T26] usb 5-1: Product: syz [ 264.672803][ T26] usb 5-1: Manufacturer: ᑋ䕪緐ᢄ쟺㗆ǖ◒凚ஜｋ [ 264.680232][ T26] usb 5-1: SerialNumber: syz [ 264.800953][ T3716] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 264.934720][ T26] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 264.948691][ T26] usb 5-1: USB disconnect, device number 5 [ 264.968076][ T26] usblp0: removed [ 265.740872][ T3716] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.749943][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.758298][ T3716] usb 1-1: Product: syz [ 265.762693][ T3716] usb 1-1: Manufacturer: syz [ 265.769255][ T3716] usb 1-1: SerialNumber: syz [ 265.825849][ T3716] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 266.450880][ T3716] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 266.865271][ T3716] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 266.871259][ T3716] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 267.069648][ T6336] usb 1-1: USB disconnect, device number 13 [ 267.084897][ T3716] ath9k_htc: Failed to initialize the device [ 267.091126][ T6336] usb 1-1: ath9k_htc: USB layer deinitialized 08:00:48 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e008bef7b25802cc6a8daf7e8a254e24efa193f7e"], 0x20}}, 0x0) 08:00:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002100fd3f0000000000000000020000"], 0x20}}, 0x0) 08:00:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4024031, 0xffffffffffffffff, 0x0) 08:00:48 executing program 3: r0 = socket(0x0, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:48 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f0000000780)=@framed={{}, [@func]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:00:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f00000011c0)) 08:00:48 executing program 1: select(0x40, &(0x7f0000000280)={0x200}, &(0x7f00000002c0)={0x4}, 0x0, 0x0) [ 267.603306][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 267.650707][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:00:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8981, 0x0) 08:00:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x2d) 08:00:48 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@can_newroute={0x14, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x9}}, 0x14}}, 0x0) [ 267.910775][ T3695] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 268.190972][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 269.090865][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.099926][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.108076][ T3695] usb 1-1: Product: syz [ 269.112524][ T3695] usb 1-1: Manufacturer: syz [ 269.117124][ T3695] usb 1-1: SerialNumber: syz [ 269.161693][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.740872][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.173537][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 270.179219][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 270.380745][ T6335] usb 1-1: USB disconnect, device number 14 [ 270.404261][ T3695] ath9k_htc: Failed to initialize the device [ 270.410477][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized 08:00:51 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2903000000000000000032"], 0x28}}, 0x0) 08:00:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x7fffdf004000, 0x1, 0x11, r0, 0x0) 08:00:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290300000000000000001f"], 0x28}}, 0x0) 08:00:51 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:51 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x1e, &(0x7f0000000200)=@string={0x1e, 0x3, "4b146a45d07d8418dddefac7c6357be4d601d225da519c0bb2db4bff"}}]}) 08:00:51 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delrule={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 08:00:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1d, 0x7, 0x0, 0x0, {}, [@NDA_FLAGS_EXT={0x8}]}, 0x24}}, 0x0) [ 270.937608][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 08:00:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x32) 08:00:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x0, 0x0) 08:00:51 executing program 5: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) [ 271.230801][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 271.238383][ T3695] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 271.541188][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 271.620940][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 271.791063][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 271.800136][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.814361][ T26] usb 2-1: Product: syz [ 271.818528][ T26] usb 2-1: Manufacturer: ᑋ䕪緐ᢄ쟺㗆ǖ◒凚ஜｋ [ 271.826906][ T26] usb 2-1: SerialNumber: syz [ 272.084520][ T6343] usb 2-1: USB disconnect, device number 7 [ 272.400788][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.409951][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.424900][ T3695] usb 1-1: Product: syz [ 272.429087][ T3695] usb 1-1: Manufacturer: syz [ 272.434074][ T3695] usb 1-1: SerialNumber: syz [ 272.471789][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 272.790927][ T3716] Bluetooth: hci4: command 0x0406 tx timeout [ 272.790941][ T6343] Bluetooth: hci5: command 0x0406 tx timeout [ 272.790986][ T6343] Bluetooth: hci1: command 0x0406 tx timeout [ 272.796972][ T3716] Bluetooth: hci3: command 0x0406 tx timeout [ 272.797027][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 272.804489][ T6343] Bluetooth: hci2: command 0x0406 tx timeout [ 273.090804][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 273.545117][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 273.551681][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 273.755748][ T6335] usb 1-1: USB disconnect, device number 15 [ 273.774027][ T3695] ath9k_htc: Failed to initialize the device [ 273.780206][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized 08:00:54 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:54 executing program 2: setresuid(0x0, 0xee01, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42340, 0x0) 08:00:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 08:00:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGNAME(r0, 0x541b, 0x0) 08:00:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002000fd3f000000000000000002"], 0x20}}, 0x0) 08:00:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x18, 0x6a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) [ 274.300882][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.305752][ T7358] binder_alloc: binder_alloc_mmap_handler: 7351 20ffa000-20ffe000 already mapped failed -16 08:00:55 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 274.337140][ T27] audit: type=1400 audit(1653379255.051:290): avc: denied { write } for pid=7350 comm="syz-executor.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 08:00:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x2a01, 0x4800}, @val={0xc}}}}, 0x28}}, 0x0) 08:00:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, 0x0) 08:00:55 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 274.436901][ T27] audit: type=1400 audit(1653379255.151:291): avc: denied { getopt } for pid=7365 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.519592][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.630791][ T6335] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 274.930860][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 275.730821][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 275.739897][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.748473][ T6335] usb 1-1: Product: syz [ 275.752971][ T6335] usb 1-1: Manufacturer: syz [ 275.757558][ T6335] usb 1-1: SerialNumber: syz [ 275.812156][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.380856][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.813074][ T6340] usb 1-1: USB disconnect, device number 16 08:00:58 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:00:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setresuid(0x0, 0x0, 0x0) 08:00:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 08:00:58 executing program 4: setresuid(0x0, 0xee01, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 08:00:58 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 08:00:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:00:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "75def1c1f8cb9abc"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "d8cafa6a92c184378215b5806b1a4e44fd6c40e8"}}]}, 0x14c}}, 0x0) [ 277.357851][ T27] audit: type=1400 audit(1653379258.071:292): avc: denied { write } for pid=7374 comm="syz-executor.1" name="usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 08:00:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) flistxattr(r0, 0x0, 0x0) [ 277.430875][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 277.438191][ T6335] ath9k_htc: Failed to initialize the device 08:00:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x20013, r0, 0x0) 08:00:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000080005000206feff15000300010000e00102000033b57de127b3ccc3030000001e0106"], 0x154}}, 0x0) 08:00:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 277.463406][ T27] audit: type=1400 audit(1653379258.101:293): avc: denied { ioctl } for pid=7374 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 277.486462][ T6340] usb 1-1: ath9k_htc: USB layer deinitialized [ 277.860716][ T6340] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 278.151091][ T6340] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 278.962160][ T6340] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.971318][ T6340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.979834][ T6340] usb 1-1: Product: syz [ 278.984350][ T6340] usb 1-1: Manufacturer: syz [ 278.988963][ T6340] usb 1-1: SerialNumber: syz [ 279.042149][ T6340] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 279.610886][ T6340] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.035574][ T6344] usb 1-1: USB disconnect, device number 17 08:01:01 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:01 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300, 0x11, r0, 0x0) 08:01:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x10) 08:01:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000780), 0x84a, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000007c0)) 08:01:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setresuid(0x0, 0x0, 0x0) 08:01:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:01 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x41, &(0x7f0000000600)={0x0, 0x0, 0xfffffff9}) 08:01:01 executing program 1: add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "ed072a58b89e9cab5a7f8e36e18c888eed5ee61142c3191f309fd66d96a891d78491b54e79a625d1b992a7373869b4004e31967639ddb68bd45fad02430c3e21"}, 0x48, 0xfffffffffffffffe) 08:01:01 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) [ 280.630732][ T6340] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 280.641829][ T6340] ath9k_htc: Failed to initialize the device 08:01:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x29, 0x0, 0x0, {{0x2}, {@val={0x14}, @val={0xc}}}}, 0x28}}, 0x0) [ 280.673816][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 280.785256][ T7425] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 281.067063][ T6344] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 281.350845][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 282.170829][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 282.179981][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.188183][ T6344] usb 1-1: Product: syz [ 282.192565][ T6344] usb 1-1: Manufacturer: syz [ 282.197356][ T6344] usb 1-1: SerialNumber: syz [ 282.241532][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 282.820764][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 283.249238][ T3707] usb 1-1: USB disconnect, device number 18 08:01:04 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0x20005a00) 08:01:04 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:01:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x29, 0x0, 0x0, {{0x2}, {@val={0x8, 0x5}, @val={0xc}}}}, 0x28}}, 0x0) 08:01:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setresuid(0x0, 0x0, 0x0) 08:01:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) 08:01:04 executing program 4: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x200000, 0x0, 0x4024031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 08:01:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001e008bef7b25802cc64efa193f"], 0x20}}, 0x0) 08:01:04 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f0000000600)={0x0, 0x0, 0xfffffff9}) [ 283.920819][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 283.932494][ T6344] ath9k_htc: Failed to initialize the device 08:01:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 283.965355][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 283.978794][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:05 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:05 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x7, &(0x7f0000000600)={0x0, 0x0, 0xfffffffe}) 08:01:05 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0xa00000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 08:01:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xd14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) 08:01:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x2a458cbf}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setresuid(0x0, 0x0, 0x0) 08:01:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:05 executing program 4: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1}, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 08:01:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x29, 0x0, 0x0, {{0x2}, {@val={0x14, 0x8800}, @val={0xc}}}}, 0x28}}, 0x0) 08:01:05 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000004c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 08:01:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x24000050) 08:01:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000005e008bef61ed4d049e7f3bbeb87c120b20d43636ab"], 0x20}}, 0x0) [ 284.658956][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:01:05 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000100011092bfd7000fbdbdf250000000008"], 0x88}}, 0x0) 08:01:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:05 executing program 4: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1}, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={[0x8000000000000000]}, 0x8}) 08:01:05 executing program 5: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1}, &(0x7f00000002c0)={0x8001}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x8000000000000000]}, 0x8}) [ 284.976155][ T7486] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 08:01:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, 0x0) 08:01:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x8, 0x0, &(0x7f00000011c0)) 08:01:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) 08:01:05 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f0000000600)={0x0, 0x0, 0xfffffff9}) 08:01:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x20000007, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4024031, 0xffffffffffffffff, 0x0) 08:01:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:06 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xa031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) 08:01:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@multicast2}}]}, 0x50}}, 0x0) 08:01:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, r0) 08:01:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x8) 08:01:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000003a008bef7b25802cc64efa193f"], 0x20}}, 0x0) 08:01:06 executing program 4: setresuid(0x0, 0xee01, 0xffffffffffffffff) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000380)) setresuid(0x0, r0, 0x0) 08:01:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 08:01:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:06 executing program 5: mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) 08:01:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x1e) 08:01:06 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:06 executing program 5: setresuid(0x0, 0xee01, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000200)={'wlan1\x00'}) 08:01:06 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 08:01:06 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f64a2, 0x0) 08:01:06 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x70, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x1e, &(0x7f0000000200)=@string={0x1e, 0x3, "4b146a45d07d8418dddefac7c6357be4d601d225da519c0bb2db4bff"}}]}) 08:01:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x76) 08:01:06 executing program 5: setresuid(0x0, 0xee01, 0xffffffffffffffff) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 08:01:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a40000001200010226bd7000fbdbdf250d1872fe", @ANYRES32=0x0, @ANYBLOB="140006003600000009000000720000000000000008000a"], 0xa4}}, 0x0) 08:01:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 286.207622][ T27] audit: type=1400 audit(1653379266.921:294): avc: denied { write } for pid=7532 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 08:01:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), r0) [ 286.331179][ T7549] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.367435][ T7549] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.490770][ T3695] usb 2-1: new high-speed USB device number 8 using dummy_hcd 08:01:07 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), 0x4) 08:01:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:07 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dm_multipath', 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 08:01:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x31b5e4bb0fe882e4}, 0x48) [ 286.898462][ T3695] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.908241][ T3695] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.923001][ T3695] usb 2-1: config 1 interface 0 has no altsetting 0 [ 287.100888][ T3695] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 287.109954][ T3695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.118024][ T3695] usb 2-1: Product: syz [ 287.122292][ T3695] usb 2-1: Manufacturer: ᑋ䕪緐ᢄ쟺㗆ǖ◒凚ஜｋ [ 287.129678][ T3695] usb 2-1: SerialNumber: syz [ 287.403516][ T3695] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 287.421870][ T3695] usb 2-1: USB disconnect, device number 8 [ 287.437764][ T3695] usblp0: removed 08:01:08 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) 08:01:08 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) 08:01:08 executing program 5: r0 = syz_io_uring_setup(0x63b7, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) 08:01:08 executing program 2: syz_io_uring_setup(0x25db, &(0x7f0000000500)={0x0, 0xc5d8, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000580)) 08:01:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:08 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee6f04a0e8afc22f732ef713b239f8821971e5228f586dba49c25f66742b956de2895ce24a36046ceb836e6284e2d77b75cebb668bcce475743666a7ca02d93d9ec10319d0bf77f9e6264e22fa3fe33a44bfd14973c69ae67d5b2e3eec7a342afadd823183e7a15c2e66b5f4e57004eb3d893e5336253e0c217b804ec5c3c1e2df151c54bbe02905b3b0b0f761d9401a583ce4f49d122130fee7ee5a5dccf3c4ced20b66ecf918c98f6f26fe962e1900970a45bcd39bc2939b66ffe6926ac5dfad25c8e9d4006b06ca3f13c3bd14a70d26878b380ec723be29cde95ffa76f2fd584230607abb18d004ad536280c0c8e6be3f0b1ca457ee172c3c3865b59f83e4c75cba8226aa5806e5d7c817aa7c6d3e3ea097af99eaf7fccc30a492353480c4f595a3d84a4af62c487ca88cba7923a78828bf13b7ff6bcbb0f4a5fd87bbf5d49babde7bd104d8641ca81a764cb5922a1851d02a91764a5b9b6cbf897744f56994d892a4e7cbc378b0727f90a1fe56c528b7e1000bff9d4a5ba6269143a748745459bf0234d0d9dbd43b86b63fb10137436ceae610a6a931679352ca2ce091d59bc6208bf543a5989232a3ba9704c998dae570c0126e778b0405ee7494fd114eeabbdacab6f2d52679cca20ff37abca49bcf89fad4048275be2b05107c6e4dd86df7122f105e8ab47940f0f01d1be4a65f21317e56ede376294cd0e96abfe7bab46bff4d256cc09b10f28ba46b2927c60dac271e9fb72e08ed1240517f99cc3e80d8f336043a5dc14af71a9d0c0bd1959d2ccfdd7cf2488e2da0a5c28d60429f30999e9e0490fe217fa265d72f8d5cfb274413ba39bd651aa8482a84c272a3819a1cf2b9d954a6be89937f71c270c60fdb7afa22fc54850d3b0fd9f3bb376c384e859a2b37106b88cdca09aa741a22be4310bf4bcf19454e113ae350b918efa0f84685bba5879f9057b5b54c0a0f1bd5946c0f9452902923f3c1719035cb2fc4765d17f4a8b3caa6f2bafad4e498e94ed7290f11f0f4fff7a2f91a67d3b45d9bb9b72344dbfd0935256e2267eabd88a61552ecb041318f899b689b4dbc11e0b2796a871d786eb673e64f4a671884c07ec5f928d3e8e7005c010fd81e0e3009d5ebd696fb1f0abef84700d5fd6626a7f3c60b1002fe28f9878e33561514fe082ad7ce8d4a9995c24c3c81022582564700df3cb643f5f3a72a5db8071b77b2722357e2c7396492c34af27160d40030b1e12232cc8ba3d15072ee2e26b4a64335bba47e53456cf381ce89e39b936ddfdef4610e98522ba2dc1b7d73c8906669eebe6a218c914fa87e62f62bb030064c4307f2c8711732f0e23bfc163e2d910079b0ae2710f6601508d9957251138f8b90577c585d22f345fe264d184c3d7b2d0d3ea8962c44e1cad0d33328b05919d4eba008a49e34eb852f70c877394e487b92246c35dde2f4e7c922bc3f22325286a9ba98e92a9a8bf0fabb79d4c3df6429d2ab3a9fc4dec6be0e7928a31fcc99cbd4a5a474d16affa17f7c244d10526cb4ff14ebd93a216189dc73c87f237430f8a5684b084de3377d0beb980d6b6ce56a11fb6cde89dbafb68eb81de95c72449e787fd07f0066f1939ab15d32c2df6ecd6e31ba1568d0c601929b6909cb32"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 08:01:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), 0x4) 08:01:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), 0x4) [ 288.000567][ T27] audit: type=1400 audit(1653379268.711:295): avc: denied { write } for pid=7574 comm="syz-executor.1" name="nvram" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 08:01:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7f0, 0xf0, 0x518, 0x0, 0x230, 0xf0, 0x720, 0x720, 0x720, 0x720, 0x720, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@dev}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@mcast1, @mcast2, [], [], 'bridge_slave_1\x00', 'vlan0\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}}]}, @HL={0x28}}, {{@ipv6={@private1, @dev, [], [], 'wg0\x00', 'ip6tnl0\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @loopback, @private2, @private1, @mcast1, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private0, @local, @dev, @mcast2]}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x850) 08:01:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:08 executing program 5: syz_io_uring_setup(0x10e5, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x50fe, &(0x7f0000000140), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 08:01:08 executing program 2: r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) read$char_usb(r1, &(0x7f0000000100)=""/169, 0xa9) sendfile(r0, r1, 0x0, 0x8) 08:01:08 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 288.097434][ T27] audit: type=1400 audit(1653379268.711:296): avc: denied { open } for pid=7574 comm="syz-executor.1" path="/dev/nvram" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 288.135379][ T7585] x_tables: duplicate underflow at hook 1 08:01:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 288.190879][ T6335] usb 1-1: new high-speed USB device number 19 using dummy_hcd 08:01:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gretap0\x00', 0x0}) [ 288.470963][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 289.300837][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.309916][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.318465][ T6335] usb 1-1: Product: syz [ 289.323392][ T6335] usb 1-1: Manufacturer: syz [ 289.328195][ T6335] usb 1-1: SerialNumber: syz [ 289.371644][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 289.940771][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 290.357607][ T6336] usb 1-1: USB disconnect, device number 19 08:01:11 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:11 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 08:01:11 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:01:11 executing program 2: io_uring_setup(0x3a22, &(0x7f0000002740)={0x0, 0x0, 0x2}) 08:01:11 executing program 1: bpf$BPF_LINK_CREATE_XDP(0x6, 0x0, 0x0) 08:01:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:11 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7f0, 0xf0, 0x518, 0x0, 0x230, 0xf0, 0x720, 0x720, 0x720, 0x720, 0x720, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}, 0x2e, 0x3e, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0xfffffffd, 0x3, 0x1, [0x0, 0x0, 0x0, 0x3, 0x200, 0x1, 0x6, 0x1, 0x2, 0x5, 0x8, 0x20]}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x89}}}, {{@ipv6={@mcast1, @mcast2, [0xffffffff, 0x0, 0xff, 0xff000000], [0xffffffff, 0xff], 'bridge_slave_1\x00', 'vlan0\x00', {0xff}, {}, 0x29, 0x1, 0x0, 0x18}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x81, 0xde2e, 0x56c2, 0x6, 0x6, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x6, 0xc9e9, 0xffff, 0x8000, 0x655f, 0x4, 0x1ff, 0x9276, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x857c, 0xffffffff, 0x0, 0x3ff, 0x2, 0x101, 0x8, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x73eb, 0x5, 0x1, 0x8, 0x3, 0x3, 0x67be80be, 0x1, 0xffffffff], 0x4, [{0xf0}, {0x81, 0x81, 0x5}, {0x36, 0x3f}, {0x2, 0x6, 0x3}], 0x0, 0x0, 0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x4, 0x71}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x101, [0x24c, 0x6], 0x6, 0x1, 0x6, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3f}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private0, @local, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2], 0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1b, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x850) syz_open_dev$vcsn(&(0x7f0000000980), 0x1, 0x2002) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000009c0)={'nat\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000]}, &(0x7f0000000a40)=0x54) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000ac0)={0x1, 0xf9, 0x1}) socket(0x2, 0x5, 0x0) 08:01:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) [ 290.888258][ T27] audit: type=1400 audit(1653379271.601:297): avc: denied { sqpoll } for pid=7599 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 08:01:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:11 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x23, 0x0, 0x0) 08:01:11 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000400)=@raw=[@jmp, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000480)='GPL\x00', 0x7, 0x9c, &(0x7f00000004c0)=""/156, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:01:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 291.017759][ T7614] x_tables: duplicate underflow at hook 1 [ 291.030802][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 291.037993][ T6335] ath9k_htc: Failed to initialize the device [ 291.065015][ T6336] usb 1-1: ath9k_htc: USB layer deinitialized [ 291.450726][ T6336] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 291.750780][ T6336] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 292.630838][ T6336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 292.639907][ T6336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.648182][ T6336] usb 1-1: Product: syz [ 292.652609][ T6336] usb 1-1: Manufacturer: syz [ 292.657205][ T6336] usb 1-1: SerialNumber: syz [ 292.701801][ T6336] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 293.310832][ T6336] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 293.747797][ T6344] usb 1-1: USB disconnect, device number 20 08:01:14 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 08:01:14 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8}) 08:01:14 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:01:14 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockdep', 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/143) 08:01:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:15 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x18, 0x0, 0x0) 08:01:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) 08:01:15 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x7, 0x0, 0x0) 08:01:15 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 08:01:15 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) 08:01:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 294.387742][ T27] audit: type=1400 audit(1653379275.101:298): avc: denied { getopt } for pid=7640 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.408304][ T6336] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 294.421385][ T6336] ath9k_htc: Failed to initialize the device [ 294.455287][ T27] audit: type=1400 audit(1653379275.171:299): avc: denied { ioctl } for pid=7642 comm="syz-executor.1" path="socket:[45347]" dev="sockfs" ino=45347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.468053][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized [ 294.890834][ T6344] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 295.191325][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 296.002016][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 296.011142][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.019134][ T6344] usb 1-1: Product: syz [ 296.024019][ T6344] usb 1-1: Manufacturer: syz [ 296.028633][ T6344] usb 1-1: SerialNumber: syz [ 296.071529][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 296.650749][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.077318][ T6340] usb 1-1: USB disconnect, device number 21 08:01:18 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee6f04a0e8afc22f732ef713b239f8821971e5228f586dba49c25f66742b956de2895ce24a36046ceb836e6284e2d77b75cebb668bcce475743666a7ca02d93d9ec10319d0bf77f9e6264e22fa3fe33a44bfd14973c69ae67d5b2e3eec7a342afadd823183e7a15c2e66b5f4e57004eb3d893e5336253e0c217b804ec5c3c1e2df151c54bbe02905b3b0b0f761d9401a583ce4f49d122130fee7ee5a5dccf3c4ced20b66ecf918c98f6f26fe962e1900970a45bcd39bc2939b66ffe6926ac5dfad25c8e9d4006b06ca3f13c3bd14a70d26878b380ec723be29cde95ffa76f2fd584230607abb18d004ad536280c0c8e6be3f0b1ca457ee172c3c3865b59f83e4c75cba8226aa5806e5d7c817aa7c6d3e3ea097af99eaf7fccc30a492353480c4f595a3d84a4af62c487ca88cba7923a78828bf13b7ff6bcbb0f4a5fd87bbf5d49babde7bd104d8641ca81a764cb5922a1851d02a91764a5b9b6cbf897744f56994d892a4e7cbc378b0727f90a1fe56c528b7e1000bff9d4a5ba6269143a748745459bf0234d0d9dbd43b86b63fb10137436ceae610a6a931679352ca2ce091d59bc6208bf543a5989232a3ba9704c998dae570c0126e778b0405ee7494fd114eeabbdacab6f2d52679cca20ff37abca49bcf89fad4048275be2b05107c6e4dd86df7122f105e8ab47940f0f01d1be4a65f21317e56ede376294cd0e96abfe7bab46bff4d256cc09b10f28ba46b2927c60dac271e9fb72e08ed1240517f99cc3e80d8f336043a5dc14af71a9d0c0bd1959d2ccfdd7cf2488e2da0a5c28d60429f30999e9e0490fe217fa265d72f8d5cfb274413ba39bd651aa8482a84c272a3819a1cf2b9d954a6be89937f71c270c60fdb7afa22fc54850d3b0fd9f3bb376c384e859a2b37106b88cdca09aa741a22be4310bf4bcf19454e113ae350b918efa0f84685bba5879f9057b5b54c0a0f1bd5946c0f9452902923f3c1719035cb2fc4765d17f4a8b3caa6f2bafad4e498e94ed7290f11f0f4fff7a2f91a67d3b45d9bb9b72344dbfd0935256e2267eabd88a61552ecb041318f899b689b4dbc11e0b2796a871d786eb673e64f4a671884c07ec5f928d3e8e7005c010fd81e0e3009d5ebd696fb1f0abef84700d5fd6626a7f3c60b1002fe28f9878e33561514fe082ad7ce8d4a9995c24c3c81022582564700df3cb643f5f3a72a5db8071b77b2722357e2c7396492c34af27160d40030b1e12232cc8ba3d15072ee2e26b4a64335bba47e53456cf381ce89e39b936ddfdef4610e98522ba2dc1b7d73c8906669eebe6a218c914fa87e62f62bb030064c4307f2c8711732f0e23bfc163e2d910079b0ae2710f6601508d9957251138f8b90577c585d22f345fe264d184c3d7b2d0d3ea8962c44e1cad0d33328b05919d4eba008a49e34eb852f70c877394e487b92246c35dde2f4e7c922bc3f22325286a9ba98e92a9a8bf0fabb79d4c3df6429d2ab3a9fc4dec6be0e7928a31fcc99cbd4a5a474d16affa17f7c244d10526cb4ff14ebd93a216189dc73c87f237430f8a5684b084de3377d0beb980d6b6ce56a11fb6cde89dbafb68eb81de95c72449e787fd07f0066f1939ab15d32c2df6ecd6e31ba1568d0c601929b6909cb32"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:18 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) 08:01:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x0, 0x0) getpgid(r0) syz_clone(0x45820000, &(0x7f0000000000)="33f2a5d2a02f0aff79749eb1717739a2cd08f5ec1313d38b8ec4dbb4", 0x1c, &(0x7f0000000040), 0x0, &(0x7f00000000c0)="cce844d8814938f4c3d6ec3cdce35c4c4f214e0384c2709f98955dfbbcbd1de07bc03dae6ae87fdfb4813292f88227fe23ae030f009db68b0cb4dcb2f61a89708f6f222f1e1811e3ec7a6f01b086ed9fbfe272ea75e8525990fbe921627a6667") 08:01:18 executing program 4: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) 08:01:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:18 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x8000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3fcd, &(0x7f0000000780)={0x0, 0xe71c, 0x8}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 08:01:18 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x4, &(0x7f0000000380)=@framed={{}, [@alu]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:01:18 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x0, 0x0) getpgid(r0) syz_clone(0x45820000, &(0x7f0000000000)="33f2a5d2a02f0aff79749eb1717739a2cd08f5ec1313d38b8ec4dbb449b00d9905dbfc780e537416e7720d9fe16f80a033501db7d596a6", 0x37, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="cce844d8814938f4c3d6ec3cdce35c4c4f214e0384c2709f98955dfbbcbd1de07bc03dae6ae87fdfb4813292f88227fe23ae030f009db68b0cb4dcb2f61a89708f6f222f1e1811e3ec7a6f01b086ed9fbfe272ea75e8525990fbe921627a66") 08:01:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:18 executing program 2: syz_io_uring_setup(0x7035, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3fcd, &(0x7f0000000780)={0x0, 0xe71c, 0x8}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000800), 0x0) [ 297.675745][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 297.693336][ T6344] ath9k_htc: Failed to initialize the device [ 297.712134][ T6340] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:01:18 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dm_multipath', 0x0, 0x0) read$FUSE(r0, 0x0, 0xf0ff7f00000000) [ 298.114119][ T6340] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 298.443191][ T6340] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 299.282617][ T6340] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.295498][ T6340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.309903][ T6340] usb 1-1: Product: syz [ 299.317844][ T6340] usb 1-1: Manufacturer: syz [ 299.328597][ T6340] usb 1-1: SerialNumber: syz [ 299.391802][ T6340] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 300.040851][ T6336] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 300.682596][ T6344] usb 1-1: USB disconnect, device number 22 [ 301.110918][ T6336] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 301.118010][ T6336] ath9k_htc: Failed to initialize the device [ 301.126522][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:21 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:21 executing program 4: write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002040)={0xa0, 0xffffffffffffffda, 0x0, {{0x2, 0x0, 0x1796, 0x0, 0x8, 0x0, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5}}, {0x0, 0x1d}}}, 0xa0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004440)={0x2020}, 0x2020) geteuid() ioprio_set$uid(0x3, 0x0, 0x4007) 08:01:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20050045) 08:01:21 executing program 1: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) 08:01:21 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000000080)={'wlan0\x00'}) 08:01:21 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "8bce1ba518b091ecd1dadbc9ce10d7429004692d15acff7d0ddb05bcc41341851185e6655517a26cbe96d539402f3ddff97697fc67a2b35009d788775595df52"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='.dead\x00', &(0x7f0000000180)) 08:01:21 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)) 08:01:22 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "8bce1ba518b091ecd1dadbc9ce10d7429004692d15acff7d0ddb05bcc41341851185e6655517a26cbe96d539402f3ddff97697fc67a2b35009d788775595df52"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) 08:01:22 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) [ 301.229362][ T27] audit: type=1400 audit(1653379281.941:300): avc: denied { ioctl } for pid=7682 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44753 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 08:01:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:22 executing program 2: r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) [ 301.710754][ T6344] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 302.030786][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 302.831058][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 302.841453][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.849474][ T6344] usb 1-1: Product: syz [ 302.853758][ T6344] usb 1-1: Manufacturer: syz [ 302.858361][ T6344] usb 1-1: SerialNumber: syz [ 302.914315][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 303.480777][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.106370][ T6343] usb 1-1: USB disconnect, device number 23 08:01:25 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x5bc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4b3, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:25 executing program 5: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) 08:01:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x401}, 0x14}}, 0x0) 08:01:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:25 executing program 4: getresgid(&(0x7f0000006800), &(0x7f0000006840), &(0x7f0000006880)) getresuid(&(0x7f0000007040), &(0x7f0000007080), &(0x7f00000070c0)) 08:01:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5", 0x31}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x1d70, 0x805, 0x0, 0x6) [ 304.550824][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 304.557770][ T6344] ath9k_htc: Failed to initialize the device [ 304.571219][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) 08:01:25 executing program 4: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000002880)={{&(0x7f0000ff8000/0x5000)=nil, 0x5000}}) 08:01:25 executing program 5: r0 = syz_usb_connect(0x0, 0x72b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201100385383f20d21989ffe4740102030109021907037f5d200809040c0604ffffff050921710f020122780c0905"], &(0x7f0000000300)={0x0, 0x0, 0x49, 0x0}) syz_usb_ep_read(r0, 0x6, 0x0, 0x0) 08:01:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:25 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x6080) 08:01:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230303000800050000000200a972e6"]) [ 304.849208][ T27] audit: type=1400 audit(1653379285.561:301): avc: denied { write } for pid=7723 comm="syz-executor.4" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 305.050734][ T6340] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 305.080766][ T6343] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 305.290784][ T6340] usb 6-1: Using ep0 maxpacket: 32 [ 305.360867][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 305.450839][ T6340] usb 6-1: unable to get BOS descriptor or descriptor too short [ 305.532097][ T6340] usb 6-1: config 127 has an invalid interface number: 12 but max is 2 [ 305.540392][ T6340] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 305.550951][ T6340] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 3 [ 305.559997][ T6340] usb 6-1: config 127 has no interface number 0 [ 305.566365][ T6340] usb 6-1: config 127 interface 12 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 305.577318][ T6340] usb 6-1: config 127 interface 12 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 305.590434][ T6340] usb 6-1: config 127 interface 12 has no altsetting 0 [ 305.750997][ T6340] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff89, bcdDevice=74.e4 [ 305.760074][ T6340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.768199][ T6340] usb 6-1: Product: syz [ 305.772685][ T6340] usb 6-1: Manufacturer: syz [ 305.777297][ T6340] usb 6-1: SerialNumber: syz [ 306.121922][ T6340] option 6-1:127.12: GSM modem (1-port) converter detected [ 306.146327][ T6340] usb 6-1: USB disconnect, device number 8 [ 306.158161][ T6340] option 6-1:127.12: device disconnected [ 306.170890][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.179916][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.190160][ T6343] usb 1-1: Product: syz [ 306.195836][ T6343] usb 1-1: Manufacturer: syz [ 306.200449][ T6343] usb 1-1: SerialNumber: syz [ 306.251666][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.830834][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.455754][ T6340] usb 1-1: USB disconnect, device number 24 08:01:28 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) [ 307.910815][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 307.917869][ T6343] ath9k_htc: Failed to initialize the device [ 307.924447][ T6340] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:28 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='keyring\x00') 08:01:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5", 0x31}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x1d70, 0x805, 0x0, 0x6) 08:01:28 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 08:01:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8934, &(0x7f0000000000)={'wlan0\x00'}) 08:01:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x0, 0x0, 0x0, 0x1080}, 0x48) 08:01:28 executing program 1: syz_open_dev$rtc(&(0x7f00000019c0), 0x0, 0x0) 08:01:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f0000000000)={'wlan0\x00'}) 08:01:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:28 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x8d00, 0x0, 0x0) [ 308.130651][ T7742] wlan0: mtu less than device minimum [ 308.430800][ T6340] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 308.740815][ T6340] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 309.640814][ T6340] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 309.650107][ T6340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.658661][ T6340] usb 1-1: Product: syz [ 309.663352][ T6340] usb 1-1: Manufacturer: syz [ 309.667960][ T6340] usb 1-1: SerialNumber: syz [ 309.711692][ T6340] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 310.370870][ T6340] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 310.805046][ T6340] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 310.814588][ T6340] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 311.007666][ T3695] usb 1-1: USB disconnect, device number 25 [ 311.023629][ T6340] ath9k_htc: Failed to initialize the device [ 311.034760][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:32 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f0000000000)={'wlan0\x00'}) 08:01:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) 08:01:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:32 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000000000)={'wlan0\x00'}) 08:01:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5", 0x31}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1d70, 0x805, 0x0, 0x6) 08:01:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f0000000000)={'wlan0\x00'}) 08:01:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:32 executing program 5: fsopen(0x0, 0x98025dcf0aed371) 08:01:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x3, 0x0, &(0x7f00000000c0)=0x4) 08:01:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6dfd, &(0x7f0000000500), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000580), 0x0) syz_io_uring_setup(0x2518, &(0x7f0000000600)={0x0, 0xa4e4, 0x0, 0x0, 0x60, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:01:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x9, 0x0, &(0x7f00000005c0)=0x4) [ 311.883925][ T6344] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 312.180902][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 313.050891][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.060009][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.068930][ T6344] usb 1-1: Product: syz [ 313.073710][ T6344] usb 1-1: Manufacturer: syz [ 313.079510][ T6344] usb 1-1: SerialNumber: syz [ 313.122818][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.690864][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.114719][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 314.120425][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 314.320666][ T3695] usb 1-1: USB disconnect, device number 26 [ 314.334519][ T6343] ath9k_htc: Failed to initialize the device [ 314.341106][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:35 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x10000, 0x4) 08:01:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0) 08:01:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:35 executing program 1: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x3f) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r1 = syz_io_uring_setup(0x320c, &(0x7f0000000000)={0x0, 0xdeda, 0x20, 0x2, 0x23a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) r3 = fsmount(r2, 0x0, 0x8) fcntl$addseals(r3, 0x409, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = syz_io_uring_setup(0x320c, &(0x7f0000000000)={0x0, 0xdeda, 0x20, 0x2, 0x23a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) fsmount(r5, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = fsmount(r5, 0x0, 0x7b) mknodat$loop(r6, &(0x7f0000000340)='./file0\x00', 0x400, 0x1) socketpair(0xf, 0xa, 0x22ea3d08, &(0x7f0000000180)={0xffffffffffffffff}) signalfd4(r7, &(0x7f0000000000)={[0x8]}, 0x8, 0x0) 08:01:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5", 0x31}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1d70, 0x805, 0x0, 0x6) 08:01:35 executing program 5: r0 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) 08:01:35 executing program 4: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000003c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0xfffffffffffffdb4) 08:01:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x9c) 08:01:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x3ff}, 0x8) 08:01:35 executing program 5: syz_clone3(&(0x7f0000000000)={0x18100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 315.221048][ T6344] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 315.500860][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 316.372362][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 316.381539][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.389554][ T6344] usb 1-1: Product: syz [ 316.395108][ T6344] usb 1-1: Manufacturer: syz [ 316.399759][ T6344] usb 1-1: SerialNumber: syz [ 316.441450][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 316.802802][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.809156][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.010865][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 317.453258][ T6344] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 317.458946][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 317.657521][ T3707] usb 1-1: USB disconnect, device number 27 [ 317.673635][ T6344] ath9k_htc: Failed to initialize the device [ 317.679802][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:38 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:01:38 executing program 4: syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x425002) 08:01:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {0x0}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@loopback, @remote, @multicast2}, 0xc) 08:01:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) 08:01:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 08:01:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) 08:01:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x4) 08:01:38 executing program 1: syz_emit_ethernet(0xe81, &(0x7f0000000080)={@dev, @broadcast, @val, {@llc={0x4, {@snap={0x0, 0x0, "b3", "0bbfd6", 0x0, "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"}}}}}, 0x0) 08:01:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {0x0}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x8940, 0x0) [ 318.324710][ T27] audit: type=1400 audit(1653379299.041:302): avc: denied { setopt } for pid=7811 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 318.510969][ T6344] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 318.800897][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 319.620837][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 319.630812][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.638860][ T6344] usb 1-1: Product: syz [ 319.643632][ T6344] usb 1-1: Manufacturer: syz [ 319.648229][ T6344] usb 1-1: SerialNumber: syz [ 319.691740][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 320.270764][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 320.695853][ T6344] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 320.701738][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 320.905951][ T3707] usb 1-1: USB disconnect, device number 28 [ 320.924527][ T6344] ath9k_htc: Failed to initialize the device [ 320.932527][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:42 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:42 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000002380)=[{&(0x7f0000000080)="e7744c6df027cf0763c98d64fb5167e499", 0x11, 0xfff}, {&(0x7f0000000180)="5999c678daececc2d0f7951916cc237a2309ab6c5a25d3b004d41ce76ed8ec5560b18fa3b9e7b8d6faf0063c811b5f8c0be7474604b68a585cea203727b1f2", 0x3f, 0x75226c8e}, {&(0x7f0000000200)="f52b9452bc67ceab357023b1711ee4beda3dd26318d70e447d132b77b39a86973aeac17ed8e6ecb910c8f2a0f18e", 0x2e, 0x6}, {&(0x7f0000000280)="bffeff864321755ffaf8643f21dc944162a6d07f805ffd700b1ecd70c6077259a5c4e8d497fd6995254d774c3ce0669468ab6279f9f3d464636e925e18dcc1985b255cb00baa81d51484a0c48f77197a6674649509ac37a0a13c9f1cf6b5850d53f5489f35d538aed4b17ee06a49cabcf643d059464fae5ed3885e7d9e8d05ad87eb443b1cd44bfd9b7de47aba15a11154156032d259537845db95bd62b086efdbe35318d5676dd98fdaf3e501594967ac03707956641a888868db2c419d743949a11f273cf4f5211773f4acd58945dd82a2f438b8d22da5bc97153ec3798950d9816302b392fc86a28132d10444a5a881360e01fecca5a3dff7d71aed14371fd2832b5ac047e5d4572204bf70f617b70c4792408fb315393e8743eb54ab96779c47d3c649285850f08bded5e26d7a89a2de0df7469d4e50db05bcf529e9b7a2dee00b7ad6d77afcef808f94c00e994a567a4698178b2d21651c66a1f9bc94d23ac82686eb71dc0b8f2c8fcdacc789d40e4ec1001c8e6efe27af9e6aa33a405fd50d10f3d36a5959cb2dad322da2622195f6c331907d85daa154649d51b406a74ed531c0bfde409abe4a922016bf9ba72602944684ac6e8f719d40751d726ffe96166a2e39a416506ec01781bda1b86f57b5b68fa9ac2a77b42a49715f7495296da7799cc2d60d86551805605209ad092ba248817115c795389503862cf96f39fa3e9ddcad343cc8545015bcd9c7510982eb5a3a9e3e5b104c0bbd8a56abe0d935e42e7ffaa07b08da3016a17ed802e60e5a28aa857cf546d44ef396b8c3d397d896e959f263614181c8cc83ed67b4bf233a9125bad5a865ae981843e1f3e3594955018ab98dea271ac95b877d8efef7780a48a6e6e8e2e8295c9c55d51e212e98f72359fd8624944c9ffbda4a0acea80a38860ae7a8cebcc85d8cc50fee3abd46f1a6cedc11529a5f4119f3156a2f6d1bb36b3b6df67ee2d75d6688d59bccee9c6fa2c91bbc5b4241ef7eaabee72e6541666fb07ee703ead8cc3db50fc24e3f5a9cf0d364f5aac6f499a503860086e93fceda4cf5154e5362ead66810d9f889ed7fba1ee9deee57702b7b05e076611b3c6bb7f440c8bcc430307d56594d019baba113972e945f728341b793149c88627b2a1ce6512745389fef6ed91b0729db68715ddc3d810298c7061ff7da5d6b54cde697e8259807413959e3b998248686434f95526c9faa0088b2588939f9aaefa1db95903dcfc629ae5eb5b03213059a3f4cd191cf3e39d27308317fc250a8c30da6ee69f64cd7ff99089425c302acad8815b25ce161a4bd3d57f24cd4a83991388d89bd5a0933b8b7c5e213b0aa3d6936423a57ac49010d0e662b13505f6fdb3d5d70bf588abb82f2df5a21e5fe470372525a431ad740ce1785ff6b5872e4e4361ece8150eacf4b1b5837f6b88da8d4bf708e992a35b00d9df40aec27ac801f8c81c53fca576e60f4b0a198774f74f732a79af09857182b8448b13af811bc59506131bd43580b149dcdb21708aac6f60af4c6dfbd5fae9b50a44fc1e3c911547eb0f3cef105173b2dcb8d4cf1499766926bc2451c61615b924e15bc81ea2e09719e893490c8b0f70c463dae3419d2e0d3d05b8f30b9d7a059c5ff338835fa13f567f6560dc5850e21669ee94296e7805af7ffe1cd588e59c7658c828d77c1d0e71a3a6d328ac75256559ad440b70282e63917434b45304e81124c5fa2afa2b5747ee8203f8e312a6aaabc0131718d08d260b66e467c1e0722eebaa52cb4a7523cf95c41ebe994082ca44b0e5a93302ad5dcedaa92a3852f8d344c4c61e7fbc3872babfb8fa918876b047de088f49a1c8e2f4be1fc259aaf50735b607fa6b4b65da25818d89c41f0f8c2fdc1fd475117f6413596b2ed1e00ad42d039178e9405c4e441bbf50cb21185270d5f9adb52fed439cedcade05c8767a8d16dc35365d3d14a5f030dd925918c0fa56f0a8285d9ab8535b7c8ef3b3438c4d9514bbd7c4e0af0b7acb776f1778fc89e1b3bb1106285524333d8105d4c15415e7847aeebb567f2df2479d499c7b2aa1f24a614fe041f7d6ca70ddc8b4f05aedfd4cdeba6a35e7cca5512116edfac37c27f73a74ae101460fb85f7961a4329c297e52d9359baec1caadba1e7bb710b6137ea7d8613068ef553da290a7d1601ff01fb7932468b75f9a47b4c65c3cf46f48fdf79e513106c182584491b626ee9717cd3ff8d0d77affefa36bb7a88c8fab95405fc6aa2708b7e673f0196a5975f72e5633e12b8735c4c2868082383a58e43988c7bf625376527d6bf1a51a50059014340c1afbdf80997999341c415138084049bc374a987b6b3af85b2505aada3d4a9e81c7dcd63bdd427810d404d801ebdbe1fb11b38643d0d0740b6611421cde8982e44c068f1379213538ef4b8a18a28d50c2de157e202a37fc85da302c16c867a00ed51d70a2a9b1fd70bdd49795425d13eda0cb7a74b90cfa0eeab1c8a4ac6a4bb46dbb3f49f89d1d7de487820bd1856b143a5a8f92aea397064977431d9c39a0f668a8494aa35c88c869e3fe27fbf331d7b9150aa1cfa2e58ce514de4e41cfeaac9954c6afeee2c2e776bb21d0aa99493ecd00a238316d36208abfcb7a4950c1f40619e62065f9d15c842297fdc10588e9630b0064226f552a05b1c56ea5319a70c283ea7f224e0d14092d855483709c29a6378a0ecb7a75bfcecb92c49469c0ef71eea83ad38413949c16fd6dd8fe47e5d2ded2177173f4662fd4b11bd225f36f8f16776a848cc580be77976a293e235e374bdac8e256ce169477b232e90f50a328b2e6c8802e45d6ab6cbc3bbc37722394afc9f5d76179ecabf20c5c6f93a8d169eed66a2b65c4710061419043c7a5fcc5cf41928d2b752dda319dc36a49cd1affefc28172d21c6c9f112aee3cc0e0b4f46dc8c6b74a6a6453b9e8ac06cfc11c7e5d73866b24b5f7fbc5c01511c04392f67b560cbfa6413b491beebdfa28eb227368af6402de28549b42cf828ec8f799563681d576a39c62045682b6eee1bd1c0dcbc360ff69231b8641a535b6a32839c1f389ab017a939ecb2f1b1d6c51b094f97eb189fd6fe62d685a5b3d59d4c8869998f6602146742cfff58cf49b2e3228115a1397d9f7f3769f692d96545aecb2d2e38ccae8ef7d6b9a0e7d277e5d4a3d5916cb73417c8aea58e5afbb7333cb88eec02d520379896adb5546fa855ab839ff6aeba63750724ef184f4f837518fba84ef31a63a9f712a83437d1f19c5acf20254e3bab3c263657964493f51bb0cab2f7e10ecb96f58f79dcc27f255dccfb5d264107277b4bb2839ea4f2b0a1abc61e8f8d12d926633a0a8c4696c7f5c75b04d36c44ea9dc2326c3cc27c043663d257d03fb5e079ae471cbdf5f6cbb2fbe60429f802432fe6b0545027d7daa1fb87632176d9202e5f6082f6490e605a14fc28d87a3788dc362095aec00c5b6b58f7d959bb6e2f6338f70ed33d5a58d1ac9cea07fb95b59f2a3f94e97f34dfa2417953412be36062e21f92764d8d3c7eecaaf36bc62af18f5048799206300981a86f174e32597eeb73b58b6eaaa432433223c7696fb00d7160e2581d8c31ef9cc408b18d2825c192cb6a222a29fc61d2ac01fd0fc5ab633002030a21aada65e3d23e43ddc1cc61081d9f8dc2b97334ea25f345d1646911afe4504645907e429c70064659c5ae8d3f1a1661a4546bebeb3eb264fbe63fc9357d83302e954ad3424583a808ec851791f0afe57608f920910803d153f846e3124078482f5cd9c2d9be3b2ce0b65386f9c63bebf2eaf834c6c3c36d4a69ed9b6b8dcf1cdef79a1a74833463de394621fcfffab2449a9faeea2d803e64500b9c11f882bb2bdb5646d85b42004215530fef555a74fd04ee12eb7402461f772bd9f2a4aa73acd9a8f76f0288ca3bf676429ab93d0b7b43dd05248af7f6f266d2306d4e5a4b312270318ecbabbd56df61d474b420e1b0dcd5e4d2bf551e52c695c540da2550c5038f3210add93035dc642a6b06cba3f1f422c04a97a7dfb09505e429a6c31de8ce70a661a2b4df58a69490ba3692159ab548d3ee201ffcf50429238453f92ea0e3e7e0f4e6d701681659e9c05815c777f096e73e0175b8e63497b14dd848363a1a0e14d16bbafbb262c3edd891ca450aae82278fc50b617de7dddec2ac49da90e59b99d09cd242fa6d33140ea5884b5375bf8fd1cf8807d01313e3f43f5c3774c09ec612cc85506e1a30854a690540a122970932be5f7bf8546882f6afb9ba9cc4ef801e72e733ccf8a74a39533790bcab3a030c6b2b6144638f5288cb4eebcb77af485e1c5451b260864579545d2d789b7b51ee2bb5a3b8fc94f0fea4491a50f5ac88364c12963a4626f8b7506cabae42300e2ecba134f660cdf37aa3705dba320da478b9aef6120a03e167ef3221c88d00b3d8957a1e3f18b406019c9eaf91cc94d5a7f6e19d151ad5cbeefe8623489d55ca9d06e3d6c7038989ebc352376252667ab97c55437ab295afdeed561affad5ee84ad4b18c601b7473c238d80fe588e11ea7961b65271c751ce8d91dfe3efcd186c89301de292a26688191e5b6e0ae5901d5656790f4553ab5d4a414d2407de13fde169dd958b50d42d5b2b134ad7ae560b76deb40225bdb5249328bac959509b653d1e0319dba9402d7f870169846b5ae8630df09aa8a957c52737d93766b269965ee5ab8a1cdfca83dfc0f78f8ded253bd302bf7b91bfc84465919362f4f0897fc4892220d5620199d51d4097557499f00a785dd3b7ca368acb7aeeb918737222f60b0915ce44a713fb22a634448be9f8f7452c0fda0ed28ca328e5f7c77b17794fd054453bae01696045f4b36d7df6678663719b33b3de490a767443b9512b112614c05e870a6cf5691fb3ed96053c09affa40a32f4bc2eba644e72b52e5cdf4eb783006950300970e1f7bee216edd66d9f9479f48303f6b0a7595db7779587034b1e5dc59c16788e2cda4eec4e82c29b8912503c1c92e5e49ff7bbd32fa27535c2df5938002a9e0e930d1c92212eda532614da9ec0ce92b86033d38c57d6976e1e48af2cbe7e99abaebaf25405313955eb3ec8d2e2433701333ca09b8fe805121cac245c119ef323f003b60b0ecf271ae37c6f2aa4a0597cc4e280b4bf5a45fa3c18da40badf2c23fb937a6340df954e73c26301e339b3c58cdfa30ecfaaacbb35181bcd8291ebcd134cdf4528fff7b3a7834f8a7aa3976702b00d8d66e5fe2219ab3d7a812eb88810f5118649398b6ab1676e1ffc620eae88c3c3bbea142c56050de322e6fabdcb4903e04f5a03f4c62044a82b4f1c2ef7f715405c37d17add51765b8d7e0", 0xed0, 0x9}, {&(0x7f0000001280)="1938d019e519156b5a68df57edb7342f73a259701def8c108bbe9f78debceac176c5ce71b3374d90adff270180f6d49f307d0986243f0b410c619b8e17e5af9cdf62662425684ee9ad5728b32cc3eca79ef18491dd5b3dae8516", 0x5a, 0xffffffffffffff01}, {&(0x7f0000002340)="bb", 0x1, 0x57e0}], 0x880410, 0x0) 08:01:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x11, 0x0, &(0x7f00000005c0)) 08:01:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x9c) 08:01:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {0x0}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 08:01:42 executing program 5: syz_clone3(&(0x7f0000000400)={0xa000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:01:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f00000005c0)) 08:01:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000a80)=""/131, 0x83}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:42 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) [ 321.470180][ T7831] loop4: detected capacity change from 0 to 264192 08:01:42 executing program 4: syz_io_uring_setup(0x79e8, &(0x7f00000001c0), &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000e1f000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3469, &(0x7f0000000040), &(0x7f000089d000/0x3000)=nil, &(0x7f00007bf000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 08:01:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) [ 321.790733][ T3707] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 322.110861][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 322.970886][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 322.980166][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.988861][ T3707] usb 1-1: Product: syz [ 322.994759][ T3707] usb 1-1: Manufacturer: syz [ 322.999462][ T3707] usb 1-1: SerialNumber: syz [ 323.042697][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 323.710913][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 324.133970][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 324.141205][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 324.337483][ T3695] usb 1-1: USB disconnect, device number 29 [ 324.347589][ T3707] ath9k_htc: Failed to initialize the device [ 324.357127][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:45 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:45 executing program 1: memfd_secret(0x1352129f6533edde) 08:01:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000cc0)={'wg0\x00'}) 08:01:45 executing program 4: renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x7) 08:01:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000a80)=""/131, 0x83}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:45 executing program 2: r0 = syz_io_uring_setup(0x79e8, &(0x7f00000001c0), &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000e1f000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_setup(0x1c0f, &(0x7f0000000000), &(0x7f000074c000/0x4000)=nil, &(0x7f0000b3e000/0x3000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000db1000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x78ff, &(0x7f00000000c0), &(0x7f0000af3000/0x4000)=nil, &(0x7f0000bed000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 08:01:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x40) 08:01:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xd, 0x0, &(0x7f00000005c0)) 08:01:45 executing program 1: syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 08:01:45 executing program 2: ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) 08:01:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000a80)=""/131, 0x83}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffffc4) [ 325.200727][ T6336] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 325.490882][ T6336] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 326.320843][ T6336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 326.330079][ T6336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.338698][ T6336] usb 1-1: Product: syz [ 326.343201][ T6336] usb 1-1: Manufacturer: syz [ 326.347939][ T6336] usb 1-1: SerialNumber: syz [ 326.391995][ T6336] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 326.960798][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.383444][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 327.389422][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 327.586241][ T3707] usb 1-1: USB disconnect, device number 30 [ 327.603635][ T6343] ath9k_htc: Failed to initialize the device [ 327.609803][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:48 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 08:01:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {0x0}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x10f000, 0x0) copy_file_range(r3, 0x0, r2, &(0x7f0000000080)=0xa, 0x100000001, 0x0) 08:01:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:48 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x54, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:01:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {0x0}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {0x0}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {0x0}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 328.470977][ T6343] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 328.490930][ T6344] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 328.780911][ T6343] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 328.801013][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 329.116420][ T3651] block nbd4: Receive control failed (result -32) [ 329.116969][ T7890] block nbd4: shutting down sockets [ 329.680986][ T6343] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.690258][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.698326][ T6343] usb 6-1: Product: syz [ 329.702880][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.711978][ T6343] usb 6-1: Manufacturer: syz [ 329.716562][ T6343] usb 6-1: SerialNumber: syz [ 329.721265][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.729262][ T6344] usb 1-1: Product: syz [ 329.734105][ T6344] usb 1-1: Manufacturer: syz [ 329.740903][ T6344] usb 1-1: SerialNumber: syz [ 329.781727][ T6343] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.801511][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.434454][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.443590][ T6336] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.853689][ T6336] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 330.859586][ T6336] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 330.884319][ T6343] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 330.889978][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 331.065296][ T6344] usb 1-1: USB disconnect, device number 31 [ 331.086690][ T26] usb 6-1: USB disconnect, device number 9 [ 331.097507][ T6336] ath9k_htc: Failed to initialize the device [ 331.104437][ T6343] ath9k_htc: Failed to initialize the device [ 331.110500][ T26] usb 6-1: ath9k_htc: USB layer deinitialized [ 331.110973][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized 08:01:52 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:01:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x10f000, 0x0) copy_file_range(r3, 0x0, r2, &(0x7f0000000080)=0xa, 0x100000001, 0x0) 08:01:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) (fail_nth: 1) 08:01:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:52 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 331.711895][ T7903] FAULT_INJECTION: forcing a failure. [ 331.711895][ T7903] name failslab, interval 1, probability 0, space 0, times 1 [ 331.755101][ T7903] CPU: 0 PID: 7903 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 331.765207][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.775370][ T7903] Call Trace: [ 331.778642][ T7903] [ 331.781565][ T7903] dump_stack_lvl+0xcd/0x134 [ 331.786257][ T7903] should_fail.cold+0x5/0xa [ 331.790759][ T7903] should_failslab+0x5/0x10 [ 331.795292][ T7903] __kmalloc+0x7b/0x4d0 [ 331.799470][ T7903] ? tomoyo_realpath_from_path+0xc3/0x620 [ 331.805216][ T7903] ? rcu_read_lock_sched_held+0x3a/0x70 [ 331.810779][ T7903] ? kfree+0x213/0x310 [ 331.814855][ T7903] tomoyo_realpath_from_path+0xc3/0x620 [ 331.820426][ T7903] ? tomoyo_profile+0x42/0x50 [ 331.825095][ T7903] tomoyo_path_number_perm+0x1d5/0x590 [ 331.830546][ T7903] ? tomoyo_path_number_perm+0x18d/0x590 [ 331.836184][ T7903] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 331.841988][ T7903] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 331.847997][ T7903] ? __context_tracking_exit+0xb8/0xe0 [ 331.853491][ T7903] ? __fget_files+0x286/0x470 [ 331.858193][ T7903] security_file_ioctl+0x50/0xb0 [ 331.863161][ T7903] __x64_sys_ioctl+0xb3/0x200 [ 331.867860][ T7903] do_syscall_64+0x35/0xb0 [ 331.872268][ T7903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 331.878186][ T7903] RIP: 0033:0x7f891fa890e9 [ 331.882603][ T7903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 331.902365][ T7903] RSP: 002b:00007f8920c13168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.910925][ T7903] RAX: ffffffffffffffda RBX: 00007f891fb9bf60 RCX: 00007f891fa890e9 [ 331.918898][ T7903] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 331.926883][ T7903] RBP: 00007f8920c131d0 R08: 0000000000000000 R09: 0000000000000000 [ 331.934847][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.942808][ T7903] R13: 00007ffdc47b740f R14: 00007f8920c13300 R15: 0000000000022000 [ 331.950771][ T7903] [ 331.966607][ T7903] ERROR: Out of memory at tomoyo_realpath_from_path. 08:01:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 332.041758][ T6344] usb 1-1: new high-speed USB device number 32 using dummy_hcd 08:01:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 332.300788][ T26] usb 6-1: new high-speed USB device number 10 using dummy_hcd 08:01:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 332.340949][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 332.435048][ T3651] block nbd2: Receive control failed (result -32) [ 332.443894][ T7909] block nbd2: shutting down sockets [ 332.448985][ T3650] block nbd4: Receive control failed (result -32) [ 332.456987][ T7903] block nbd4: shutting down sockets [ 332.610926][ T26] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 333.170980][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.180057][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.188147][ T6344] usb 1-1: Product: syz [ 333.192429][ T6344] usb 1-1: Manufacturer: syz [ 333.197041][ T6344] usb 1-1: SerialNumber: syz [ 333.251383][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 333.550753][ T26] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.561191][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.569365][ T26] usb 6-1: Product: syz [ 333.573717][ T26] usb 6-1: Manufacturer: syz [ 333.578404][ T26] usb 6-1: SerialNumber: syz [ 333.631696][ T26] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 333.820734][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.245743][ T6344] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 334.251524][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 334.300810][ T26] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.458308][ T3707] usb 1-1: USB disconnect, device number 32 [ 334.463955][ T6344] ath9k_htc: Failed to initialize the device [ 334.470279][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized [ 334.753183][ T26] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 334.759721][ T26] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 08:01:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:01:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0001000000010101000000"], 0x100}, 0x1, 0x0, 0x0, 0x44001}, 0x100040c0) 08:01:55 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7ff, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x48) 08:01:55 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 334.957407][ T6336] usb 6-1: USB disconnect, device number 10 [ 334.973918][ T26] ath9k_htc: Failed to initialize the device 08:01:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:55 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0xa, 0x0, 0x0) [ 335.004455][ T6336] usb 6-1: ath9k_htc: USB layer deinitialized [ 335.024498][ T7930] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.280641][ T3695] usb 1-1: new high-speed USB device number 33 using dummy_hcd 08:01:56 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) 08:01:56 executing program 1: syz_io_uring_setup(0x320c, &(0x7f0000000000)={0x0, 0xdedb, 0x1e}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 08:01:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 335.561079][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 335.855798][ T3650] block nbd4: Receive control failed (result -32) [ 335.856084][ T7932] block nbd4: shutting down sockets [ 335.867565][ T6336] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 336.180969][ T6336] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 336.380886][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.389954][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.404810][ T3695] usb 1-1: Product: syz [ 336.408998][ T3695] usb 1-1: Manufacturer: syz [ 336.415246][ T3695] usb 1-1: SerialNumber: syz [ 336.471997][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.030846][ T6336] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 337.040707][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 337.041346][ T6336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.058189][ T6336] usb 6-1: Product: syz [ 337.062565][ T6336] usb 6-1: Manufacturer: syz [ 337.067150][ T6336] usb 6-1: SerialNumber: syz [ 337.114646][ T6336] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.463045][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 337.468703][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 337.679699][ T3707] usb 1-1: USB disconnect, device number 33 [ 337.689325][ T3695] ath9k_htc: Failed to initialize the device [ 337.696792][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized [ 337.720764][ T6336] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:01:58 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x364, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x25a, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:01:58 executing program 1: request_key(&(0x7f00000000c0)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffb) 08:01:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x40086602, 0x0) 08:01:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x2) [ 338.164151][ T6336] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 338.169845][ T6336] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 08:01:58 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x21, 0x0, 0x0) 08:01:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 338.216889][ T27] audit: type=1400 audit(1653379318.931:303): avc: denied { setattr } for pid=7949 comm="syz-executor.2" path="socket:[46260]" dev="sockfs" ino=46260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 338.291187][ T7951] block nbd4: shutting down sockets [ 338.372599][ T6337] usb 6-1: USB disconnect, device number 11 [ 338.384059][ T6336] ath9k_htc: Failed to initialize the device [ 338.403420][ T6337] usb 6-1: ath9k_htc: USB layer deinitialized [ 338.540691][ T3695] usb 1-1: new high-speed USB device number 34 using dummy_hcd 08:01:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) 08:01:59 executing program 2: epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 08:01:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:01:59 executing program 1: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f00000006c0)=ANY=[@ANYBLOB='enc=raw \t'], 0x0, 0x0) 08:01:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x10) [ 338.860822][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 338.995435][ T7966] block nbd4: shutting down sockets [ 339.250771][ T3716] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 339.570888][ T3716] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 339.792446][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 339.801545][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.810283][ T3695] usb 1-1: Product: syz [ 339.815187][ T3695] usb 1-1: Manufacturer: syz [ 339.819791][ T3695] usb 1-1: SerialNumber: syz [ 339.871911][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.490883][ T3716] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.499938][ T3716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.508138][ T3716] usb 6-1: Product: syz [ 340.512509][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.522259][ T3716] usb 6-1: Manufacturer: syz [ 340.526865][ T3716] usb 6-1: SerialNumber: syz [ 340.586547][ T3716] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.933125][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 340.938815][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 341.137146][ T3707] usb 1-1: USB disconnect, device number 34 [ 341.154039][ T3695] ath9k_htc: Failed to initialize the device [ 341.160110][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized [ 341.166394][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 341.575014][ T3695] usb 6-1: USB disconnect, device number 12 08:02:02 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x1, 0x4e00, '\x00'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000700)={'sit0\x00', 0x0}) 08:02:02 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000003680), 0x0, 0x0) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x4) 08:02:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x301) 08:02:02 executing program 2: syz_io_uring_setup(0x79e8, &(0x7f00000001c0), &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000e1f000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7e30, &(0x7f0000000100), &(0x7f0000fe1000/0x1000)=nil, &(0x7f00004c7000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000240)) 08:02:02 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x18, 0x0, 0x0) [ 341.731125][ T7973] block nbd4: shutting down sockets [ 341.990899][ T6336] usb 1-1: new high-speed USB device number 35 using dummy_hcd 08:02:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) 08:02:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x8}]}) 08:02:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) 08:02:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x125d) [ 342.141165][ T7990] block nbd4: shutting down sockets [ 342.300957][ T6336] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 342.390731][ T3716] usb 6-1: Service connection timeout for: 256 [ 342.397068][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 342.405457][ T3716] ath9k_htc: Failed to initialize the device [ 342.411902][ T3695] usb 6-1: ath9k_htc: USB layer deinitialized [ 342.780688][ T3695] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 343.061078][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 343.180805][ T6336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 343.190508][ T6336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.198645][ T6336] usb 1-1: Product: syz [ 343.203054][ T6336] usb 1-1: Manufacturer: syz [ 343.207660][ T6336] usb 1-1: SerialNumber: syz [ 343.251417][ T6336] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 343.830764][ T6336] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 343.980748][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 343.989868][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.998502][ T3695] usb 6-1: Product: syz [ 344.007353][ T3695] usb 6-1: Manufacturer: syz [ 344.012135][ T3695] usb 6-1: SerialNumber: syz [ 344.055910][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 344.255674][ T6336] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 344.261436][ T6336] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 344.456672][ T6343] usb 1-1: USB disconnect, device number 35 [ 344.472965][ T6336] ath9k_htc: Failed to initialize the device [ 344.479020][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized [ 344.730697][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:02:05 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x1, 0x4e00, '\x00'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:05 executing program 2: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001080)=[{0x0, 0x0, 0xfffffffffffffffb}], 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='i']) 08:02:05 executing program 1: r0 = memfd_secret(0x0) epoll_pwait2(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 08:02:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x125e) 08:02:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = add_key$keyring(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r1) [ 344.986993][ T8001] loop2: detected capacity change from 0 to 16383 [ 344.998870][ T8001] romfs: Unknown parameter 'i' [ 345.021584][ T7999] block nbd4: shutting down sockets 08:02:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 345.142910][ T3716] usb 6-1: USB disconnect, device number 13 [ 345.320724][ T3707] usb 1-1: new high-speed USB device number 36 using dummy_hcd 08:02:06 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) 08:02:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x125f) 08:02:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 08:02:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:06 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8001, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x8}, 0x48) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8000, 0x740, 0x80, 0x0, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0xc9, 0x3, 0x0, [{@empty, 0x80}, {@empty, 0x3}, {@multicast1, 0x2d}, {@multicast2}, {@loopback, 0x5e0}]}, @rr={0x7, 0x13, 0x51, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}, @cipso={0x86, 0x2a, 0x3, [{0x0, 0xa, "5689830231244efe"}, {0x24a9c325798123bf, 0x9, "5bed60e976e3fd"}, {0x2, 0x7, "7ecd8dee82"}, {0x7, 0x8, "c059272301d5"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{}]}, @end, @cipso={0x86, 0x14, 0x3, [{0x5, 0x2}, {0x2, 0x5, "8e92a9"}, {0x6, 0x3, 'J'}, {0x0, 0x2}, {0x2, 0x2}]}]}}}}}) syz_open_dev$vcsn(&(0x7f0000000640), 0x7, 0x101000) syz_open_dev$loop(&(0x7f0000000680), 0x9, 0xc4002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 345.620882][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 345.771329][ T8015] block nbd4: shutting down sockets [ 345.990711][ T3695] usb 6-1: Service connection timeout for: 256 [ 345.996958][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 346.005599][ T3695] ath9k_htc: Failed to initialize the device [ 346.011973][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized [ 346.370759][ T3716] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 346.440720][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.449859][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.458885][ T3707] usb 1-1: Product: syz [ 346.463234][ T3707] usb 1-1: Manufacturer: syz [ 346.467966][ T3707] usb 1-1: SerialNumber: syz [ 346.511562][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 346.650745][ T3716] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 347.080797][ T26] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 347.450762][ T3716] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 347.459921][ T3716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.468379][ T3716] usb 6-1: Product: syz [ 347.472776][ T3716] usb 6-1: Manufacturer: syz [ 347.477440][ T3716] usb 6-1: SerialNumber: syz [ 347.504157][ T26] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 347.509809][ T26] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 347.521672][ T3716] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 347.717254][ T3716] usb 1-1: USB disconnect, device number 36 [ 347.727251][ T26] ath9k_htc: Failed to initialize the device [ 347.735969][ T3716] usb 1-1: ath9k_htc: USB layer deinitialized [ 348.090670][ T3707] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:02:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0xa}}}, &(0x7f00000000c0)=0x9c) 08:02:08 executing program 2: r0 = syz_io_uring_setup(0x79e8, &(0x7f00000001c0), &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000e1f000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) mmap$IORING_OFF_CQ_RING(&(0x7f0000db1000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x7551, &(0x7f0000000000), &(0x7f0000927000/0x1000)=nil, &(0x7f0000c20000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:02:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1260) 08:02:08 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x1, 0x4e00, '\x00'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 348.303470][ T8029] block nbd4: shutting down sockets [ 348.511280][ T3716] usb 6-1: USB disconnect, device number 14 [ 348.610697][ T6343] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 348.890860][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 08:02:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1261) 08:02:09 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "3e45983a72ea4851bf8268097643ab91a85352c1fa7ae992b6de021d433b6901d20256395930d96983a90eab899bfa8a1082e5fdb221300710e8654ed6887635"}, 0x48, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) 08:02:09 executing program 2: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) 08:02:09 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x12f}, {&(0x7f0000000140)=""/85, 0x51a}, {&(0x7f0000000fc0)=""/4096, 0x35e}, {&(0x7f0000000400)=""/106, 0x125}, {&(0x7f0000000740)=""/73, 0x10c}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x410}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:09 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 08:02:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) syz_read_part_table(0x5, 0x4, &(0x7f0000000400)=[{&(0x7f0000000000)="7ca27e1e788533d4a8cf0ecd0cddea5e0b0e3d6cbccbb54aa59036d68fc7373022a59e9bc2d733fb233b", 0x2a, 0x100000001}, {&(0x7f0000000040), 0x0, 0xffff}, {&(0x7f0000000140), 0x0, 0xffffffffffffffc8}, {0x0}]) [ 349.101897][ T8041] block nbd4: shutting down sockets 08:02:09 executing program 1: socketpair(0xa, 0x3, 0x100, &(0x7f0000000000)) [ 349.155496][ T8054] loop2: detected capacity change from 0 to 264192 [ 349.350754][ T3707] usb 6-1: Service connection timeout for: 256 [ 349.357160][ T3707] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 349.368349][ T3707] ath9k_htc: Failed to initialize the device [ 349.374870][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized [ 349.690959][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 349.700088][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.713197][ T6343] usb 1-1: Product: syz [ 349.717361][ T6343] usb 1-1: Manufacturer: syz [ 349.724506][ T6343] usb 1-1: SerialNumber: syz [ 349.770761][ T3716] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 349.771974][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 350.100798][ T3716] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 350.350740][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 350.775599][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 350.781356][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 350.977743][ T3695] usb 1-1: USB disconnect, device number 37 [ 350.993040][ T6343] ath9k_htc: Failed to initialize the device [ 350.999342][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized [ 351.006071][ T3716] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 351.015239][ T3716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.026589][ T3716] usb 6-1: Product: syz [ 351.031138][ T3716] usb 6-1: Manufacturer: syz [ 351.036047][ T3716] usb 6-1: SerialNumber: syz [ 351.084173][ T3716] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:02:12 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x238, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x12e, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee6f04a0e8afc22f732ef713b239f8821971e5228f586dba49c25f66742b956de2895ce24a36046ceb836e6284e2d77b75cebb668bcce475743666a7ca02d93d9ec10319d0bf77f9e6264e22fa3fe33a44bfd14973c69ae67d5b2e3eec7a342afadd823183e7a15c2e66b5f4e57004eb3d893e5336253e0c217b804ec5c3c1e2df151c54bbe02905b3b0b0f761d9401a583ce4f49d122130fee7ee5a5dccf3c4ced20b66ecf918c98f6f26fe962e1900970a45bcd39bc2939b66ffe6926ac5dfad25c8e9d4006b06ca3f13c3bd14a70d26878b380ec723be29cde95ffa76f2fd584230607abb18d004ad536280c0c8e6be3f0b1ca457ee172c3c3865b59f83e4c75cba8226aa58"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1262) 08:02:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={&(0x7f0000006a00)=@newtfilter={0xec4, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xa75c}, @filter_kind_options=@f_rsvp6={{0xa}, {0xe84, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private2}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x9, 0x5}, {0xa7a, 0xd77}, 0xff, 0x6, 0x2}}, @TCA_RSVP_ACT={0xe30, 0x6, [@m_ct={0xac, 0xa, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x1f}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0x7dc9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_LABELS={0x14, 0x7, "c17d38c2e5c31e70cff7493d74df753d"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0xced}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_MARK={0x8, 0x5, 0x400}]}, {0x2f, 0x6, "a2664d92ad6f828845138f639fe103e0b1e2b2ccf5ccc4231dd4967e412f946c47c8daa6ab09aebdba0e01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x74, 0x0, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x1e, 0x6, "b6673aadf4aa0f8695e88195a1cad1b0918deceaedc92746cdeb"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xbc, 0x0, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x61, 0x6, "ba286a346d8b6a7d566ba5e7c1de25a90bceba902c71e14131e8b4049fb6c45ae5ab59c1c98044efab980233e0937ad4a53aac6889e89c81c6ac47fff32824e5f9ee8214f5f8ae71c6c5abe84c0141cfcae8fd03b0e882726d72f72b9d"}, {0xc}, {0xc}}}, @m_skbmod={0xc20, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xbf1, 0x6, "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"}, {0xc}, {0xc}}}, @m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xec4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 08:02:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:02:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) [ 351.572220][ T8061] block nbd4: shutting down sockets [ 351.681914][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.830796][ T6336] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 352.094160][ T3716] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 352.099828][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 352.110939][ T6336] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 352.295862][ T6343] usb 6-1: USB disconnect, device number 15 [ 352.315482][ T3716] ath9k_htc: Failed to initialize the device [ 352.321921][ T6343] usb 6-1: ath9k_htc: USB layer deinitialized 08:02:13 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1263) 08:02:13 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x125181, 0x0) 08:02:13 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0xe5f440ebc7456a3b, 0xffffffffffffffff, 0x0) 08:02:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) [ 352.861679][ T8078] block nbd4: shutting down sockets [ 352.931144][ T6336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 352.953908][ T6336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.965357][ T6336] usb 1-1: Product: syz [ 352.970185][ T6336] usb 1-1: Manufacturer: syz [ 352.975431][ T6336] usb 1-1: SerialNumber: syz [ 353.021748][ T6336] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 353.150946][ T6343] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 353.431146][ T6343] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 353.610782][ T6336] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 354.033612][ T6336] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 354.039816][ T6336] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 354.236054][ T3695] usb 1-1: USB disconnect, device number 38 [ 354.241061][ T6343] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.254752][ T6336] ath9k_htc: Failed to initialize the device [ 354.260995][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.261004][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized [ 354.261027][ T6343] usb 6-1: Product: syz [ 354.281308][ T6343] usb 6-1: Manufacturer: syz [ 354.285921][ T6343] usb 6-1: SerialNumber: syz [ 354.343587][ T6343] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:02:15 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000380)) 08:02:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1264) 08:02:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x1, 0x80000001, 0x2, @mcast2, @private1, 0x700, 0x7, 0x4, 0x5}}) 08:02:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 354.787352][ T8088] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 354.854884][ T8087] block nbd4: shutting down sockets [ 354.920892][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 355.090757][ T3707] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 355.345558][ T6343] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 355.351371][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 355.420889][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 355.547372][ T3716] usb 6-1: USB disconnect, device number 16 [ 355.564395][ T6343] ath9k_htc: Failed to initialize the device [ 355.570620][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized 08:02:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 08:02:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x84, 0x77, 0x0, 0x0) 08:02:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1265) 08:02:16 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000), 0x4) [ 356.121120][ T8101] block nbd4: shutting down sockets [ 356.143423][ T27] audit: type=1400 audit(1653379336.861:304): avc: denied { setopt } for pid=8109 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 356.391446][ T3695] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 356.408117][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.417257][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.425519][ T3707] usb 1-1: Product: syz [ 356.429705][ T3707] usb 1-1: Manufacturer: syz [ 356.434584][ T3707] usb 1-1: SerialNumber: syz [ 356.481798][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 356.690946][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 357.090770][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 357.524975][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 357.530780][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 357.538671][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 357.548464][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.556878][ T3695] usb 6-1: Product: syz [ 357.561845][ T3695] usb 6-1: Manufacturer: syz [ 357.566443][ T3695] usb 6-1: SerialNumber: syz [ 357.611633][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 357.730141][ T6343] usb 1-1: USB disconnect, device number 39 [ 357.743089][ T3707] ath9k_htc: Failed to initialize the device [ 357.749146][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized 08:02:18 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:18 executing program 1: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000940)={[{':!~*}.@^\'%\x12@'}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'lock_acquire\x00'}}, {@seclabel}, {@audit}]}) 08:02:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1267) 08:02:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x800c5012, 0x0) 08:02:19 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 358.270812][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 358.285668][ T8119] befs: Unrecognized mount option ":!~*}.@^'%@" or missing value [ 358.308768][ T8119] befs: (loop1): cannot parse mount options [ 358.324226][ T8117] block nbd4: shutting down sockets [ 358.610756][ T3707] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 358.703187][ T3716] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 358.708874][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 358.905744][ T6343] usb 6-1: USB disconnect, device number 17 [ 358.914162][ T3716] ath9k_htc: Failed to initialize the device [ 358.920345][ T6343] usb 6-1: ath9k_htc: USB layer deinitialized [ 358.930897][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 08:02:20 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x84, 0x64, 0x0, 0x0) 08:02:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x101041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x5008, 0x0) 08:02:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1268) 08:02:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 359.486290][ T8126] block nbd4: shutting down sockets [ 359.730690][ T6336] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 359.880825][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.889948][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.898048][ T3707] usb 1-1: Product: syz [ 359.902328][ T3707] usb 1-1: Manufacturer: syz [ 359.907012][ T3707] usb 1-1: SerialNumber: syz [ 359.961730][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 360.010824][ T6336] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 360.600700][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.900833][ T6336] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 360.910008][ T6336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.918540][ T6336] usb 6-1: Product: syz [ 360.923139][ T6336] usb 6-1: Manufacturer: syz [ 360.927826][ T6336] usb 6-1: SerialNumber: syz [ 360.982506][ T6336] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 361.025190][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 361.031129][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 361.228527][ T6336] usb 1-1: USB disconnect, device number 40 [ 361.246220][ T3707] ath9k_htc: Failed to initialize the device [ 361.252375][ T6336] usb 1-1: ath9k_htc: USB layer deinitialized [ 361.560709][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:02:22 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000080)=0x5c) 08:02:22 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="ac") sched_rr_get_interval(0x0, &(0x7f0000000040)) 08:02:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1269) 08:02:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 361.811263][ T8138] block nbd4: shutting down sockets [ 361.988608][ T3707] usb 6-1: USB disconnect, device number 18 [ 362.060667][ T3716] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 362.360776][ T3716] usb 1-1: too many configurations: 210, using maximum allowed: 8 08:02:23 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:23 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x80045006, &(0x7f0000000000)) 08:02:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a1, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 08:02:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1274) 08:02:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, &(0x7f0000000000)={@loopback, @broadcast, @local}, 0xc) [ 362.565591][ T8151] block nbd4: shutting down sockets [ 362.630767][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 362.649627][ T6343] ath9k_htc: Failed to initialize the device [ 362.657801][ T3707] usb 6-1: ath9k_htc: USB layer deinitialized [ 363.030849][ T3707] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 363.290839][ T3716] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.299909][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.310401][ T3716] usb 1-1: Product: syz [ 363.314909][ T3716] usb 1-1: Manufacturer: syz [ 363.319515][ T3716] usb 1-1: SerialNumber: syz [ 363.351015][ T3707] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 363.382688][ T3716] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 364.030814][ T3716] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 364.240841][ T3707] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.249917][ T3707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.258291][ T3707] usb 6-1: Product: syz [ 364.262545][ T3707] usb 6-1: Manufacturer: syz [ 364.267148][ T3707] usb 6-1: SerialNumber: syz [ 364.311914][ T3707] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 364.455188][ T3716] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 364.460910][ T3716] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 364.656210][ T6344] usb 1-1: USB disconnect, device number 41 [ 364.674103][ T3716] ath9k_htc: Failed to initialize the device [ 364.680220][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized [ 364.900807][ T3707] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:02:25 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1a0, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x98, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee6f04a0e8afc22f732ef713b239f8821971e5228f586dba49c25f66742b956de2895ce24a36046ceb836e6284e2d77b75cebb668bcce475743666a7ca02d93d9ec10319d0bf77f9e6264e22fa3fe33a44bfd14973c69ae67d5b2e3eec7a342afadd823183e7a15c2e66b5f4e57004eb3d"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:25 executing program 2: socketpair(0x15, 0x5, 0x5, &(0x7f0000000040)) 08:02:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x6, &(0x7f0000000000)={@empty, @broadcast, @local}, 0xc) 08:02:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1276) 08:02:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6}]}, 0xc0}}, 0x0) [ 365.231712][ T8164] block nbd4: shutting down sockets [ 365.326663][ T3695] usb 6-1: USB disconnect, device number 19 [ 365.510901][ T6344] usb 1-1: new high-speed USB device number 42 using dummy_hcd 08:02:26 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045004, &(0x7f0000000000)) 08:02:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) 08:02:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1277) 08:02:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 365.820978][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 365.941164][ T8176] block nbd4: shutting down sockets [ 365.990961][ T3707] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 365.998270][ T3707] ath9k_htc: Failed to initialize the device [ 366.005230][ T3695] usb 6-1: ath9k_htc: USB layer deinitialized [ 366.381703][ T3695] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 366.660770][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 366.669841][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.677900][ T6344] usb 1-1: Product: syz [ 366.682116][ T6344] usb 1-1: Manufacturer: syz [ 366.686712][ T6344] usb 1-1: SerialNumber: syz [ 366.690865][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 366.731718][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.320749][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 367.580816][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.590141][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.598594][ T3695] usb 6-1: Product: syz [ 367.604263][ T3695] usb 6-1: Manufacturer: syz [ 367.608943][ T3695] usb 6-1: SerialNumber: syz [ 367.665431][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.745520][ T6344] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 367.751238][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 367.950906][ T6336] usb 1-1: USB disconnect, device number 42 [ 367.974445][ T6344] ath9k_htc: Failed to initialize the device [ 367.981373][ T6336] usb 1-1: ath9k_htc: USB layer deinitialized [ 368.280895][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:02:29 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 08:02:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:29 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000180)) 08:02:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1278) 08:02:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x0, 0x0, 0x0) [ 368.541159][ T8188] block nbd4: shutting down sockets [ 368.708360][ T6336] usb 6-1: USB disconnect, device number 20 [ 368.790790][ T3716] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 369.080993][ T3716] usb 1-1: too many configurations: 210, using maximum allowed: 8 08:02:29 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x1279) 08:02:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x100000) 08:02:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 08:02:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 369.253601][ T27] audit: type=1400 audit(1653379349.971:305): avc: denied { read } for pid=8199 comm="syz-executor.1" name="fb0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 369.316489][ T27] audit: type=1400 audit(1653379350.001:306): avc: denied { open } for pid=8199 comm="syz-executor.1" path="/dev/fb0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 369.340986][ T8198] block nbd4: shutting down sockets [ 369.356069][ T27] audit: type=1400 audit(1653379350.001:307): avc: denied { map } for pid=8199 comm="syz-executor.1" path="/dev/fb0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 369.380391][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 369.388104][ T3695] ath9k_htc: Failed to initialize the device [ 369.395001][ T6336] usb 6-1: ath9k_htc: USB layer deinitialized [ 369.395079][ T27] audit: type=1400 audit(1653379350.001:308): avc: denied { execute } for pid=8199 comm="syz-executor.1" path="/dev/fb0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 370.073123][ T3716] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.082475][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.090480][ T3716] usb 1-1: Product: syz [ 370.095080][ T3716] usb 1-1: Manufacturer: syz [ 370.099670][ T3716] usb 1-1: SerialNumber: syz [ 370.141629][ T3716] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 370.710759][ T3716] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 371.133160][ T3716] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 371.141067][ T3716] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 371.337363][ T6344] usb 1-1: USB disconnect, device number 43 [ 371.363572][ T3716] ath9k_htc: Failed to initialize the device [ 371.369879][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized 08:02:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x84, 0x6, 0x0, 0x0) 08:02:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x2, &(0x7f0000000040)={@broadcast, @local, @private}, 0xc) 08:02:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x127a) 08:02:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:32 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:32 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 08:02:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) [ 371.912078][ T8209] block nbd4: shutting down sockets 08:02:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x127b) 08:02:32 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={0x0}}, 0x0) 08:02:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 08:02:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) 08:02:32 executing program 2: rt_sigaction(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) [ 372.111180][ T8228] block nbd4: shutting down sockets [ 372.170664][ T3695] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 372.500827][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 373.440762][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 373.449973][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.458085][ T3695] usb 1-1: Product: syz [ 373.462428][ T3695] usb 1-1: Manufacturer: syz [ 373.467112][ T3695] usb 1-1: SerialNumber: syz [ 373.511598][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 374.110782][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 374.535007][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 374.540780][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 374.740952][ T26] usb 1-1: USB disconnect, device number 44 [ 374.754067][ T3695] ath9k_htc: Failed to initialize the device [ 374.760446][ T26] usb 1-1: ath9k_htc: USB layer deinitialized 08:02:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:35 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) 08:02:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x127c) 08:02:35 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 08:02:35 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:35 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:36 executing program 1: socket(0xa, 0x0, 0x200) 08:02:36 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "3e45983a72ea4851bf8268097643ab91a85352c1fa7ae992b6de021d433b6901d20256395930d96983a90eab899bfa8a1082e5fdb221300710e8654ed6887635"}, 0x48, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 08:02:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 375.331496][ T8244] block nbd4: shutting down sockets 08:02:36 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 08:02:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x127d) 08:02:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000000840)=""/187, &(0x7f0000000900)=0xbb) 08:02:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 08:02:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 375.501577][ T8261] block nbd4: shutting down sockets 08:02:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)) [ 375.590675][ T3695] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 375.900849][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 376.810797][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.819879][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.830397][ T3695] usb 1-1: Product: syz [ 376.834907][ T3695] usb 1-1: Manufacturer: syz [ 376.839506][ T3695] usb 1-1: SerialNumber: syz [ 376.893421][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.571659][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.995140][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 378.000864][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 378.208185][ T6343] usb 1-1: USB disconnect, device number 45 [ 378.214214][ T3695] ath9k_htc: Failed to initialize the device [ 378.220388][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized [ 378.233655][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.239955][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 08:02:39 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x158, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x4d, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee6f04a0e8afc22f732ef713b239f8821971e5228f586dba49c25f66742b956de2895ce24a36"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x127e) 08:02:39 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) fcntl$getown(r0, 0x9) 08:02:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:39 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 08:02:39 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 08:02:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 378.782155][ T8273] block nbd4: shutting down sockets 08:02:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x127f) 08:02:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:39 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x8c040, 0x0) [ 378.936187][ T27] audit: type=1800 audit(1653379359.651:309): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name=".log" dev="sda1" ino=1172 res=0 errno=0 [ 378.971656][ T8292] block nbd4: shutting down sockets [ 379.050764][ T6343] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 379.330818][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 380.170756][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 380.179949][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.188279][ T6343] usb 1-1: Product: syz [ 380.192723][ T6343] usb 1-1: Manufacturer: syz [ 380.197357][ T6343] usb 1-1: SerialNumber: syz [ 380.241742][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 380.820736][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 381.253315][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 381.258975][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 381.455620][ T3707] usb 1-1: USB disconnect, device number 46 [ 381.473968][ T6343] ath9k_htc: Failed to initialize the device [ 381.482944][ T3707] usb 1-1: ath9k_htc: USB layer deinitialized 08:02:42 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:42 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0xec4, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@nested={0xead, 0x3d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="2eb32d58f808ef98b2ebe3a217ec4b622fc61b275d8f6ffbeab2c2f20e7863ded8c8a51215bc6f7f2ef679a04b4bcdc8256ffd35740a9a3c25985d4e729b15e3ebcb6e374d7e127efde1b716591e965e6b274e1eb75579356548355798794a659581c71466d821be2ccebc3851aaf8510aff4fc2681f3ced7d29a3e03a798b4cc94d06f6f17f", @generic="40ae08a5d2802fa82402203a5291a7d66ecb3f01d3e8ab178b19015d2b1dd9ddf2a5b4ba401aa24eba36193ff411fe67b79f4b1a4010f947bb7b30a6c435bf0f97d53d9260c633d2dce054ac91b01b0a", @generic="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"]}]}, 0xec4}}, 0x2044050) 08:02:42 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 08:02:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x4b47) 08:02:42 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001200)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 08:02:42 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "8bce1ba518b091ecd1dadbc9ce10d7429004692d15acff7d0ddb05bcc41341851185e6655517a26cbe96d539402f3ddff97697fc67a2b35009d788775595df52"}, 0x48, 0xffffffffffffffff) 08:02:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 382.044045][ T8301] block nbd4: shutting down sockets 08:02:42 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.log\x00', 0x40, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001980)='.log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) 08:02:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x4b49) 08:02:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) [ 382.211073][ T8317] block nbd4: shutting down sockets [ 382.310942][ T3707] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 382.610976][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 383.530822][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 383.543452][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.556787][ T3707] usb 1-1: Product: syz [ 383.563878][ T3707] usb 1-1: Manufacturer: syz [ 383.568563][ T3707] usb 1-1: SerialNumber: syz [ 383.623008][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 384.260863][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.684711][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 384.690406][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 384.899171][ T6343] usb 1-1: USB disconnect, device number 47 [ 384.904075][ T3695] ath9k_htc: Failed to initialize the device [ 384.916241][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized 08:02:46 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="06", 0x1, 0x2}, {&(0x7f0000000240)="06", 0x1, 0xffffffffffffffff}]) 08:02:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) 08:02:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x541b) 08:02:46 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:46 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "e5"}]}}, &(0x7f0000000300)=""/198, 0x2a, 0xc6, 0x1}, 0x20) 08:02:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 385.445696][ T8326] loop2: detected capacity change from 0 to 16383 08:02:46 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x5b) [ 385.491832][ T8325] block nbd4: shutting down sockets 08:02:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x5421) 08:02:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:46 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000240)) 08:02:46 executing program 1: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000180)) 08:02:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:46 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}]}}) [ 385.682362][ T8338] block nbd4: shutting down sockets 08:02:46 executing program 1: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xc0881) [ 385.781468][ T3707] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 386.080825][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 387.080928][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 387.094548][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.112115][ T3707] usb 1-1: Product: syz [ 387.123654][ T3707] usb 1-1: Manufacturer: syz [ 387.132852][ T3707] usb 1-1: SerialNumber: syz [ 387.191789][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 387.840829][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 388.263109][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 388.268783][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 388.467672][ T26] usb 1-1: USB disconnect, device number 48 [ 388.484182][ T3707] ath9k_htc: Failed to initialize the device [ 388.490412][ T26] usb 1-1: ath9k_htc: USB layer deinitialized 08:02:49 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x5450) 08:02:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 08:02:49 executing program 2: read$usbfs(0xffffffffffffffff, 0x0, 0x0) 08:02:49 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:49 executing program 2: execveat(0xffffffffffffffff, &(0x7f0000002380)='\x00', 0x0, 0x0, 0x1000) 08:02:49 executing program 1: socketpair(0x28, 0x0, 0x461d359c, &(0x7f0000000040)) 08:02:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 389.061845][ T8357] block nbd4: shutting down sockets 08:02:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x0) 08:02:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x5451) 08:02:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x2, 0x0, @ioapic}) [ 389.220025][ T8376] block nbd4: shutting down sockets [ 389.280926][ T26] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 389.351852][ T3707] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 389.601202][ T26] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 389.660818][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 390.500754][ T26] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.509902][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.522661][ T26] usb 6-1: Product: syz [ 390.526823][ T26] usb 6-1: Manufacturer: syz [ 390.534818][ T26] usb 6-1: SerialNumber: syz [ 390.580883][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.589938][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.599643][ T26] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.611528][ T3707] usb 1-1: Product: syz [ 390.615721][ T3707] usb 1-1: Manufacturer: syz [ 390.620331][ T3707] usb 1-1: SerialNumber: syz [ 390.671642][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 391.270963][ T26] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.320900][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.696793][ T3695] usb 6-1: USB disconnect, device number 21 [ 391.764616][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 391.770315][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 391.978809][ T6340] usb 1-1: USB disconnect, device number 49 [ 391.993444][ T3707] ath9k_htc: Failed to initialize the device [ 391.999512][ T6340] usb 1-1: ath9k_htc: USB layer deinitialized [ 392.310672][ T26] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 392.317628][ T26] ath9k_htc: Failed to initialize the device [ 392.326010][ T3695] usb 6-1: ath9k_htc: USB layer deinitialized 08:02:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:53 executing program 1: request_key(&(0x7f0000006240)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffe) 08:02:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x5452) 08:02:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x8915, 0x0) 08:02:53 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x130, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x28, 0x4e00, "0057291901a6c97b891175dff1d8feb5b3f170323106a00553a867dbbdeb6042432b826a4c25edee"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:53 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 08:02:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:53 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000340)=""/253, 0x26, 0xfd, 0x1}, 0x20) 08:02:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 392.561331][ T8384] block nbd4: shutting down sockets 08:02:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x5460) 08:02:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xd17}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3f}]}}, @CTA_MARK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4) 08:02:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:53 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffffff00}, 0x8) 08:02:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 392.810772][ T6340] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 392.941133][ T8400] block nbd4: shutting down sockets [ 393.100893][ T6340] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 393.150728][ T3695] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 393.460929][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 393.941051][ T6340] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 393.950120][ T6340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.958322][ T6340] usb 1-1: Product: syz [ 393.962711][ T6340] usb 1-1: Manufacturer: syz [ 393.967313][ T6340] usb 1-1: SerialNumber: syz [ 394.011688][ T6340] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 394.270799][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 394.282221][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.290278][ T3695] usb 6-1: Product: syz [ 394.295097][ T3695] usb 6-1: Manufacturer: syz [ 394.299750][ T3695] usb 6-1: SerialNumber: syz [ 394.351679][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 394.630901][ T6340] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.950846][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 395.043616][ T6340] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 395.049315][ T6340] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 395.247852][ T6343] usb 1-1: USB disconnect, device number 50 [ 395.264203][ T6340] ath9k_htc: Failed to initialize the device [ 395.270301][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized [ 395.377281][ T6344] usb 6-1: USB disconnect, device number 22 08:02:56 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:56 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:56 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000049c0)={0x0, "c89c979782b1f1c1f62dbd86101a4fc8c3192b38736e053e23c3164b67fd8d07"}) 08:02:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000100)=""/211, 0x36, 0xd3, 0x1}, 0x20) 08:02:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x8933) 08:02:56 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000022c0), 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1b4, &(0x7f0000002340)={[{}, {0xb5, 0x4e00, "c6ee24250d4650e686f28433fd8acb66ce73963e17d9153916f5f0f5518072644e1648c660a5e501c8cc7d5b6f98803e6f313bed8dfa2a823e83411eae16561362d086b02d5b4d4044d46622919edb0736accca907e7308bf029e069d97905dbed2e3905a2e01bcaa1aeedc624d13a15d017bdf45c1465ff733e1c2ebd8948c740f6dbc7249280ddcbfeecf5d881687df4dbac3029d6e250ff3390384afc90a51bef517b9cb39c3fcaa120e87f34b92e4e3c98669f"}, {0xef, 0x4e00, "5752fad559bc5716071aa3e35176fdfe2ca666d92ca90a83b8f21d0fe8339e4775f6c9226479bb46b4a2fbc9846a8de8a6d887bae3bccdb476deabda9d698669e3e5e3c2bac93d2748177e68c04a9ec59015e64ba9a6193b33784f976c3f6097bd7842c40c414f31eb94e1ed86b20debbba14d441bb726dadcc666c82ab20926ef1552e5c9958d614d14e1c481a1aa428efdb027a4ddf311519a7ec136c69603d36f8c06d6f46b9275cf5a3769b9805a23f796c825dbf65bffd53c9fde97dc31f0ad6f48fa2bab71eb0439bd0dfc0ac65fbdf37a56170276a8f064731669bc3c961086f400e6c1efa7bf3612bad83c"}]}) socket$nl_generic(0x10, 0x3, 0x10) 08:02:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x801c581f, 0x0) [ 395.971088][ T8420] block nbd4: shutting down sockets 08:02:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab00) 08:02:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 395.997372][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 396.007862][ T3695] ath9k_htc: Failed to initialize the device [ 396.030687][ T3716] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 396.038931][ T6344] usb 6-1: ath9k_htc: USB layer deinitialized 08:02:56 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) [ 396.162556][ T8434] block nbd4: shutting down sockets [ 396.360839][ T3716] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 396.410754][ T6344] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 396.540711][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 396.690891][ T6344] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 397.140916][ T26] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.152182][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.160201][ T26] usb 3-1: Product: syz [ 397.165230][ T26] usb 3-1: Manufacturer: syz [ 397.169839][ T26] usb 3-1: SerialNumber: syz [ 397.234854][ T26] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.351837][ T3716] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.360992][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.368995][ T3716] usb 1-1: Product: syz [ 397.373900][ T3716] usb 1-1: Manufacturer: syz [ 397.378489][ T3716] usb 1-1: SerialNumber: syz [ 397.433167][ T3716] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.490887][ T6344] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.500122][ T6344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.508680][ T6344] usb 6-1: Product: syz [ 397.513090][ T6344] usb 6-1: Manufacturer: syz [ 397.517793][ T6344] usb 6-1: SerialNumber: syz [ 397.572037][ T6344] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.911045][ T26] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 398.090938][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 398.114707][ T6343] usb 3-1: USB disconnect, device number 8 [ 398.151208][ T6344] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 398.515110][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 398.520877][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 398.566091][ T3695] usb 6-1: USB disconnect, device number 23 [ 398.716758][ T6336] usb 1-1: USB disconnect, device number 51 [ 398.733946][ T142] ath9k_htc: Failed to initialize the device [ 398.740177][ T6336] usb 1-1: ath9k_htc: USB layer deinitialized [ 398.950667][ T26] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 398.957988][ T26] ath9k_htc: Failed to initialize the device [ 398.964583][ T6343] usb 3-1: ath9k_htc: USB layer deinitialized 08:02:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:02:59 executing program 1: syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x121080) 08:02:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab01) 08:02:59 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1f, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:02:59 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x1, 0x4e00, '\x00'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:02:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 399.190699][ T6344] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 399.200512][ T6344] ath9k_htc: Failed to initialize the device [ 399.208075][ T3695] usb 6-1: ath9k_htc: USB layer deinitialized 08:02:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r0, 0x0, 0x0) 08:03:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0xec4, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@nested={0xead, 0x3d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="2eb32d58f808ef98b2ebe3a217ec4b622fc61b275d8f6ffbeab2c2f20e7863ded8c8a51215bc6f7f2ef679a04b4bcdc8256ffd35740a9a3c25985d4e729b15e3ebcb6e374d7e127efde1b716591e965e6b274e1eb75579356548355798794a659581c71466d821be2ccebc3851aaf8510aff4fc2681f3ced7d29a3e03a798b4cc94d06f6f17f", @generic="40ae08a5d2802fa82402203a5291a7d66ecb3f01d3e8ab178b19015d2b1dd9ddf2a5b4ba401aa24eba36193ff411fe67b79f4b1a4010f947bb7b30a6c435bf0f97d53d9260c633d2dce054ac91b01b0a66", @generic="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"]}]}, 0xec4}}, 0x2044050) 08:03:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) [ 399.321228][ T8447] block nbd4: shutting down sockets 08:03:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab02) 08:03:00 executing program 2: execveat(0xffffffffffffffff, &(0x7f0000002380)='\x00', &(0x7f00000025c0)=[&(0x7f00000023c0)='%[$\x00', &(0x7f0000002400)='\x00', &(0x7f0000002440)='(\'+*,,\\\x00', &(0x7f0000002480)=',:^)/*$!{:\xd2/@\x00', &(0x7f00000024c0)='\x00', &(0x7f0000002500)='#{[(\x00', &(0x7f0000002540)=']%\x00', &(0x7f0000002580)='@}#:\x00'], &(0x7f0000002680)=[&(0x7f0000002600)='!:+)\x00'], 0x1000) 08:03:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 08:03:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:00 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) mount$fuseblk(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x1000, 0x0) [ 399.502066][ T8463] block nbd4: shutting down sockets [ 399.608018][ T6336] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 399.670939][ T3695] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 399.900789][ T6336] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 399.960772][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 400.760799][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.769889][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.778705][ T3695] usb 6-1: Product: syz [ 400.784395][ T3695] usb 6-1: Manufacturer: syz [ 400.789011][ T3695] usb 6-1: SerialNumber: syz [ 400.822546][ T6336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.831544][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.832986][ T6336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.848307][ T6336] usb 1-1: Product: syz [ 400.864989][ T6336] usb 1-1: Manufacturer: syz [ 400.869621][ T6336] usb 1-1: SerialNumber: syz [ 400.921634][ T6336] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.460843][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.540787][ T6336] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.954826][ T6336] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 401.961406][ T6336] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 402.079195][ T142] usb 6-1: USB disconnect, device number 24 [ 402.167047][ T26] usb 1-1: USB disconnect, device number 52 [ 402.184324][ T6336] ath9k_htc: Failed to initialize the device [ 402.190385][ T26] usb 1-1: ath9k_htc: USB layer deinitialized [ 402.561176][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 402.568349][ T3695] ath9k_htc: Failed to initialize the device [ 402.583861][ T142] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:03 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x1, 0x4e00, '\x00'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:03 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) read(0xffffffffffffffff, &(0x7f00000009c0)=""/40, 0x28) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0x0, {0x5, 0x2, 0x0, '.,'}}, 0x23) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x1f3a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) 08:03:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab04) 08:03:03 executing program 2: request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffd) 08:03:03 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:03 executing program 2: getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) [ 402.751678][ T8475] block nbd4: shutting down sockets [ 402.789736][ T27] audit: type=1400 audit(1653379383.501:310): avc: denied { setattr } for pid=8472 comm="syz-executor.1" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 08:03:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab05) 08:03:03 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) read(0xffffffffffffffff, &(0x7f00000009c0)=""/40, 0x28) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0x0, {0x5, 0x2, 0x0, '.,'}}, 0x23) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x1f3a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) 08:03:03 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)) [ 402.878122][ T27] audit: type=1400 audit(1653379383.591:311): avc: denied { unmount } for pid=3633 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 402.931027][ T8488] block nbd4: shutting down sockets [ 403.020686][ T26] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 403.110958][ T142] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 403.320956][ T26] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 403.420963][ T142] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 404.261230][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.275021][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.288555][ T26] usb 1-1: Product: syz [ 404.297287][ T26] usb 1-1: Manufacturer: syz [ 404.306179][ T26] usb 1-1: SerialNumber: syz [ 404.371062][ T142] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.380225][ T142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.389439][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 404.420375][ T142] usb 6-1: Product: syz [ 404.424939][ T142] usb 6-1: Manufacturer: syz [ 404.429563][ T142] usb 6-1: SerialNumber: syz [ 404.481710][ T142] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 405.031547][ T26] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 405.111021][ T142] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 405.445070][ T26] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 405.450880][ T26] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 405.654677][ T3695] usb 1-1: USB disconnect, device number 53 [ 405.664821][ T26] ath9k_htc: Failed to initialize the device [ 405.672535][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized [ 405.726200][ T3716] usb 6-1: USB disconnect, device number 25 08:03:06 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x1, 0x4e00, '\x00'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:06 executing program 2: syz_open_dev$dri(&(0x7f0000000700), 0x0, 0x0) 08:03:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab06) 08:03:06 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) read(0xffffffffffffffff, &(0x7f00000009c0)=""/40, 0x28) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0x0, {0x5, 0x2, 0x0, '.,'}}, 0x23) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x1f3a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) [ 406.150711][ T142] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 406.158672][ T142] ath9k_htc: Failed to initialize the device [ 406.165268][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:06 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:06 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000006180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 08:03:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 406.231505][ T8503] block nbd4: shutting down sockets 08:03:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab07) 08:03:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000000c0)=""/207, 0x32, 0xcf, 0x2}, 0x20) 08:03:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:07 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) read(0xffffffffffffffff, &(0x7f00000009c0)=""/40, 0x28) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0x0, {0x5, 0x2, 0x0, '.,'}}, 0x23) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x1f3a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) [ 406.411422][ T8516] block nbd4: shutting down sockets [ 406.500733][ T6343] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 406.710841][ T3716] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 406.780858][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 407.010926][ T3716] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 407.690896][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 407.700493][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.709839][ T6343] usb 1-1: Product: syz [ 407.714237][ T6343] usb 1-1: Manufacturer: syz [ 407.718837][ T6343] usb 1-1: SerialNumber: syz [ 407.761764][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 407.810715][ T3716] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 407.819843][ T3716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.828338][ T3716] usb 6-1: Product: syz [ 407.832942][ T3716] usb 6-1: Manufacturer: syz [ 407.837593][ T3716] usb 6-1: SerialNumber: syz [ 407.892510][ T3716] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 408.380751][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 408.470828][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 408.803407][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 408.809075][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 409.007322][ T142] usb 1-1: USB disconnect, device number 54 [ 409.024798][ T6343] ath9k_htc: Failed to initialize the device [ 409.032088][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 409.104260][ T3695] usb 6-1: USB disconnect, device number 26 08:03:10 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:10 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x400040) 08:03:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab08) 08:03:10 executing program 1: r0 = syz_usbip_server_init(0x0) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink, 0x30) [ 409.510788][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 409.525272][ T3716] ath9k_htc: Failed to initialize the device [ 409.533272][ T3695] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:10 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:10 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc4}, &(0x7f0000001140)={0x0, "71e8c5e96614eafcefcc996cbc3620f07cff72c7868d9095cd34aff24bb45126497b98555316bd5cb295f5dd824e0c2c4495b24a9e54c1d3aa63b4a61c569b10"}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f00000011c0)=""/81, 0x51) 08:03:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 409.568886][ T8531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 08:03:10 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc4}, &(0x7f0000001140)={0x0, "71e8c5e96614eafcefcc996cbc3620f07cff72c7868d9095cd34aff24bb45126497b98555316bd5cb295f5dd824e0c2c4495b24a9e54c1d3aa63b4a61c569b10"}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f00000011c0)=""/81, 0x51) [ 409.623279][ T8530] block nbd4: NBD_DISCONNECT [ 409.628485][ T8528] block nbd4: Disconnected due to user request. 08:03:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab09) [ 409.664010][ T8528] block nbd4: shutting down sockets 08:03:10 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc4}, &(0x7f0000001140)={0x0, "71e8c5e96614eafcefcc996cbc3620f07cff72c7868d9095cd34aff24bb45126497b98555316bd5cb295f5dd824e0c2c4495b24a9e54c1d3aa63b4a61c569b10"}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f00000011c0)=""/81, 0x51) 08:03:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 409.802423][ T8543] block nbd4: shutting down sockets [ 409.860668][ T142] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 410.041324][ T3695] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 410.172231][ T142] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 410.371908][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 411.000793][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.010062][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.023969][ T142] usb 1-1: Product: syz [ 411.028130][ T142] usb 1-1: Manufacturer: syz [ 411.036125][ T142] usb 1-1: SerialNumber: syz [ 411.092871][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 411.180875][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.189983][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.198440][ T3695] usb 6-1: Product: syz [ 411.202734][ T3695] usb 6-1: Manufacturer: syz [ 411.207336][ T3695] usb 6-1: SerialNumber: syz [ 411.261769][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 411.670856][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 411.840823][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 412.094706][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 412.101405][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 412.265421][ T3695] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 412.271298][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 412.296233][ T6337] usb 1-1: USB disconnect, device number 55 [ 412.314212][ T142] ath9k_htc: Failed to initialize the device [ 412.320297][ T6337] usb 1-1: ath9k_htc: USB layer deinitialized [ 412.468092][ T3716] usb 6-1: USB disconnect, device number 27 [ 412.478311][ T3695] ath9k_htc: Failed to initialize the device [ 412.486846][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:13 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:03:13 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc4}, &(0x7f0000001140)={0x0, "71e8c5e96614eafcefcc996cbc3620f07cff72c7868d9095cd34aff24bb45126497b98555316bd5cb295f5dd824e0c2c4495b24a9e54c1d3aa63b4a61c569b10"}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f00000011c0)=""/81, 0x51) 08:03:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab0a) 08:03:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) [ 412.861556][ T8551] block nbd4: shutting down sockets 08:03:13 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 08:03:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000200)=""/227, 0x2a, 0xe3, 0x1}, 0x20) 08:03:13 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x2a40) 08:03:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x400448c9) 08:03:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x4}]}]}}, &(0x7f0000000100)=""/211, 0x36, 0xd3, 0x1}, 0x20) 08:03:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) [ 413.062512][ T8564] block nbd4: shutting down sockets [ 413.160813][ T6337] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 413.310627][ T3695] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 413.440756][ T6337] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 413.600746][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 414.242046][ T6337] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 414.251775][ T6337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.259780][ T6337] usb 1-1: Product: syz [ 414.265273][ T6337] usb 1-1: Manufacturer: syz [ 414.269880][ T6337] usb 1-1: SerialNumber: syz [ 414.311775][ T6337] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 414.530975][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 414.540487][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.548773][ T3695] usb 6-1: Product: syz [ 414.553447][ T3695] usb 6-1: Manufacturer: syz [ 414.559489][ T3695] usb 6-1: SerialNumber: syz [ 414.613401][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 414.880676][ T6336] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 415.240704][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 415.294463][ T6336] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 415.300122][ T6336] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 415.506455][ T6337] usb 1-1: USB disconnect, device number 56 [ 415.514685][ T6336] ath9k_htc: Failed to initialize the device [ 415.523072][ T6337] usb 1-1: ath9k_htc: USB layer deinitialized [ 415.663253][ T3716] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 415.668936][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 415.866001][ T142] usb 6-1: USB disconnect, device number 28 [ 415.884772][ T3716] ath9k_htc: Failed to initialize the device [ 415.891694][ T142] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:16 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x2, 0x4e00, '\x00W'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@deltaction={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/131, 0x83}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 08:03:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 08:03:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x400448dd) 08:03:16 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000001c0)={0x1000, 0xffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE]}, 0x24}}, 0x8044) [ 416.048819][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.317527][ T8575] block nbd4: shutting down sockets 08:03:17 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x8953, 0x0) 08:03:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0xc038480a, &(0x7f0000000140)) 08:03:17 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0) 08:03:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x400454ca) 08:03:17 executing program 1: syz_open_dev$vcsu(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="44000000030103"], 0x44}}, 0x0) 08:03:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000100)=""/211, 0x26, 0xd3, 0x1}, 0x20) [ 416.481547][ T8594] block nbd4: shutting down sockets [ 416.496848][ T8599] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.501361][ T142] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 416.690651][ T3716] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 416.700722][ T6337] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 416.860894][ T142] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 416.985038][ T6337] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 417.091003][ T3716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.102009][ T3716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.112324][ T3716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 417.126377][ T3716] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.135647][ T3716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.148532][ T3716] usb 4-1: config 0 descriptor?? [ 417.203750][ T3716] usbhid 4-1:0.0: can't add hid device: -22 [ 417.209740][ T3716] usbhid: probe of 4-1:0.0 failed with error -22 [ 417.790906][ T6337] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.800064][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.808992][ T6337] usb 6-1: Product: syz [ 417.813513][ T6337] usb 6-1: Manufacturer: syz [ 417.818121][ T6337] usb 6-1: SerialNumber: syz [ 417.820710][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.835277][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.845368][ T142] usb 1-1: Product: syz [ 417.849545][ T142] usb 1-1: Manufacturer: syz [ 417.854204][ T142] usb 1-1: SerialNumber: syz [ 417.861909][ T6337] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 417.911690][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 418.430703][ T6336] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 418.590684][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 418.855417][ T6336] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 418.861164][ T6336] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 419.006204][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 419.011943][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 419.068555][ T6337] usb 6-1: USB disconnect, device number 29 [ 419.076806][ T6336] ath9k_htc: Failed to initialize the device [ 419.084565][ T6337] usb 6-1: ath9k_htc: USB layer deinitialized [ 419.208449][ T6344] usb 1-1: USB disconnect, device number 57 [ 419.224439][ T142] ath9k_htc: Failed to initialize the device [ 419.233113][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized [ 419.391146][ T6337] usb 4-1: USB disconnect, device number 6 08:03:20 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:20 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001340)={[{@nodecompose}, {@type={'type', 0x3d, "3b318766"}}, {}]}) 08:03:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40049409) 08:03:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x4020940d, 0x0) 08:03:20 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='fd/4\x00') 08:03:20 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb0, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:20 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) 08:03:20 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x105000, 0x0) 08:03:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ed", 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) [ 419.784094][ T8607] hfsplus: unable to find HFS+ superblock [ 419.800925][ T8603] block nbd4: shutting down sockets 08:03:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x8) 08:03:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40081271) 08:03:20 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x105104) [ 419.971077][ T8621] block nbd4: shutting down sockets [ 420.030887][ T6336] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 420.040683][ T142] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 420.320898][ T142] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 420.330849][ T6336] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 421.130729][ T6336] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 421.140244][ T6336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.153660][ T6336] usb 6-1: Product: syz [ 421.157841][ T6336] usb 6-1: Manufacturer: syz [ 421.164268][ T6336] usb 6-1: SerialNumber: syz [ 421.212512][ T6336] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 421.330778][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 421.339863][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.348503][ T142] usb 1-1: Product: syz [ 421.352969][ T142] usb 1-1: Manufacturer: syz [ 421.357577][ T142] usb 1-1: SerialNumber: syz [ 421.411672][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 421.790793][ T6336] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 422.060905][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 422.213401][ T6336] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 422.219656][ T6336] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 422.417021][ T3716] usb 6-1: USB disconnect, device number 30 [ 422.433785][ T6336] ath9k_htc: Failed to initialize the device [ 422.442335][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized [ 422.473146][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 422.478811][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 422.683474][ T3695] usb 1-1: USB disconnect, device number 58 [ 422.704368][ T142] ath9k_htc: Failed to initialize the device [ 422.710729][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized 08:03:23 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x8901, 0x0) 08:03:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 08:03:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40086602) 08:03:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ed", 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:03:23 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb0, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0x18, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) [ 423.350366][ T27] audit: type=1400 audit(1653379404.061:312): avc: denied { setattr } for pid=8628 comm="syz-executor.4" path="/dev/nbd4" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 08:03:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 08:03:24 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0xc000) [ 423.482821][ T6336] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 423.491402][ T8628] block nbd4: shutting down sockets 08:03:24 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000049c0)={0x6, "c89c979782b1f1c1f62dbd86101a4fc8c3192b38736e053e23c3164b67fd8d07"}) 08:03:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40087602) [ 423.531200][ T6344] usb 1-1: new high-speed USB device number 59 using dummy_hcd 08:03:24 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000049c0)={0x6, "c89c979782b1f1c1f62dbd86101a4fc8c3192b38736e053e23c3164b67fd8d07"}) [ 423.687833][ T8648] block nbd4: shutting down sockets [ 423.781174][ T6336] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 423.830865][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 424.580759][ T6336] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 424.591110][ T6336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.599310][ T6336] usb 6-1: Product: syz [ 424.604048][ T6336] usb 6-1: Manufacturer: syz [ 424.608731][ T6336] usb 6-1: SerialNumber: syz [ 424.640756][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 424.649806][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.658928][ T6336] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 424.667147][ T6344] usb 1-1: Product: syz [ 424.674907][ T6344] usb 1-1: Manufacturer: syz [ 424.679517][ T6344] usb 1-1: SerialNumber: syz [ 424.732315][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 425.240792][ T6336] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 425.300841][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 425.663421][ T6336] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 425.669093][ T6336] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 425.735630][ T6344] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 425.741534][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 425.868300][ T6337] usb 6-1: USB disconnect, device number 31 [ 425.884514][ T6336] ath9k_htc: Failed to initialize the device [ 425.890829][ T6337] usb 6-1: ath9k_htc: USB layer deinitialized [ 425.943475][ T6343] usb 1-1: USB disconnect, device number 59 [ 425.954081][ T6344] ath9k_htc: Failed to initialize the device [ 425.961459][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized 08:03:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ed", 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:03:27 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000049c0)={0x6, "c89c979782b1f1c1f62dbd86101a4fc8c3192b38736e053e23c3164b67fd8d07"}) 08:03:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40101283) 08:03:27 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000180)) 08:03:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb0, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:27 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000049c0)={0x6, "c89c979782b1f1c1f62dbd86101a4fc8c3192b38736e053e23c3164b67fd8d07"}) 08:03:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000100)=""/211, 0x2e, 0xd3, 0x1}, 0x20) 08:03:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x7}, 0x0) [ 426.541164][ T8654] block nbd4: shutting down sockets 08:03:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40101286) 08:03:27 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) [ 426.608886][ T27] audit: type=1400 audit(1653379407.321:313): avc: denied { read } for pid=8668 comm="syz-executor.2" dev="nsfs" ino=4026532860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 08:03:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @array]}}, &(0x7f00000000c0)=""/207, 0x4a, 0xcf, 0x2}, 0x20) [ 426.675880][ T27] audit: type=1400 audit(1653379407.321:314): avc: denied { open } for pid=8668 comm="syz-executor.2" path="net:[4026532860]" dev="nsfs" ino=4026532860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 426.731697][ T8670] block nbd4: shutting down sockets [ 426.780682][ T3695] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 426.788344][ T142] usb 1-1: new high-speed USB device number 60 using dummy_hcd 08:03:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ed", 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:03:27 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0x0}}, 0x8004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x118, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK_MASK={0x8}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3f, 0x2}}]}}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8752}]}}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x1, 0x6, 0xaa, 0x6, 0xfad, 0x0, 0x6]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0xc080) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x54, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x54}}, 0x20040840) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c80)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001240)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040041}, 0x20000000) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x0) 08:03:27 executing program 2: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x1, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000000}}, @NFCTH_TUPLE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x5) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x10c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK_MASK={0x8}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x2}}]}}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8752}]}}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x1, 0x6, 0xaa, 0x6, 0xfad, 0x0, 0x6]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000c40)={&(0x7f0000000a40), 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x114, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0xb8, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x40014}, 0x20040840) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x200, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xdc, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2040041}, 0x20000000) 08:03:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40101288) [ 427.110954][ T8680] block nbd4: shutting down sockets [ 427.121111][ T142] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 427.129148][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 428.060839][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.069950][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.078848][ T142] usb 1-1: Product: syz [ 428.083214][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.092341][ T142] usb 1-1: Manufacturer: syz [ 428.096946][ T142] usb 1-1: SerialNumber: syz [ 428.101604][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.109594][ T3695] usb 6-1: Product: syz [ 428.114494][ T3695] usb 6-1: Manufacturer: syz [ 428.119955][ T3695] usb 6-1: SerialNumber: syz [ 428.151708][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 428.161496][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 428.750724][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.760620][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 429.185309][ T3716] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 429.191212][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 429.197940][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 429.205995][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 429.388680][ T6344] usb 1-1: USB disconnect, device number 60 [ 429.404077][ T142] ath9k_htc: Failed to initialize the device [ 429.410139][ T6344] usb 1-1: ath9k_htc: USB layer deinitialized [ 429.413054][ T3695] usb 6-1: USB disconnect, device number 32 [ 429.425387][ T3716] ath9k_htc: Failed to initialize the device [ 429.447965][ T3695] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:30 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xbc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a542", 0xb6}, {&(0x7f0000000740)="bcf8bbf533b264efac4fb01a9463fd949422a4046b6cbe5bcf85b53ec248b0d9936331bb4c9b8eaf5e9ef0a478beb1ba07ca492691af0bc875a9215892199f247c8d5f14dfc3af5f1da149bfbaaefad492bc23cb4971e46f50d53e15a82b7b744e69e62d418ae601f06ef2897eb4fa88857f99ceb181d02c9a91a65b6ef3d86436beb05cf53b90fa4b894b6cccf67912980db746d36e9fabcdd60c8d90ac470df66ca017a05bfc27ec0d89fcfec66f2e7361852643ae62b338d0159f5dd3e579f2ba40811d6ca146320a78d86d6c6929099bf621e105032ff2502f675b757b86e0c078710fc4f7cf9fb3714f74554d2eb479b3", 0xf3}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:03:30 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe2$watch_queue(0x0, 0x80) 08:03:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x401070c9) 08:03:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x18, 0x3, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:03:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 08:03:30 executing program 3: add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc4}, &(0x7f0000001140)={0x0, "71e8c5e96614eafcefcc996cbc3620f07cff72c7868d9095cd34aff24bb45126497b98555316bd5cb295f5dd824e0c2c4495b24a9e54c1d3aa63b4a61c569b10"}, 0x48, 0xfffffffffffffffc) [ 430.001381][ T8690] block nbd4: shutting down sockets 08:03:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, &(0x7f00000004c0)=""/204, 0x26, 0xcc, 0x1}, 0x20) 08:03:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x401070ca) 08:03:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a542", 0xb6}, {&(0x7f0000000740)="bcf8bbf533b264efac4fb01a9463fd949422a4046b6cbe5bcf85b53ec248b0d9936331bb4c9b8eaf5e9ef0a478beb1ba07ca492691af0bc875a9215892199f247c8d5f14dfc3af5f1da149bfbaaefad492bc23cb4971e46f50d53e15a82b7b744e69e62d418ae601f06ef2897eb4fa88857f99ceb181d02c9a91a65b6ef3d86436beb05cf53b90fa4b894b6cccf67912980db746d36e9fabcdd60c8d90ac470df66ca017a05bfc27ec0d89fcfec66f2e7361852643ae62b338d0159f5dd3e579f2ba40811d6ca146320a78d86d6c6929099bf621e105032ff2502f675b757b86e0c078710fc4f7cf9fb3714f74554d2eb479b3", 0xf3}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 08:03:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, 0x3, 0x1, 0x3}, 0x14}}, 0x0) [ 430.189086][ T8703] block nbd4: shutting down sockets [ 430.203480][ T3716] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 430.280726][ T3695] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 430.542976][ T3716] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 430.591004][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 431.480892][ T3716] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 431.490135][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.498294][ T3716] usb 1-1: Product: syz [ 431.502677][ T3716] usb 1-1: Manufacturer: syz [ 431.507414][ T3716] usb 1-1: SerialNumber: syz [ 431.530810][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 431.539885][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.548394][ T3695] usb 6-1: Product: syz [ 431.554607][ T3716] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 431.563297][ T3695] usb 6-1: Manufacturer: syz [ 431.567915][ T3695] usb 6-1: SerialNumber: syz [ 431.621862][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 432.250883][ T3716] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 432.310811][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 432.685155][ T3716] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 432.693075][ T3716] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 432.733178][ T3695] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 432.738879][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 432.889114][ T6343] usb 1-1: USB disconnect, device number 61 [ 432.904323][ T3716] ath9k_htc: Failed to initialize the device [ 432.912402][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized [ 432.934193][ T6337] usb 6-1: USB disconnect, device number 33 [ 432.943641][ T3695] ath9k_htc: Failed to initialize the device [ 432.949826][ T6337] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:34 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xbc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:34 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:34 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop5', 0x0, 0x0) 08:03:34 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpgid(0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000022c0)={0x80000000}, 0x8) 08:03:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x401070cd) 08:03:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a542", 0xb6}, {&(0x7f0000000740)="bcf8bbf533b264efac4fb01a9463fd949422a4046b6cbe5bcf85b53ec248b0d9936331bb4c9b8eaf5e9ef0a478beb1ba07ca492691af0bc875a9215892199f247c8d5f14dfc3af5f1da149bfbaaefad492bc23cb4971e46f50d53e15a82b7b744e69e62d418ae601f06ef2897eb4fa88857f99ceb181d02c9a91a65b6ef3d86436beb05cf53b90fa4b894b6cccf67912980db746d36e9fabcdd60c8d90ac470df66ca017a05bfc27ec0d89fcfec66f2e7361852643ae62b338d0159f5dd3e579f2ba40811d6ca146320a78d86d6c6929099bf621e105032ff2502f675b757b86e0c078710fc4f7cf9fb3714f74554d2eb479b3", 0xf3}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:03:34 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a542", 0xb6}, {&(0x7f0000000740)="bcf8bbf533b264efac4fb01a9463fd949422a4046b6cbe5bcf85b53ec248b0d9936331bb4c9b8eaf5e9ef0a478beb1ba07ca492691af0bc875a9215892199f247c8d5f14dfc3af5f1da149bfbaaefad492bc23cb4971e46f50d53e15a82b7b744e69e62d418ae601f06ef2897eb4fa88857f99ceb181d02c9a91a65b6ef3d86436beb05cf53b90fa4b894b6cccf67912980db746d36e9fabcdd60c8d90ac470df66ca017a05bfc27ec0d89fcfec66f2e7361852643ae62b338d0159f5dd3e579f2ba40811d6ca146320a78d86d6c6929099bf621e105032ff2502f675b757b86e0c078710fc4f7cf9fb3714f74554d2eb479b3", 0xf3}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:03:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x40186366) [ 433.531813][ T8712] block nbd4: shutting down sockets 08:03:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000100)=""/211, 0x26, 0xd3, 0x1}, 0x20) 08:03:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 433.671119][ T8725] block nbd4: shutting down sockets 08:03:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x401870c8) [ 433.700685][ T6337] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 433.760798][ T3695] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 433.841922][ T8732] block nbd4: shutting down sockets [ 434.000850][ T6337] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 434.050766][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 434.890707][ T6337] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.899920][ T6337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.910729][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.914104][ T6337] usb 1-1: Product: syz [ 434.919793][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.919825][ T3695] usb 6-1: Product: syz [ 434.927713][ T6337] usb 1-1: Manufacturer: syz [ 434.933861][ T3695] usb 6-1: Manufacturer: syz [ 434.945707][ T6337] usb 1-1: SerialNumber: syz [ 434.946567][ T3695] usb 6-1: SerialNumber: syz [ 434.991475][ T6337] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.001889][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.560687][ T6337] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.651272][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.984707][ T6337] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 435.990416][ T6337] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 436.085189][ T3695] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 436.090942][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 436.186639][ T142] usb 1-1: USB disconnect, device number 62 [ 436.202997][ T6337] ath9k_htc: Failed to initialize the device [ 436.209137][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 436.287291][ T6343] usb 6-1: USB disconnect, device number 34 [ 436.304194][ T3695] ath9k_htc: Failed to initialize the device [ 436.310489][ T6343] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:37 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xbc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:37 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:37 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000000780)=@bloom_filter, 0x48) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 08:03:37 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "b8f15805b6f23441e7fdee5c5086974650c61f0a2b14f0fabd53a02353e4995475c0317403fae70392158c2eea5a34695caaec24b0a8d0c6ed8acbb75cf92dde"}, 0x48, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) 08:03:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x401870cb) 08:03:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, '\x00', @a}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x4}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x120001fe6) mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x446f407, 0x0) 08:03:37 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1f, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0) 08:03:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x8912, 0x0) [ 436.871291][ T8738] block nbd4: shutting down sockets [ 436.877733][ T27] audit: type=1400 audit(1653379417.591:315): avc: denied { name_bind } for pid=8739 comm="syz-executor.3" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 08:03:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x401870cc) 08:03:37 executing program 2: setgid(0x0) setgid(0x0) 08:03:37 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f00000001c0)) [ 436.924727][ T27] audit: type=1400 audit(1653379417.631:316): avc: denied { setattr } for pid=8746 comm="syz-executor.2" name="vcsu1" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 436.990697][ T3695] usb 1-1: new high-speed USB device number 63 using dummy_hcd 08:03:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 437.119453][ T6343] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 437.173483][ T8755] block nbd4: shutting down sockets [ 437.320966][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 437.400817][ T6343] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 438.231093][ T6343] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 438.240166][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.240730][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 438.248278][ T6343] usb 6-1: Product: syz [ 438.261614][ T6343] usb 6-1: Manufacturer: syz [ 438.266214][ T6343] usb 6-1: SerialNumber: syz [ 438.266419][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.278887][ T3695] usb 1-1: Product: syz [ 438.283186][ T3695] usb 1-1: Manufacturer: syz [ 438.287793][ T3695] usb 1-1: SerialNumber: syz [ 438.322220][ T6343] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 438.331632][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 438.930814][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 438.960675][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 439.353148][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 439.358924][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 439.375607][ T6343] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 439.381317][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 439.556677][ T3716] usb 1-1: USB disconnect, device number 63 [ 439.572941][ T3695] ath9k_htc: Failed to initialize the device [ 439.580870][ T142] usb 6-1: USB disconnect, device number 35 [ 439.588221][ T3716] usb 1-1: ath9k_htc: USB layer deinitialized [ 439.602723][ T6343] ath9k_htc: Failed to initialize the device [ 439.613866][ T142] usb 6-1: ath9k_htc: USB layer deinitialized [ 439.672326][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.678642][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 08:03:40 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xe4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x27, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:40 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xdc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x27, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0x18, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@nested={0x4, 0x3d}]}, 0x18}}, 0x0) 08:03:40 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xe000, 0x0) 08:03:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x401c5820) 08:03:40 executing program 3: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x1, 0x9, 0x801, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000000}}, @NFCTH_TUPLE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x5) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4090) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x100, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK_MASK={0x8}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3f, 0x2}}]}}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8752}]}}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x1, 0x6, 0xaa, 0x6, 0xfad, 0x0, 0x6]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x14c, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0xb8, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa564}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40014}, 0x20040840) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x200, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x88, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffaa7}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x1000, 0x7, 0xfcf, 0x1, 0x7, 0x7, 0x3, 0x0, 0x1000]}]}, 0x88}, 0x1, 0x0, 0x0, 0x51}, 0x20008000) 08:03:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5411, 0x0) 08:03:40 executing program 3: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 08:03:40 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x0) [ 440.150916][ T8763] block nbd4: shutting down sockets 08:03:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x401c5820, 0x0) 08:03:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x0, 0x0, 0x39}, 0x48) 08:03:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x4020940d) [ 440.340731][ T6344] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 440.341269][ T8777] block nbd4: shutting down sockets [ 440.420747][ T6343] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 440.620795][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 440.701023][ T6343] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 441.420856][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.430042][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.438236][ T6344] usb 1-1: Product: syz [ 441.442619][ T6344] usb 1-1: Manufacturer: syz [ 441.447271][ T6344] usb 1-1: SerialNumber: syz [ 441.491368][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 441.500840][ T6343] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.509897][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.520495][ T6343] usb 6-1: Product: syz [ 441.524992][ T6343] usb 6-1: Manufacturer: syz [ 441.529595][ T6343] usb 6-1: SerialNumber: syz [ 441.571702][ T6343] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 442.100725][ T6344] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.150853][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.535646][ T6344] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 442.541395][ T6344] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 442.573500][ T6343] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 442.579195][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 442.739122][ T142] usb 1-1: USB disconnect, device number 64 [ 442.752971][ T6344] ath9k_htc: Failed to initialize the device [ 442.759031][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 442.774093][ T3716] usb 6-1: USB disconnect, device number 36 [ 442.792942][ T6343] ath9k_htc: Failed to initialize the device [ 442.799218][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:43 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xe4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x27, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:44 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xdc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x27, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80041284) 08:03:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x44}}, 0x0) 08:03:44 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xc34a8baf57c98ca6, 0x0) 08:03:44 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x1) 08:03:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x0) 08:03:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 08:03:44 executing program 1: r0 = syz_io_uring_setup(0x3246, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x320c, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:03:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9365b6c1c28e9681, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 443.381150][ T8785] block nbd4: shutting down sockets 08:03:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80041285) 08:03:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) [ 443.550746][ T6343] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 443.559624][ T8803] block nbd4: shutting down sockets [ 443.610787][ T6344] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 443.841262][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 443.930964][ T6344] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 444.721149][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.730220][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.738511][ T6343] usb 1-1: Product: syz [ 444.743094][ T6343] usb 1-1: Manufacturer: syz [ 444.747701][ T6343] usb 1-1: SerialNumber: syz [ 444.800708][ T6344] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.809798][ T6344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.818619][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 444.837006][ T6344] usb 6-1: Product: syz [ 444.841303][ T6344] usb 6-1: Manufacturer: syz [ 444.845908][ T6344] usb 6-1: SerialNumber: syz [ 444.901565][ T6344] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 445.410803][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 445.470773][ T6337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 445.835394][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 445.841239][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 445.883334][ T6337] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 445.890239][ T6337] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 446.039863][ T26] usb 1-1: USB disconnect, device number 65 [ 446.054134][ T6343] ath9k_htc: Failed to initialize the device [ 446.060212][ T26] usb 1-1: ath9k_htc: USB layer deinitialized [ 446.085705][ T142] usb 6-1: USB disconnect, device number 37 [ 446.104517][ T6337] ath9k_htc: Failed to initialize the device [ 446.110870][ T142] usb 6-1: ath9k_htc: USB layer deinitialized 08:03:47 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xe4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x27, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:47 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xdc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x27, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000100)=""/211, 0x36, 0xd3, 0x1}, 0x20) 08:03:47 executing program 3: syz_mount_image$nfs(&(0x7f0000001b40), &(0x7f0000002d00)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000002e00)) 08:03:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48) 08:03:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80081270) 08:03:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={&(0x7f0000000740), 0xc, &(0x7f00000008c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="44000000030103"], 0x44}}, 0x0) 08:03:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000100)=""/211, 0x26, 0xd3, 0x1}, 0x20) 08:03:47 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000480)=@raw=[@initr0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 08:03:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80081272) [ 446.671167][ T8812] block nbd4: shutting down sockets [ 446.684333][ T8820] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 08:03:47 executing program 2: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:03:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/211, 0x1a, 0xd3, 0x1}, 0x20) [ 446.840715][ T26] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 446.851341][ T8826] block nbd4: shutting down sockets [ 446.970724][ T6343] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 447.140852][ T26] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 447.251025][ T6343] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 447.270811][ T6336] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 447.790835][ T6336] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 447.800370][ T6336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.808774][ T6336] usb 3-1: Product: syz [ 447.813421][ T6336] usb 3-1: Manufacturer: syz [ 447.818116][ T6336] usb 3-1: SerialNumber: syz [ 447.862151][ T6336] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 448.050865][ T6343] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 448.060053][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.068420][ T6343] usb 6-1: Product: syz [ 448.073004][ T6343] usb 6-1: Manufacturer: syz [ 448.077714][ T6343] usb 6-1: SerialNumber: syz [ 448.120740][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 448.129849][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.131460][ T6343] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 448.138439][ T26] usb 1-1: Product: syz [ 448.153459][ T26] usb 1-1: Manufacturer: syz [ 448.158181][ T26] usb 1-1: SerialNumber: syz [ 448.222101][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 448.440729][ T6336] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 448.651842][ T142] usb 3-1: USB disconnect, device number 9 [ 448.720823][ T6337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 448.820764][ T26] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 449.133464][ T6337] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 449.139151][ T6337] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 449.243794][ T26] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 449.249468][ T26] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 449.334405][ T3716] usb 6-1: USB disconnect, device number 38 [ 449.354291][ T6337] ath9k_htc: Failed to initialize the device [ 449.360365][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized [ 449.446262][ T6343] usb 1-1: USB disconnect, device number 66 [ 449.464520][ T26] ath9k_htc: Failed to initialize the device [ 449.470715][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized [ 449.510733][ T6336] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 449.517789][ T6336] ath9k_htc: Failed to initialize the device [ 449.528681][ T142] usb 3-1: ath9k_htc: USB layer deinitialized 08:03:50 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3a, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357e"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:50 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 08:03:50 executing program 1: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'streebog256\x00'}}, 0x0, 0x0) 08:03:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80081280) 08:03:50 executing program 2: syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x8a2802, &(0x7f00000003c0)) 08:03:50 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf0, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3a, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357e"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 08:03:50 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) 08:03:50 executing program 3: mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) 08:03:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000100)=""/211, 0x1a, 0xd3, 0x1}, 0x20) 08:03:50 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xe1, "e81b3634e209e00c0207def2b752d5c8ebd52ac379cda126d6550c216bf6832f"}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, &(0x7f0000000080)={0x94}, &(0x7f0000000140)={r1}, 0x0) [ 450.061987][ T8833] block nbd4: shutting down sockets 08:03:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80086301) [ 450.211492][ T8855] block nbd4: shutting down sockets [ 450.260625][ T142] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 450.290611][ T26] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 450.570798][ T142] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 450.600758][ T26] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 451.471583][ T142] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.480988][ T142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.489015][ T142] usb 6-1: Product: syz [ 451.493598][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.502669][ T142] usb 6-1: Manufacturer: syz [ 451.507274][ T142] usb 6-1: SerialNumber: syz [ 451.513292][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.525393][ T26] usb 1-1: Product: syz [ 451.529569][ T26] usb 1-1: Manufacturer: syz [ 451.534425][ T26] usb 1-1: SerialNumber: syz [ 451.561674][ T142] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.581661][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 452.210772][ T142] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.220359][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.649257][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 452.654998][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 452.663015][ T142] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 452.668845][ T142] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 452.854035][ T6343] usb 6-1: USB disconnect, device number 39 [ 452.869092][ T142] ath9k_htc: Failed to initialize the device [ 452.875600][ T3716] usb 1-1: USB disconnect, device number 67 [ 452.885567][ T3695] ath9k_htc: Failed to initialize the device [ 452.891929][ T6343] usb 6-1: ath9k_htc: USB layer deinitialized [ 452.894250][ T3716] usb 1-1: ath9k_htc: USB layer deinitialized 08:03:54 executing program 3: syz_mount_image$hfsplus(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 08:03:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={&(0x7f0000000000), 0xc, &(0x7f00000010c0)={&(0x7f0000001140)={0xec4, 0x0, 0x1, 0x0, 0x0, 0x25dfdbfd, {}, [@nested={0xead, 0x0, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0x3}, @generic="2eb32d58f808ef98b2ebe3a217ec4b622fc61b275d8f6ffbeab2c2f20e7863ded8c8a51215bc6f7f2ef679a04b4bcdc8256ffd35740a9a3c25985d4e729b15e3ebcb6e374d7e127efde1b716591e965e6b274e1eb75579356548355798794a659581c71466d821be2ccebc3851aaf8510aff4fc2681f3ced7d29a3e03a798b4cc94d06f6f17f", @generic="40ae08a5d2802fa82402203a5291a7d66ecb3f01d3e8ab178b19015d2b1dd9ddf2a5b4ba401aa24eba36193ff411fe67b79f4b1a4010f947bb", @generic="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"]}]}, 0xec4}, 0x1, 0x0, 0x0, 0xc080}, 0x2044050) 08:03:54 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000022c0)={0x80000000}, 0x8) 08:03:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80086601) 08:03:54 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf0, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3a, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357e"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:54 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3a, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357e"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0) 08:03:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x18, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}]}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 08:03:54 executing program 1: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='logon\x00', 0x0) [ 453.491034][ T8861] block nbd4: shutting down sockets 08:03:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xead, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x3}, @generic="2eb32d58f808ef98b2ebe3a217ec4b622fc61b275d8f6ffbeab2c2f20e7863ded8c8a51215bc6f7f2ef679a04b4bcdc8256ffd35740a9a3c25985d4e729b15e3ebcb6e374d7e127efde1b716591e965e6b274e1eb75579356548355798794a659581c71466d821be2ccebc3851aaf8510aff4fc2681f3ced7d29a3e03a798b4cc94d06f6f1", @generic="40ae08a5d2802fa82402203a5291a7d66ecb3f01d3e8ab178b19015d2b1dd9ddf2a5b4ba401aa24eba36193ff411", @generic="d8b7baac12c11d38f99dc18a8913696aca3cc930243773a80a07d56206bfa6f357be00734ac7ac34ab5fb810f1441298e4e0971e789028ada93b0fd05aefe07b46b3f4e6c92101ae711aa960d937d5bed894d6dbd014858fb44c5164ef36d1f822ef54ee4765cc17ccaa90b42fa1155e3e31cb27912bcdd914c8ea52a8e1e19490c48b0180aba36f6ec21db51684b79d13414d83627c302dc327f56daa08ca59c799f0d6f325eb2d52864a6871c1b079715416d4bab3aa1a45fbcdbed56e2eb2896e86a24d91d9a06073e384fe3a8d5f53aa6906a6eb6cc92a96839cdd633804e6dfb01f3fbf3ddbb6ab2fd84218150b4a6c3d73f0e18415cd489a2874338a1691db5f1b43fecead39d7ceb20e172ac1aee476484764c4a1b5c6b55d1dca533de0fbdd0f3991fd319bd823d90beb835448b68198ba1abe0ded7e4c4f2e467da1ab95732af3072d941c7598d5a9d80e97306976f6cc7dc55d56987e9c9270fb92bcef9c1b505cf9a39ef9eb08181fe20e7345a12fbce0cccfeeab9c5be2c4a7aab79e31aedfc81ed12dd0ababe757a9dee0a403fbbbdd1a64263a6433670ec820249f1925e529b478dc48349c4bbdd25de5114ce4c2a70ac1b740eed105a03451bd787b6af6d80de6d3229dda35400903ff4e5e6366a658292de801b46ce24c11d42bcf6e9cbe9858c5ec566385731723838c739678234e44dfe935a51654928b12a23c5f67ea0577b61f88493119060a463aff613b7d506055104599f20feb136dc5709049a490e17b92b95b12d80a6de02eb5142878860e30028fc324252c934e8f71fdc860dff3cdfd15218cc0a743d47e71547e9f99deaf26dc07986d5ee64feb1688b7e9b5bffb182207b0fbdac5cf861fc053c30403ab735cf1c7be123acc73b8ecf76815772fa6bc8d9ff55c8b8b4ebdaa3f0776c80d3ca0069ac8d2ef91d48bcc1cbc8c8c7fd09b3d6a3dcca0b5fb7bea396ab969c42eac23d31cb6f54d3aff93498fbed66c47f41e731bff7282889f0d95c3b222aebd7546bc16d49ac78a50df0e0915c7eb4a9e1839237f5f5321ae31eacdec5c80bb5a006c50ccdfbd746367bb6451a1cb2a52a766c7cd03e02977f71211054a7284de5db75fcb8f78ccdd4df3151eb1d3399443d4806e3ebdd6cb177bb56ebb77fe2f96be4adcf14c904ef5d465543cba60dbd2db3a3177008b0262df4d76ac3c6725895516d7391f3399b5524d4dd3b57dd9ea1fc22f0ccbc6345ded7b8b6b85b17540d10339bac0ad95585251f5a0dbce4c67dd4b135bf14e0c7307b57602f67bf5ead41c960820fe78b0b26d9c923da6114adea95f035907cb574ae11ae325fd6c2eae65d0898f5116cb46320e5762af36c442b62b293aef6abc74165fac8208a2d7e31ac5b611b3377fd5b395dff25a695d9e66f5b53fca850bbc296e3c014f7d06260144a3ff6d47935a9f45c9a5b458a5be3fadb2f00959260ec62508e2b9fb57479b188b7c5b936dcf20f8d86d105f139ec162caddd73043f44b3e4b9ad5ee01262092436a8c4568d5140e34a8ce62b50ad66e607ec026c71822aa3426f005f2276dc5441a3deb6a4ce4c52dccc4b056a25b211d731e95d532a3aea3e3fa17ccf90ad59dd13b567d027d5d07fe3e0c8818dc7019e976c2bed1d95f26a36b91708d0adf62eb634cd5d4e6a943000b9d82aa7b606b869252f7504b4b4bb91aadaab73c90afee6f90824100a015fb48041c29882ba00faf126a8f4b36b9cabea1fe8355f0f79df3db6124898d8f523e9641cd40a55004ce5e76874b7ca31c936003257055878aca97a2c849b5ed0c9d8de843f2a1fa9f7b5780fe140809f751d72bc27435fbedf09da3b6cc9d924fd6d86e72460d9a131c6929318243a696e3571b2a735c2a552db63e4d0a122a9538ed2724a580e66519be3035c2708eef02cecf05d7b52cd5e127e22b6ac4755e78976cb9f571a56d9134fd7b512f38b1aa2268b66eeb99ea506c89ea505482dc783eeb4d684993749d52d2337038d5052dd4cbd3f5cebdaa376c962426151a867f3e6caabf81dfeeeec52b234a93e5ab2595f39981b4809f2047a4459d1e00c99204cc6ce7495b7523cd7dfecc6b26c77188d61f6343ec4da40865bb84eb128717267e4997b1e146a966e3169b8c840b48286b5e6448c64e7d7e10e323deb94a2edd3fad8573af8e5521e284e22ddaea78cb3b4e137b314bb6479eb30c6b6ab82e161ae1ed9e6fea57ac11b916791f9bf1aebb8838fc1e4d4a9b3eddc7613601ff40f5811f289bf5db397367bb46147a123e132869498053acad18cf7b8b164247a88c0eb28aa6352e0835a85172a62f5ad0de07d180ee0101ff041e74299d4910bdc12a1938c8711a9460d4289cef57ca79650cdfabb31fb90528e642a5e1a368e2dfa141554c7dd0ff85b9ce5b3c0a8c7165da70049b1dd9581110e8775faa5b7c384eba9f289f35f57a47f34001fbe05efed742841b97cba0cffa5bd36964d3f9a0b2907d2d630f62da3e1bab8f7e1988b38929f99c44927e3acac0df8c90a9cbd3e7bfd0cf59a174cf5c2e6f97d3f7d8957c3d34621e1ed862e225f82823ef95f5c479b38ae15e20d6e9eac53628592c9a70d2e53b63c6b8d19b47a5cc5e32337cfb2e8901ecacc1228a596b7ec962036666d7a6b3658d7d01bd1da852b107fb8205ca63e9fcab2dab2dd78483681a726a0144ae7796d3d1be0246e3c17d07c84325156b930a6a2a3187611bc080a02ce73486448ef62759e16be752312744f29e0b8dc510ccdde93bea57d194e37237e7b6576d2a2ea5b22aef7d44b9b5a2f82b5a4c16722d51d7d3633f20280acdc433a63a548a780bbedfcb9c751d793acbab6620d5f8b8e99ed4403330d997399ecc96804d2764cfa587005435310fbc8633730a08e78a09bea1855da68ab2259c64559c3f70efa045ba6c7a2f382ad8c4457cc599a985eb9cd62f4d4bbf9aabc5b5580766012fe9c4db5bd5fc4d4e4ed8763122b32be5caa9cf6c28cbb114869d92e043f5d87e6bbda4456913b5aca6a1b0ebd9863508876f02e4eaf893cb7d434a9581fcaf9f4349e1b798423db17e3554589fb498ce43e58bd47b657fb32bc3517c2133b9dea5a907f8e8971cbfc196ad075d22396a2f9bc19db1fccc4466571b07550d19bc7af6b8b6756d14db8bff469a40fea35936db5b7c61237413858100fcda3a17732c56f5488cdc6939c78eee4cdf02c6a50c6c9308678bcde7f39fd88b11d3f5b2be128417e514d4417a18400eeccdcbf864555e565b9040bd812161a377a625c0e21bcf8afcbd50e62e5eeb1ff5c4dea5e41b8dadad7c2b1888d69b8701e1307526bb963203b7b093934c7845d535c91192c302f606657b67d602619f2bbef8be630573904cb45b5adf5a8551b0134e79f33a19d3b500e7ad843b1dee203ca554e0ea5227dc131b82607208c4490bdd0ebf1a33cb7dce6b97dd19a6263edb175e871480d27a47c3b1e7a8be8005232065a0c834616466617ec327fc85ae1088c7e83158df4604aed43fe85de56b3e0ac4ea2523903bf9d52f4ef6008a49b795772bf4dda16023a07cdcc9a616686e45829e5edd57634d5d0a65afc275916ef9eefeeed77b5b98b211da91ab655122a0d39bfafcdce87af8467962ce987c17fb70ab8e44dc9a1545e2b6ac7cadb9ead47797b67e0faa25c71eaa620425747f3dea64c4e62923caf665e4343cbb5df99a1a13fbfcca63dd4fe93160e2f892fd9999b719c4572b387437ed09766ca81249027d058ad136d66681f644b021912102efbfaea79403ed2abf71c9b8e387c9c191f0b71a9f729cadc64715ca102a4a3ac6d29a7608c8cb1db970544bc8d969c0e1075681a89e2b5c4a4f79880275dda28c22440e9d741913071f7313d60ce4190f36ea1543d7d9d02b18897edee11add4d0dcbddbcd279aa5464a24fa03ee186d85cb6c95907dfd7cc3f2d45c84a224dea2ca656c6ee7f0c1ea113b72097cad82989c08b897828dc1969f59900736adf1aca54b1724afd558445bffd0f962070314b060aa6ff0f29cb63b7a957e8d15d01ce8dfe0bec145e8fac99aee4283a254957f8cc4db5f0b2ea05bcc04e8f53ac582c9812e1de371ec902726fcec55ef5feee166f20e76cf5f5584eadee13ced32c1d4c8f868e87bc95dfe164a5e570c6e60a4c5c55102e05b3950c51b9c4b73ee84c87e91d57222f4013bf5ba045f35ccc8ad5917d6e4332f3bcd1f37686d22824e67be6cd5dfa853ca5d4cb3915c35796c63c18c39e5bc697433d613313b138f9f98812f256f35c309e204dc7eabf299d6841965a8b3d10886e0ac88d7b56400decdd8943a1cb91be74fead4aeb6a87edb36107bb2d50fecf469e9865301f92c15ae29fd18e26fc1c01c6da043e7d2ec940eee4ec6b202ca37b464a46c62b979b2629a86bc9a08b05940acd11c52d54fc5fabe46158491fc43e6f0e3f52212823382f7327e668018c7bb1221170302647532974fb5cd67d982bd00aebe5c1cea08c32f20a352d4eaba2d5fc66d8e7456ae29b5b3aab56a567f7e407d825225b2baaf1767f200794e9e8d2c8afb35ed152e449514dfba60c61a1f5b8ed9edf8c13e64e2cbcb5e27a20fc323e9b89d0d4a529704c1da3c47b7c8055f55d5a17b316446ed01cb0c91a3761fb21e8fdd54229b11428858f03baa346693178122585fb38df495f25a8f781dcb9d3a2f73b3748646e86276ffe16e038fd0123288df7aa32c1fe7bd440571d435a75a449492fc8ab702577ab5e5215a67fa4bc1f1ccb3c941daab76616759046cae688284d04f452ef83b04aa16ccb33d9d21733131881a2b672d3e16568c1d7f590a60a2b4bb2e4c3b8ec4fc3816b8214b1967c4f4bf09b049bbff8b15ac35728e0a10b56f21aa797d9f2195ff9b2624b2ce43836e814f8e1a7474f0ae55201a6c82f134a6cb223773f2b70d2f19aa6a92057025fb7feeaf62b30841a700ed410c47e4c93dd7b29556f1429abd8d36eaa2051695cfcf1f1b9f7daa4605a5b5ee5fadbcd"]}]}, 0xec4}}, 0x2044050) 08:03:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "f644e3714863f04d7cf5f5a757d96a9cadc281ad6564374222b430fbf21f54f1dec20eb570224c8b9b46c2cdc690d2a8cc8c665b4938548c7f8d3142eb0c381125ef595f7a8ffbcebbbe6618011c4660"}, 0xd8) 08:03:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) 08:03:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 08:03:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0xd2000000, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/211, 0x1a, 0xd3, 0x1}, 0x20) [ 453.740803][ T6335] usb 6-1: new high-speed USB device number 40 using dummy_hcd 08:03:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x80087601) 08:03:54 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x69}]}}, &(0x7f0000000200)=""/227, 0x2a, 0xe3, 0x1}, 0x20) [ 453.916285][ T3695] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 454.112588][ T8887] block nbd4: shutting down sockets [ 454.220760][ T6335] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 454.241112][ T3695] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 455.031946][ T6335] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 455.041539][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.049593][ T6335] usb 6-1: Product: syz [ 455.054009][ T6335] usb 6-1: Manufacturer: syz [ 455.058664][ T6335] usb 6-1: SerialNumber: syz [ 455.101631][ T6335] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 455.111476][ T3695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 455.126189][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.138838][ T3695] usb 1-1: Product: syz [ 455.143990][ T3695] usb 1-1: Manufacturer: syz [ 455.148658][ T3695] usb 1-1: SerialNumber: syz [ 455.193148][ T3695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 455.750848][ T6335] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 455.800746][ T3695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 456.173319][ T6335] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 456.179014][ T6335] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 456.235621][ T3695] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 456.241630][ T3695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 456.375093][ T142] usb 6-1: USB disconnect, device number 40 [ 456.396596][ T6335] ath9k_htc: Failed to initialize the device [ 456.402703][ T142] usb 6-1: ath9k_htc: USB layer deinitialized [ 456.450410][ T3716] usb 1-1: USB disconnect, device number 68 [ 456.462827][ T3695] ath9k_htc: Failed to initialize the device [ 456.472991][ T3716] usb 1-1: ath9k_htc: USB layer deinitialized 08:03:57 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf0, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3a, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357e"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:57 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x3a, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357e"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:03:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000240)="030c0c16", 0x4) 08:03:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x69}]}}, &(0x7f0000000200)=""/227, 0x2a, 0xe3, 0x1}, 0x20) 08:03:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0x801c581f) 08:03:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 08:03:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0xa, 0xa, 0x401}, 0x14}}, 0x0) 08:03:57 executing program 3: execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=[0xfffffffffffffffe], 0x0) 08:03:57 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) [ 457.021432][ T8898] block nbd4: shutting down sockets 08:03:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xc0045878) 08:03:57 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x100000001, 0xd00000000000000) [ 457.170742][ T6336] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 457.178957][ T8914] block nbd4: shutting down sockets [ 457.270770][ T6335] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 457.481085][ T6336] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 457.580840][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 458.321106][ T6336] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.330185][ T6336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.338348][ T6336] usb 6-1: Product: syz [ 458.342714][ T6336] usb 6-1: Manufacturer: syz [ 458.347309][ T6336] usb 6-1: SerialNumber: syz [ 458.391926][ T6336] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 458.400728][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.409785][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.421007][ T6335] usb 1-1: Product: syz [ 458.425193][ T6335] usb 1-1: Manufacturer: syz [ 458.429852][ T6335] usb 1-1: SerialNumber: syz [ 458.472137][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 458.990711][ T6336] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 459.040980][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 459.405383][ T6336] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 459.411113][ T6336] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 459.463450][ T6335] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 459.469108][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 459.613540][ T3716] usb 6-1: USB disconnect, device number 41 [ 459.623749][ T6336] ath9k_htc: Failed to initialize the device [ 459.629885][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized [ 459.664571][ T3695] usb 1-1: USB disconnect, device number 69 [ 459.684810][ T6335] ath9k_htc: Failed to initialize the device [ 459.691279][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:00 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x44, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a59376"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:00 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x44, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a59376"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:00 executing program 1: add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 08:04:00 executing program 2: syz_open_dev$usbfs(&(0x7f0000002940), 0x9, 0x0) 08:04:00 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fdatasync(r0) 08:04:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xc0045878) 08:04:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f00000004c0)=""/204, 0x26, 0xcc, 0x1}, 0x20) 08:04:00 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x33}, 0x20) 08:04:00 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000100)=""/211, 0x1000000, 0xd3, 0x1}, 0x20) 08:04:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000240)="03", 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) [ 460.265328][ T8923] block nbd4: shutting down sockets 08:04:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 08:04:01 executing program 3: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) [ 460.410758][ T3716] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 460.485187][ T6337] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 460.710871][ T3716] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 460.790858][ T6337] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 461.610754][ T3716] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 461.610825][ T6337] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 461.620186][ T3716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.636088][ T6337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.637306][ T3716] usb 6-1: Product: syz [ 461.646692][ T6337] usb 1-1: Product: syz [ 461.649336][ T3716] usb 6-1: Manufacturer: syz [ 461.660857][ T3716] usb 6-1: SerialNumber: syz [ 461.662675][ T6337] usb 1-1: Manufacturer: syz [ 461.670061][ T6337] usb 1-1: SerialNumber: syz [ 461.703067][ T3716] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 461.711533][ T6337] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 462.300814][ T6337] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.350753][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.725504][ T6337] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 462.731240][ T6337] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 462.773159][ T3716] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 462.778831][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 462.928839][ T142] usb 1-1: USB disconnect, device number 70 [ 462.934182][ T6337] ath9k_htc: Failed to initialize the device [ 462.943035][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 462.986573][ T6335] usb 6-1: USB disconnect, device number 42 [ 463.004087][ T3716] ath9k_htc: Failed to initialize the device [ 463.010286][ T6335] usb 6-1: ath9k_htc: USB layer deinitialized 08:04:04 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x44, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a59376"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:04 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unlinkat(r0, &(0x7f0000000300)='./file0\x00', 0x0) 08:04:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xc0101282) 08:04:04 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 08:04:04 executing program 1: bpf$MAP_CREATE(0x4, &(0x7f0000000780)=@bloom_filter, 0x90) 08:04:04 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x44, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a59376"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:04 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x187040) 08:04:04 executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, 0xfffffffffffffffd, 0x0) 08:04:04 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuseblk(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@allow_other}, {@blksize}, {@default_permissions}]}}) 08:04:04 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@func, @kfunc, @btf_id, @map_val]}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0xe2, &(0x7f0000000380)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 463.577404][ T8945] block nbd4: shutting down sockets 08:04:04 executing program 3: pipe(&(0x7f00000000c0)) getresuid(&(0x7f0000000100), &(0x7f0000000140), 0x0) 08:04:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xc0189436) [ 463.731396][ T8964] block nbd4: shutting down sockets [ 463.805141][ T6343] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 463.880705][ T6335] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 464.090813][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 464.160772][ T6335] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 464.890723][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 464.899843][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.908132][ T6343] usb 1-1: Product: syz [ 464.912587][ T6343] usb 1-1: Manufacturer: syz [ 464.917229][ T6343] usb 1-1: SerialNumber: syz [ 464.960795][ T6335] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 464.970676][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 464.978836][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.990431][ T6335] usb 6-1: Product: syz [ 464.994947][ T6335] usb 6-1: Manufacturer: syz [ 464.999564][ T6335] usb 6-1: SerialNumber: syz [ 465.041711][ T6335] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 465.560653][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 465.610701][ T6335] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 465.984929][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 465.990771][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 466.034997][ T6335] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 466.040824][ T6335] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 466.192898][ T6336] usb 1-1: USB disconnect, device number 71 [ 466.202805][ T6343] ath9k_htc: Failed to initialize the device [ 466.210819][ T6336] usb 1-1: ath9k_htc: USB layer deinitialized [ 466.241103][ T3707] usb 6-1: USB disconnect, device number 43 [ 466.254378][ T6335] ath9k_htc: Failed to initialize the device [ 466.263516][ T3707] usb 6-1: ath9k_htc: USB layer deinitialized 08:04:07 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xf8, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x44, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a59376"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0xc0189436, 0x0) 08:04:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x80108906, 0x0) 08:04:07 executing program 2: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) 08:04:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xc020660b) 08:04:07 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x44, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a59376"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:07 executing program 1: syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 08:04:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x541b, 0x0) 08:04:07 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) 08:04:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000480)) [ 466.833373][ T8972] block nbd4: shutting down sockets 08:04:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xc0481273) 08:04:07 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x80841, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) [ 466.981810][ T8990] block nbd4: shutting down sockets [ 467.070873][ T6335] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 467.120620][ T142] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 467.350885][ T6335] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 467.431766][ T142] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 468.160739][ T6335] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.170339][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.178540][ T6335] usb 6-1: Product: syz [ 468.183019][ T6335] usb 6-1: Manufacturer: syz [ 468.187678][ T6335] usb 6-1: SerialNumber: syz [ 468.231725][ T6335] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 468.342841][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.351939][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.359910][ T142] usb 1-1: Product: syz [ 468.364872][ T142] usb 1-1: Manufacturer: syz [ 468.369485][ T142] usb 1-1: SerialNumber: syz [ 468.435838][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 468.810714][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.060795][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.234884][ T6343] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 469.241357][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 469.451335][ T3707] usb 6-1: USB disconnect, device number 44 [ 469.472328][ T6343] ath9k_htc: Failed to initialize the device [ 469.478401][ T3707] usb 6-1: ath9k_htc: USB layer deinitialized [ 469.491865][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 469.497541][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 469.698679][ T6335] usb 1-1: USB disconnect, device number 72 [ 469.713087][ T142] ath9k_htc: Failed to initialize the device [ 469.724046][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:10 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x49, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3c"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:10 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 08:04:10 executing program 3: setreuid(0x0, 0xee00) syz_open_dev$dri(&(0x7f00000017c0), 0x0, 0x0) 08:04:10 executing program 2: setreuid(0x0, 0xee00) syz_open_dev$dri(&(0x7f00000017c0), 0x3, 0x0) 08:04:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:10 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x49, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3c"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:10 executing program 3: bpf$MAP_CREATE(0x6, 0x0, 0x700) 08:04:10 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 08:04:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5", 0x31}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss={0x2, 0x8dc}, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:04:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:04:10 executing program 3: syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x379000) 08:04:11 executing program 2: setrlimit(0x0, &(0x7f0000000000)={0x5a}) [ 470.316417][ T6343] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 470.560610][ T3707] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 470.631084][ T6343] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 470.823853][ T3650] block nbd4: Receive control failed (result -32) [ 470.824300][ T9001] block nbd4: shutting down sockets [ 470.840686][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 471.510814][ T6343] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 471.520039][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.528741][ T6343] usb 6-1: Product: syz [ 471.533329][ T6343] usb 6-1: Manufacturer: syz [ 471.538015][ T6343] usb 6-1: SerialNumber: syz [ 471.585277][ T6343] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 471.640868][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 471.649982][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.658503][ T3707] usb 1-1: Product: syz [ 471.663413][ T3707] usb 1-1: Manufacturer: syz [ 471.668084][ T3707] usb 1-1: SerialNumber: syz [ 471.721957][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 472.180807][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 472.330663][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 472.604766][ T6343] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 472.610460][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 472.753896][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 472.759569][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 472.813118][ T3716] usb 6-1: USB disconnect, device number 45 [ 472.825851][ T6343] ath9k_htc: Failed to initialize the device [ 472.832134][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized [ 472.957926][ T6335] usb 1-1: USB disconnect, device number 73 [ 472.972836][ T3707] ath9k_htc: Failed to initialize the device [ 472.979018][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:14 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x49, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3c"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:14 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 08:04:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000240)="03", 0x1) 08:04:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) 08:04:14 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) 08:04:14 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x49, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3c"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 08:04:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x8940, 0x0) 08:04:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x5}, {}, {}]}]}}, &(0x7f0000000100)=""/211, 0x3e, 0xd3, 0x1}, 0x20) [ 473.484502][ T9030] block nbd4: shutting down sockets 08:04:14 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x109202, 0x0) 08:04:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 08:04:14 executing program 1: pipe(&(0x7f00000000c0)) getresuid(&(0x7f0000000100), 0x0, 0x0) [ 473.685058][ T3707] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 473.860593][ T6335] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 473.970809][ T3707] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 474.140858][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 474.870828][ T3707] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 474.879901][ T3707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.888224][ T3707] usb 6-1: Product: syz [ 474.892814][ T3707] usb 6-1: Manufacturer: syz [ 474.897422][ T3707] usb 6-1: SerialNumber: syz [ 474.940732][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 474.949878][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.958279][ T6335] usb 1-1: Product: syz [ 474.961566][ T3707] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 474.963120][ T6335] usb 1-1: Manufacturer: syz [ 474.977150][ T6335] usb 1-1: SerialNumber: syz [ 475.041424][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 475.620672][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 475.630885][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 476.043268][ T6335] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 476.048961][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 476.064956][ T3716] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 476.070875][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 476.246885][ T142] usb 1-1: USB disconnect, device number 74 [ 476.263078][ T6335] ath9k_htc: Failed to initialize the device [ 476.269140][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 476.284670][ T3707] usb 6-1: USB disconnect, device number 46 [ 476.294798][ T3716] ath9k_htc: Failed to initialize the device [ 476.306451][ T3707] usb 6-1: ath9k_htc: USB layer deinitialized 08:04:17 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x49, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3c"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x4}]}}, &(0x7f0000000100)=""/211, 0x26, 0xd3, 0x1}, 0x20) 08:04:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) 08:04:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5452, 0x0) 08:04:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setflags(r0, 0x2, 0x1) 08:04:17 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x49, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3c"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0) 08:04:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5", 0x31}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:04:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14", 0x2f}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 08:04:17 executing program 1: ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) request_key(&(0x7f0000006240)='trusted\x00', &(0x7f0000006280)={'syz', 0x3}, &(0x7f00000062c0)='/sys/kernel/debug/sync/sw_sync\x00', 0xfffffffffffffffe) 08:04:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a5", 0xb5}, {0x0}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) [ 476.922208][ T9060] block nbd4: shutting down sockets 08:04:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) [ 477.100839][ T6336] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 477.131057][ T6335] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 477.390846][ T6336] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 477.430842][ T6335] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 478.190978][ T6336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 478.200138][ T6336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.208473][ T6336] usb 1-1: Product: syz [ 478.213060][ T6336] usb 1-1: Manufacturer: syz [ 478.217798][ T6336] usb 1-1: SerialNumber: syz [ 478.232042][ T6335] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 478.241639][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.250147][ T6335] usb 6-1: Product: syz [ 478.254926][ T6335] usb 6-1: Manufacturer: syz [ 478.259539][ T6335] usb 6-1: SerialNumber: syz [ 478.265422][ T6336] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 478.311785][ T6335] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 478.842486][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 478.880797][ T6337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 479.273787][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 479.279495][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 479.303376][ T6337] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 479.309029][ T6337] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 479.480218][ T6335] usb 1-1: USB disconnect, device number 75 [ 479.494107][ T6343] ath9k_htc: Failed to initialize the device [ 479.500159][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized [ 479.509461][ T142] usb 6-1: USB disconnect, device number 47 [ 479.524195][ T6337] ath9k_htc: Failed to initialize the device [ 479.530361][ T142] usb 6-1: ath9k_htc: USB layer deinitialized 08:04:20 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4b, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fd"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a5", 0xb5}, {0x0}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:04:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xdf) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xff) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:20 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/ath3k', 0x410802, 0x0) 08:04:20 executing program 2: r0 = syz_usbip_server_init(0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x1}}, 0x30) 08:04:20 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4b, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fd"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 480.038953][ T9094] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 08:04:20 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x0, 0x0) 08:04:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a5", 0xb5}, {0x0}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 08:04:20 executing program 3: pipe(0x0) pipe(&(0x7f0000000640)) 08:04:20 executing program 3: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.log\x00', 0x40, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001980)='.log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) 08:04:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c513e05ebadb1ccbd2324e6c7d700a8e3222898b09a5", 0xb5}, {0x0}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15ae82050", 0x6f}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 08:04:21 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000, &(0x7f0000000180)) [ 480.331519][ T3707] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 480.340686][ T6337] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 480.631405][ T6337] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 480.651248][ T3707] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 480.860826][ T3650] block nbd4: Receive control failed (result -32) [ 480.861172][ T9091] block nbd4: shutting down sockets [ 481.490701][ T3707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 481.499864][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.507993][ T3707] usb 1-1: Product: syz [ 481.510877][ T6337] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 481.512414][ T3707] usb 1-1: Manufacturer: syz [ 481.527912][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.535226][ T3707] usb 1-1: SerialNumber: syz [ 481.536326][ T6337] usb 6-1: Product: syz [ 481.544709][ T6337] usb 6-1: Manufacturer: syz [ 481.549311][ T6337] usb 6-1: SerialNumber: syz [ 481.582204][ T3707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.592186][ T6337] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 482.200665][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.210865][ T6337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.613059][ T3707] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 482.618755][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 482.624394][ T6337] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 482.633530][ T6337] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 482.814904][ T6336] usb 1-1: USB disconnect, device number 76 [ 482.824865][ T3707] ath9k_htc: Failed to initialize the device [ 482.835077][ T6336] usb 1-1: ath9k_htc: USB layer deinitialized [ 482.835357][ T3716] usb 6-1: USB disconnect, device number 48 [ 482.845314][ T6337] ath9k_htc: Failed to initialize the device [ 482.856021][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized 08:04:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4b, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fd"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 08:04:24 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) fdatasync(0xffffffffffffffff) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002b40)='cpu.pressure\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7c2}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="44000000030103"], 0x44}}, 0x0) 08:04:24 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x2002, 0x0) 08:04:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xdf) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xff) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:24 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4b, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fd"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:24 executing program 2: bpf$MAP_CREATE(0x6, 0x0, 0x7) 08:04:24 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1a5000, 0x0) [ 483.397976][ T9126] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 08:04:24 executing program 2: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x5) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0xc080) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x114, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8}}}]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa564}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x114}}, 0x20040840) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x41) 08:04:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x44, 0x3, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x44}}, 0x0) 08:04:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1014, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:04:24 executing program 3: add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 483.670885][ T6337] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 483.711000][ T6336] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 484.011020][ T6336] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 484.018981][ T6337] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 484.880770][ T6336] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 484.889881][ T6336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.898410][ T6337] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 484.907984][ T6337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.916446][ T6336] usb 6-1: Product: syz [ 484.920720][ T6337] usb 1-1: Product: syz [ 484.924879][ T6337] usb 1-1: Manufacturer: syz [ 484.929453][ T6337] usb 1-1: SerialNumber: syz [ 484.934262][ T6336] usb 6-1: Manufacturer: syz [ 484.938860][ T6336] usb 6-1: SerialNumber: syz [ 484.981295][ T6336] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 484.992478][ T6337] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 485.570754][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 485.579777][ T6336] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 485.985690][ T6336] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 485.991504][ T6336] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 486.013645][ T6335] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 486.019336][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 486.189495][ T6344] usb 6-1: USB disconnect, device number 49 [ 486.204537][ T6336] ath9k_htc: Failed to initialize the device [ 486.210813][ T6344] usb 6-1: ath9k_htc: USB layer deinitialized [ 486.219071][ T6337] usb 1-1: USB disconnect, device number 77 [ 486.227654][ T6335] ath9k_htc: Failed to initialize the device [ 486.248930][ T6337] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4b, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fd"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:27 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 08:04:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40086602, 0x0) 08:04:27 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b00)={0x0, 0x0, 0x1c}, 0x10) 08:04:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xdf) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xff) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4b, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fd"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:27 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:04:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x22, 0x0, "f644e3714863f04d7cf5f5a757d96a9cadc281ad6564374222b430fbf21f54f1dec20eb570224c8b9b46c2cdc690d2a8cc8c665b4938548c7f8d3142eb0c381125ef595f7a8ffbcebbbe6618011c4660"}, 0xd8) 08:04:27 executing program 1: shmget(0x3, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) [ 486.735892][ T27] audit: type=1400 audit(1653379467.451:317): avc: denied { setattr } for pid=9143 comm="syz-executor.1" path="socket:[49933]" dev="sockfs" ino=49933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 08:04:27 executing program 3: syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x4c482) 08:04:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff00000001eb62603d7eb4b414000018008c130900d151e14fa104ea7bea813debe344dd40c3b9fab043497ac3600466376b233d71fee6", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) [ 486.977023][ T27] audit: type=1400 audit(1653379467.681:318): avc: denied { append } for pid=9164 comm="syz-executor.3" name="card0" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.050793][ T3695] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 487.140620][ T3716] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 487.362986][ T3695] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 487.430881][ T3716] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 487.758239][ T3650] block nbd4: Receive control failed (result -32) [ 487.758809][ T9163] block nbd4: shutting down sockets [ 488.260811][ T3695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 488.269890][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.278779][ T3695] usb 6-1: Product: syz [ 488.286693][ T3695] usb 6-1: Manufacturer: syz [ 488.291595][ T3695] usb 6-1: SerialNumber: syz [ 488.320814][ T3716] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 488.329920][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.339046][ T3695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 488.347379][ T3716] usb 1-1: Product: syz [ 488.353986][ T3716] usb 1-1: Manufacturer: syz [ 488.368038][ T3716] usb 1-1: SerialNumber: syz [ 488.411517][ T3716] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 488.930715][ T3695] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 488.980769][ T3716] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 489.354063][ T3695] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 489.359729][ T3695] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 489.404897][ T3716] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 489.411989][ T3716] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 489.556127][ T6335] usb 6-1: USB disconnect, device number 50 [ 489.573342][ T3695] ath9k_htc: Failed to initialize the device [ 489.579399][ T6335] usb 6-1: ath9k_htc: USB layer deinitialized [ 489.606969][ T142] usb 1-1: USB disconnect, device number 78 [ 489.625156][ T3716] ath9k_htc: Failed to initialize the device [ 489.632603][ T142] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4c, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda5"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4}, {}, {0xd}]}]}}, &(0x7f0000000100)=""/211, 0x3e, 0xd3, 0x1}, 0x20) 08:04:30 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 08:04:30 executing program 3: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8001}, &(0x7f00000000c0)) 08:04:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff00000001eb62603d7eb4b414000018008c130900d151e14fa104ea7bea813debe344dd40c3b9fab043497ac3600466376b233d71fee6", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) (async) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:30 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4c, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda5"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 490.093045][ T27] audit: type=1400 audit(1653379470.811:319): avc: denied { ioctl } for pid=9170 comm="syz-executor.2" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 08:04:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ed", 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 08:04:30 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:04:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff00000001eb62603d7eb4b414000018008c130900d151e14fa104ea7bea813debe344dd40c3b9fab043497ac3600466376b233d71fee6", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) (async, rerun: 64) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x3) (rerun: 64) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:30 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 08:04:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x8906, 0x0) [ 490.443024][ T6335] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 490.470767][ T6344] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 490.730811][ T6335] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 490.760809][ T6344] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 491.119715][ T3650] block nbd4: Receive control failed (result -32) [ 491.127479][ T9190] block nbd4: shutting down sockets [ 491.550721][ T6335] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 491.560946][ T6344] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 491.569992][ T6344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.578263][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.586502][ T6344] usb 1-1: Product: syz [ 491.590918][ T6335] usb 6-1: Product: syz [ 491.595092][ T6335] usb 6-1: Manufacturer: syz [ 491.599717][ T6335] usb 6-1: SerialNumber: syz [ 491.604764][ T6344] usb 1-1: Manufacturer: syz [ 491.609370][ T6344] usb 1-1: SerialNumber: syz [ 491.651573][ T6344] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 491.662453][ T6335] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 492.240717][ T6337] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 492.249794][ T6336] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 492.678968][ T6337] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 492.684810][ T6336] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 492.691786][ T6337] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 492.699643][ T6336] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 492.877044][ T6335] usb 1-1: USB disconnect, device number 79 [ 492.881077][ T142] usb 6-1: USB disconnect, device number 51 [ 492.896841][ T6336] ath9k_htc: Failed to initialize the device [ 492.903190][ T142] usb 6-1: ath9k_htc: USB layer deinitialized [ 492.903284][ T6337] ath9k_htc: Failed to initialize the device [ 492.915633][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:34 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4c, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda5"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:34 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x400, 0x0) 08:04:34 executing program 3: syz_open_dev$dri(&(0x7f0000000700), 0x12, 0x620002) 08:04:34 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4c, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda5"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000440)=""/22, &(0x7f0000000480)=0x16) 08:04:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x541101) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x4) bind$ax25(r3, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r4 = dup(r2) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="afa33dbaf4a57a7dde001befe0f0a86d1625475334d8dcbfae1688ba0fea7de2bbf0880dc26cf4c72e4349e5351fb0d03add0f1974561ffcb05b0f03fd9ae6b07027918afd39", 0x46) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x90, 0x8}, 0x18) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) open(&(0x7f0000000100)='./file0\x00', 0x40080, 0x21) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) pidfd_getfd(r8, r1, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) [ 493.415163][ T27] audit: type=1400 audit(1653379474.131:320): avc: denied { write } for pid=9199 comm="syz-executor.4" path="socket:[50385]" dev="sockfs" ino=50385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 08:04:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 08:04:34 executing program 1: pipe(0x0) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x1000, 0x0) 08:04:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0xec4, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@nested={0xead, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="2eb32d58f808ef98b2ebe3a217ec4b622fc61b275d8f6ffbeab2c2f20e7863ded8c8a51215bc6f7f2ef679a04b4bcdc8256ffd35740a9a3c25985d4e729b15e3ebcb6e374d7e127efde1b716591e965e6b274e1eb75579356548355798794a659581c71466d821be2ccebc3851aaf8510aff4fc2681f3ced7d29a3e03a798b4cc94d06f6f17f", @generic="40ae08a5d2802fa82402203a5291a7d66ecb3f01d3e8ab178b19015d2b1dd9ddf2a5b4ba401aa24eba36193ff411fe67b79f4b1a4010f947bb7b30a6c435bf0f97d53d9260c633d2dce054ac91b01b0a666e", @generic="d8b7baac12c11d38f99dc18a8913696aca3cc930243773a80a07d56206bfa6f357be00734ac7ac34ab5fb810f1441298e4e0971e789028ada93b0fd05aefe07b46b3f4e6c92101ae711aa960d937d5bed894d6dbd014858fb44c5164ef36d1f822ef54ee4765cc17ccaa90b42fa1155e3e31cb27912bcdd914c8ea52a8e1e19490c48b0180aba36f6ec21db51684b79d13414d83627c302dc327f56daa08ca59c799f0d6f325eb2d52864a6871c1b079715416d4bab3aa1a45fbcdbed56e2eb2896e86a24d91d9a06073e384fe3a8d5f53aa6906a6eb6cc92a96839cdd633804e6dfb01f3fbf3ddbb6ab2fd84218150b4a6c3d73f0e18415cd489a2874338a1691db5f1b43fecead39d7ceb20e172ac1aee476484764c4a1b5c6b55d1dca533de0fbdd0f3991fd319bd823d90beb835448b68198ba1abe0ded7e4c4f2e467da1ab95732af3072d941c7598d5a9d80e97306976f6cc7dc55d56987e9c9270fb92bcef9c1b505cf9a39ef9eb08181fe20e7345a12fbce0cccfeeab9c5be2c4a7aab79e31aedfc81ed12dd0ababe757a9dee0a403fbbbdd1a64263a6433670ec820249f1925e529b478dc48349c4bbdd25de5114ce4c2a70ac1b740eed105a03451bd787b6af6d80de6d3229dda35400903ff4e5e6366a658292de801b46ce24c11d42bcf6e9cbe9858c5ec566385731723838c739678234e44dfe935a51654928b12a23c5f67ea0577b61f88493119060a463aff613b7d506055104599f20feb136dc5709049a490e17b92b95b12d80a6de02eb5142878860e30028fc324252c934e8f71fdc860dff3cdfd15218cc0a743d47e71547e9f99deaf26dc07986d5ee64feb1688b7e9b5bffb182207b0fbdac5cf861fc053c30403ab735cf1c7be123acc73b8ecf76815772fa6bc8d9ff55c8b8b4ebdaa3f0776c80d3ca0069ac8d2ef91d48bcc1cbc8c8c7fd09b3d6a3dcca0b5fb7bea396ab969c42eac23d31cb6f54d3aff93498fbed66c47f41e731bff7282889f0d95c3b222aebd7546bc16d49ac78a50df0e0915c7eb4a9e1839237f5f5321ae31eacdec5c80bb5a006c50ccdfbd746367bb6451a1cb2a52a766c7cd03e02977f71211054a7284de5db75fcb8f78ccdd4df3151eb1d3399443d4806e3ebdd6cb177bb56ebb77fe2f96be4adcf14c904ef5d465543cba60dbd2db3a3177008b0262df4d76ac3c6725895516d7391f3399b5524d4dd3b57dd9ea1fc22f0ccbc6345ded7b8b6b85b17540d10339bac0ad95585251f5a0dbce4c67dd4b135bf14e0c7307b57602f67bf5ead41c960820fe78b0b26d9c923da6114adea95f035907cb574ae11ae325fd6c2eae65d0898f5116cb46320e5762af36c442b62b293aef6abc74165fac8208a2d7e31ac5b611b3377fd5b395dff25a695d9e66f5b53fca850bbc296e3c014f7d06260144a3ff6d47935a9f45c9a5b458a5be3fadb2f00959260ec62508e2b9fb57479b188b7c5b936dcf20f8d86d105f139ec162caddd73043f44b3e4b9ad5ee01262092436a8c4568d5140e34a8ce62b50ad66e607ec026c71822aa3426f005f2276dc5441a3deb6a4ce4c52dccc4b056a25b211d731e95d532a3aea3e3fa17ccf90ad59dd13b567d027d5d07fe3e0c8818dc7019e976c2bed1d95f26a36b91708d0adf62eb634cd5d4e6a943000b9d82aa7b606b869252f7504b4b4bb91aadaab73c90afee6f90824100a015fb48041c29882ba00faf126a8f4b36b9cabea1fe8355f0f79df3db6124898d8f523e9641cd40a55004ce5e76874b7ca31c936003257055878aca97a2c849b5ed0c9d8de843f2a1fa9f7b5780fe140809f751d72bc27435fbedf09da3b6cc9d924fd6d86e72460d9a131c6929318243a696e3571b2a735c2a552db63e4d0a122a9538ed2724a580e66519be3035c2708eef02cecf05d7b52cd5e127e22b6ac4755e78976cb9f571a56d9134fd7b512f38b1aa2268b66eeb99ea506c89ea505482dc783eeb4d684993749d52d2337038d5052dd4cbd3f5cebdaa376c962426151a867f3e6caabf81dfeeeec52b234a93e5ab2595f39981b4809f2047a4459d1e00c99204cc6ce7495b7523cd7dfecc6b26c77188d61f6343ec4da40865bb84eb128717267e4997b1e146a966e3169b8c840b48286b5e6448c64e7d7e10e323deb94a2edd3fad8573af8e5521e284e22ddaea78cb3b4e137b314bb6479eb30c6b6ab82e161ae1ed9e6fea57ac11b916791f9bf1aebb8838fc1e4d4a9b3eddc7613601ff40f5811f289bf5db397367bb46147a123e132869498053acad18cf7b8b164247a88c0eb28aa6352e0835a85172a62f5ad0de07d180ee0101ff041e74299d4910bdc12a1938c8711a9460d4289cef57ca79650cdfabb31fb90528e642a5e1a368e2dfa141554c7dd0ff85b9ce5b3c0a8c7165da70049b1dd9581110e8775faa5b7c384eba9f289f35f57a47f34001fbe05efed742841b97cba0cffa5bd36964d3f9a0b2907d2d630f62da3e1bab8f7e1988b38929f99c44927e3acac0df8c90a9cbd3e7bfd0cf59a174cf5c2e6f97d3f7d8957c3d34621e1ed862e225f82823ef95f5c479b38ae15e20d6e9eac53628592c9a70d2e53b63c6b8d19b47a5cc5e32337cfb2e8901ecacc1228a596b7ec962036666d7a6b3658d7d01bd1da852b107fb8205ca63e9fcab2dab2dd78483681a726a0144ae7796d3d1be0246e3c17d07c84325156b930a6a2a3187611bc080a02ce73486448ef62759e16be752312744f29e0b8dc510ccdde93bea57d194e37237e7b6576d2a2ea5b22aef7d44b9b5a2f82b5a4c16722d51d7d3633f20280acdc433a63a548a780bbedfcb9c751d793acbab6620d5f8b8e99ed4403330d997399ecc96804d2764cfa587005435310fbc8633730a08e78a09bea1855da68ab2259c64559c3f70efa045ba6c7a2f382ad8c4457cc599a985eb9cd62f4d4bbf9aabc5b5580766012fe9c4db5bd5fc4d4e4ed8763122b32be5caa9cf6c28cbb114869d92e043f5d87e6bbda4456913b5aca6a1b0ebd9863508876f02e4eaf893cb7d434a9581fcaf9f4349e1b798423db17e3554589fb498ce43e58bd47b657fb32bc3517c2133b9dea5a907f8e8971cbfc196ad075d22396a2f9bc19db1fccc4466571b07550d19bc7af6b8b6756d14db8bff469a40fea35936db5b7c61237413858100fcda3a17732c56f5488cdc6939c78eee4cdf02c6a50c6c9308678bcde7f39fd88b11d3f5b2be128417e514d4417a18400eeccdcbf864555e565b9040bd812161a377a625c0e21bcf8afcbd50e62e5eeb1ff5c4dea5e41b8dadad7c2b1888d69b8701e1307526bb963203b7b093934c7845d535c91192c302f606657b67d602619f2bbef8be630573904cb45b5adf5a8551b0134e79f33a19d3b500e7ad843b1dee203ca554e0ea5227dc131b82607208c4490bdd0ebf1a33cb7dce6b97dd19a6263edb175e871480d27a47c3b1e7a8be8005232065a0c834616466617ec327fc85ae1088c7e83158df4604aed43fe85de56b3e0ac4ea2523903bf9d52f4ef6008a49b795772bf4dda16023a07cdcc9a616686e45829e5edd57634d5d0a65afc275916ef9eefeeed77b5b98b211da91ab655122a0d39bfafcdce87af8467962ce987c17fb70ab8e44dc9a1545e2b6ac7cadb9ead47797b67e0faa25c71eaa620425747f3dea64c4e62923caf665e4343cbb5df99a1a13fbfcca63dd4fe93160e2f892fd9999b719c4572b387437ed09766ca81249027d058ad136d66681f644b021912102efbfaea79403ed2abf71c9b8e387c9c191f0b71a9f729cadc64715ca102a4a3ac6d29a7608c8cb1db970544bc8d969c0e1075681a89e2b5c4a4f79880275dda28c22440e9d741913071f7313d60ce4190f36ea1543d7d9d02b18897edee11add4d0dcbddbcd279aa5464a24fa03ee186d85cb6c95907dfd7cc3f2d45c84a224dea2ca656c6ee7f0c1ea113b72097cad82989c08b897828dc1969f59900736adf1aca54b1724afd558445bffd0f962070314b060aa6ff0f29cb63b7a957e8d15d01ce8dfe0bec145e8fac99aee4283a254957f8cc4db5f0b2ea05bcc04e8f53ac582c9812e1de371ec902726fcec55ef5feee166f20e76cf5f5584eadee13ced32c1d4c8f868e87bc95dfe164a5e570c6e60a4c5c55102e05b3950c51b9c4b73ee84c87e91d57222f4013bf5ba045f35ccc8ad5917d6e4332f3bcd1f37686d22824e67be6cd5dfa853ca5d4cb3915c35796c63c18c39e5bc697433d613313b138f9f98812f256f35c309e204dc7eabf299d6841965a8b3d10886e0ac88d7b56400decdd8943a1cb91be74fead4aeb6a87edb36107bb2d50fecf469e9865301f92c15ae29fd18e26fc1c01c6da043e7d2ec940eee4ec6b202ca37b464a46c62b979b2629a86bc9a08b05940acd11c52d54fc5fabe46158491fc43e6f0e3f52212823382f7327e668018c7bb1221170302647532974fb5cd67d982bd00aebe5c1cea08c32f20a352d4eaba2d5fc66d8e7456ae29b5b3aab56a567f7e407d825225b2baaf1767f200794e9e8d2c8afb35ed152e449514dfba60c61a1f5b8ed9edf8c13e64e2cbcb5e27a20fc323e9b89d0d4a529704c1da3c47b7c8055f55d5a17b316446ed01cb0c91a3761fb21e8fdd54229b11428858f03baa346693178122585fb38df495f25a8f781dcb9d3a2f73b3748646e86276ffe16e038fd0123288df7aa32c1fe7bd440571d435a75a449492fc8ab702577ab5e5215a67fa4bc1f1ccb3c941daab76616759046cae688284d04f452ef83b04aa16ccb33d9d21733131881a2b672d3e16568c1d7f590a60a2b4bb2e4c3b8ec4fc3816b8214b1967c4f4bf09b049bbff8b15ac35728e0a10b56f21aa797d9f2195ff9b2624b2ce43836e814f8e1a7474f0ae55201a6c82f134a6cb223773f2b70d2f19aa6a92057025fb7feeaf62b30841a700e"]}]}, 0xec4}}, 0x0) 08:04:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x541101) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x4) bind$ax25(r3, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r4 = dup(r2) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="afa33dbaf4a57a7dde001befe0f0a86d1625475334d8dcbfae1688ba0fea7de2bbf0880dc26cf4c72e4349e5351fb0d03add0f1974561ffcb05b0f03fd9ae6b07027918afd39", 0x46) (async, rerun: 32) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 32) r5 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x90, 0x8}, 0x18) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async, rerun: 32) open(&(0x7f0000000100)='./file0\x00', 0x40080, 0x21) (async, rerun: 32) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10700) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) pidfd_getfd(r8, r1, 0x0) (async, rerun: 64) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) 08:04:34 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 08:04:34 executing program 1: request_key(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) [ 493.750832][ T6343] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 493.780626][ T6335] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 494.030671][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 494.060719][ T6335] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 494.830685][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 494.840416][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.849879][ T6343] usb 1-1: Product: syz [ 494.854363][ T6343] usb 1-1: Manufacturer: syz [ 494.859149][ T6343] usb 1-1: SerialNumber: syz [ 494.864083][ T6335] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 494.874980][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.883413][ T6335] usb 6-1: Product: syz [ 494.887585][ T6335] usb 6-1: Manufacturer: syz [ 494.892682][ T6335] usb 6-1: SerialNumber: syz [ 494.912104][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 494.941952][ T6335] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 495.480640][ T6343] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 495.511034][ T6335] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 495.903323][ T6343] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 495.908989][ T6343] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 495.933221][ T6335] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 495.938873][ T6335] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 496.108635][ T142] usb 1-1: USB disconnect, device number 80 [ 496.124023][ T6343] ath9k_htc: Failed to initialize the device [ 496.130148][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 496.145844][ T6344] usb 6-1: USB disconnect, device number 52 [ 496.154929][ T6335] ath9k_htc: Failed to initialize the device [ 496.162930][ T6344] usb 6-1: ath9k_htc: USB layer deinitialized 08:04:37 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x100, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4c, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda5"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:37 executing program 3: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x20048054) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) 08:04:37 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc4}, &(0x7f0000001140)={0x0, "71e8c5e96614eafcefcc996cbc3620f07cff72c7868d9095cd34aff24bb45126497b98555316bd5cb295f5dd824e0c2c4495b24a9e54c1d3aa63b4a61c569b10"}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, 0x0, 0x0) 08:04:37 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 08:04:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x541101) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x4) bind$ax25(r3, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r4 = dup(r2) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="afa33dbaf4a57a7dde001befe0f0a86d1625475334d8dcbfae1688ba0fea7de2bbf0880dc26cf4c72e4349e5351fb0d03add0f1974561ffcb05b0f03fd9ae6b07027918afd39", 0x46) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x90, 0x8}, 0x18) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) open(&(0x7f0000000100)='./file0\x00', 0x40080, 0x21) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) pidfd_getfd(r8, r1, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffe, 0x541101) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x4) (async) bind$ax25(r3, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) dup(r2) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="afa33dbaf4a57a7dde001befe0f0a86d1625475334d8dcbfae1688ba0fea7de2bbf0880dc26cf4c72e4349e5351fb0d03add0f1974561ffcb05b0f03fd9ae6b07027918afd39", 0x46) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x90, 0x8}, 0x18) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async) open(&(0x7f0000000100)='./file0\x00', 0x40080, 0x21) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10700) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) dup(0xffffffffffffffff) (async) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) pidfd_getfd(r8, r1, 0x0) (async) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) (async) ioctl$NBD_DO_IT(r6, 0xab03) (async) 08:04:37 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x108, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x9d, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b228abf80148399dbc769a218247cc737c31f228bb9dbf8e32e62c5304f8121a4635b6d5b534c64309218f243712fc1f350fc06b790b80a733e40fa5eb8f51dab20e2678a58be3a285993a5549b685"}, {0x4c, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda5"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, &(0x7f0000000080)=0xa, 0x0, 0xd00000000000000) 08:04:37 executing program 1: select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0xff}, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 08:04:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf}, 0x48) 08:04:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}]}}, &(0x7f00000000c0)=""/207, 0x32, 0xcf, 0x2}, 0x20) 08:04:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001280)=ANY=[], 0x44}}, 0x0) [ 496.970795][ T6335] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 496.990594][ T142] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 497.270804][ T142] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 497.281153][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 497.690728][ T3650] block nbd4: Receive control failed (result -32) [ 497.690951][ T9253] block nbd4: shutting down sockets [ 498.091438][ T142] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 498.100544][ T142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.108549][ T142] usb 6-1: Product: syz [ 498.113655][ T142] usb 6-1: Manufacturer: syz [ 498.118276][ T142] usb 6-1: SerialNumber: syz [ 498.161703][ T142] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 498.170857][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 498.184542][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.196469][ T6335] usb 1-1: Product: syz [ 498.203052][ T6335] usb 1-1: Manufacturer: syz [ 498.207724][ T6335] usb 1-1: SerialNumber: syz [ 498.252354][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 498.820787][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 498.870817][ T142] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 499.253896][ T6335] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 499.259571][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 499.303185][ T142] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 499.308872][ T142] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 499.456920][ T3695] usb 1-1: USB disconnect, device number 81 [ 499.473778][ T6335] ath9k_htc: Failed to initialize the device [ 499.479836][ T3695] usb 1-1: ath9k_htc: USB layer deinitialized [ 499.505209][ T6344] usb 6-1: USB disconnect, device number 53 [ 499.514129][ T142] ath9k_htc: Failed to initialize the device [ 499.523477][ T6344] usb 6-1: ath9k_htc: USB layer deinitialized 08:04:40 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x60, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x80086601, 0x0) 08:04:40 executing program 1: keyctl$reject(0x13, 0x0, 0x0, 0xfa, 0x0) 08:04:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xffffffffffffffbb, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xc0}}, 0x0) 08:04:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:40 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x68, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:40 executing program 3: syz_open_dev$dri(&(0x7f0000000700), 0x0, 0x620002) 08:04:40 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:04:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) fdatasync(r0) 08:04:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 08:04:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x30, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6}, @CTA_SYNPROXY={0x4}]}, 0x30}}, 0x0) 08:04:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c80)) [ 500.330696][ T142] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 500.350675][ T6335] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 500.630791][ T6335] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 500.640815][ T142] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 501.112448][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.118763][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.440766][ T6335] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.449919][ T6335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.458152][ T6335] usb 6-1: Product: syz [ 501.462498][ T6335] usb 6-1: Manufacturer: syz [ 501.467175][ T6335] usb 6-1: SerialNumber: syz [ 501.511661][ T6335] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 501.520929][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.530009][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.538958][ T142] usb 1-1: Product: syz [ 501.543424][ T142] usb 1-1: Manufacturer: syz [ 501.548033][ T142] usb 1-1: SerialNumber: syz [ 501.595122][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 502.090651][ T6335] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.220693][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.515350][ T6335] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 502.521839][ T6335] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 502.635034][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 502.640774][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 502.716761][ T3695] usb 6-1: USB disconnect, device number 54 [ 502.734329][ T6335] ath9k_htc: Failed to initialize the device [ 502.740407][ T3695] usb 6-1: ath9k_htc: USB layer deinitialized [ 502.849636][ T26] usb 1-1: USB disconnect, device number 82 [ 502.873267][ T142] ath9k_htc: Failed to initialize the device [ 502.879505][ T26] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:43 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x60, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:43 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x30000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4200, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r5, &(0x7f0000000040)=""/116, 0x74) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 08:04:43 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) 08:04:43 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x80841, 0x0) 08:04:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x145082) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x48) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000000c0)) 08:04:44 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x68, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0xd}]}]}}, &(0x7f0000000100)=""/211, 0x36, 0xd3, 0x1}, 0x20) 08:04:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000100)=""/211, 0x26, 0xd3, 0x1}, 0x20) 08:04:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000680)="8d876b477976684b3f27caf9b43802b45a74784bb698ae3a666470be854bc960081a25c78895288331ee2d5c5cad14f6d5cbe231288360ebab22d94fccb7c2a7a0485d6decdce976fce25332e246be2660b805909beddf170193ca6a27ed644d37d378415d1106ba809a77ffe02c6bb5ed6cde32f2cd3c2af1c626cce407e066707fdf04e6c129edb91005737c1cbfc1acf1457beef148d416031f85897ea1c5", 0xa0}, {&(0x7f0000000740)="bcf8bbf533b264efac4fb01a9463fd949422a4046b6cbe5bcf85b53ec248b0d9936331bb4c9b8eaf5e9ef0a478beb1ba07ca492691af0bc875a9215892199f247c8d5f14dfc3af5f1da149bfbaaefad492bc23cb4971e46f50d53e15a82b7b744e69e62d418ae601f06ef2897eb4fa88857f99ceb181d02c9a91a65b6ef3d86436beb05cf53b90fa4b894b6cccf67912980db746d36e9fabcdd60c8d90ac470df66ca017a05bfc27ec0d89fcfec66f2e7361852643ae62b338d0159f5dd3e579f2ba40811d6ca146320a78d86d6c6929099bf621e105032ff2502f675b757b86e0c078710fc4f7cf9fb3714f74554d2eb479b36c", 0xf4}, {&(0x7f0000000840)="840936f09be354af8640eeaddc37a28a78846e56186ed427a8412ecf0df6e39657648dd767b75a68526a218f9c0d18b692c461f8e55f08c3ec18dd649da459ed5d151f64d9e8ec5ea71103cb556c3f07d05cc7a65ef9ba4cb2728b00ef32742a3600b5bab237dcfb2ec1c15a", 0x6c}], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x0, 0x2}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x66}, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 08:04:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:04:44 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000780)=@bloom_filter, 0x16) 08:04:44 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) [ 503.564239][ T6337] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 503.700705][ T142] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 503.850858][ T6337] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 504.000713][ T142] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 504.077655][ T3650] block nbd4: Receive control failed (result -32) [ 504.080742][ T9288] block nbd4: shutting down sockets [ 504.674023][ T6337] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 504.683127][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.691884][ T6337] usb 6-1: Product: syz [ 504.696062][ T6337] usb 6-1: Manufacturer: syz [ 504.700964][ T6337] usb 6-1: SerialNumber: syz [ 504.762026][ T6337] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 504.871701][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 504.880878][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.888927][ T142] usb 1-1: Product: syz [ 504.894575][ T142] usb 1-1: Manufacturer: syz [ 504.899165][ T142] usb 1-1: SerialNumber: syz [ 504.941566][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 505.410822][ T6337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 505.510880][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 505.835520][ T6337] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 505.841233][ T6337] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 505.945089][ T142] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 505.950823][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 506.042561][ T26] usb 6-1: USB disconnect, device number 55 [ 506.062892][ T6337] ath9k_htc: Failed to initialize the device [ 506.068949][ T26] usb 6-1: ath9k_htc: USB layer deinitialized [ 506.148841][ T6343] usb 1-1: USB disconnect, device number 83 [ 506.153825][ T142] ath9k_htc: Failed to initialize the device [ 506.162463][ T6343] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:47 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x60, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:47 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "e81adfbca2ef9212d6fc36d96c78ce4920872188872800427777f3e8dd1d8518d3ad639748db04c7dc496e7800041ef5887bc91913d09f39c70141c5593e15fc"}, 0x48, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffe) 08:04:47 executing program 3: syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x42) 08:04:47 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x4) 08:04:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x145082) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x48) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x145082) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) creat(&(0x7f0000000040)='./file0\x00', 0x48) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000000c0)) (async) 08:04:47 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x68, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xd17}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3f}]}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}]}, @CTA_MARK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x4) 08:04:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4c000000}, {}]}]}}, &(0x7f0000000100)=""/211, 0x36, 0xd3, 0x1}, 0x20) 08:04:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40049409, 0x0) [ 506.701404][ T9313] block nbd4: shutting down sockets 08:04:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40049409, 0x0) 08:04:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x145082) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x48) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x145082) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) (async) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) creat(&(0x7f0000000040)='./file0\x00', 0x48) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000000c0)) (async) 08:04:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0xc0045878, 0x0) [ 506.930695][ T6343] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 507.066035][ T9338] block nbd4: shutting down sockets [ 507.230845][ T6343] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 507.260693][ T6337] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 507.540688][ T6337] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 508.033038][ T6343] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 508.064767][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.086458][ T6343] usb 6-1: Product: syz [ 508.100633][ T6343] usb 6-1: Manufacturer: syz [ 508.105249][ T6343] usb 6-1: SerialNumber: syz [ 508.171741][ T6343] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 508.350742][ T6337] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 508.360429][ T6337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.368664][ T6337] usb 1-1: Product: syz [ 508.373124][ T6337] usb 1-1: Manufacturer: syz [ 508.377853][ T6337] usb 1-1: SerialNumber: syz [ 508.421629][ T6337] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 508.750630][ T6343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 509.000854][ T6337] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 509.175612][ T6343] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 509.181433][ T6343] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 509.378802][ T6335] usb 6-1: USB disconnect, device number 56 [ 509.393661][ T6343] ath9k_htc: Failed to initialize the device [ 509.400011][ T6335] usb 6-1: ath9k_htc: USB layer deinitialized [ 509.424028][ T6337] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 509.429680][ T6337] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 509.626690][ T26] usb 1-1: USB disconnect, device number 84 [ 509.645874][ T6337] ath9k_htc: Failed to initialize the device [ 509.652122][ T26] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:50 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x64, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40049409, 0x0) 08:04:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) fsetxattr$security_evm(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 08:04:50 executing program 3: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') 08:04:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f00000043c0)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000001580)=""/87, 0x57}], 0x5}, 0x1ff}, {{&(0x7f00000018c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000001ac0)=""/217, 0xd9}, 0x1}, {{&(0x7f0000001bc0)=@vsock, 0x80, &(0x7f0000004080)=[{&(0x7f0000001c40)=""/80, 0x50}, {&(0x7f0000001cc0)=""/124, 0x7c}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/201, 0xc9}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/202, 0xca}], 0x6}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/135, 0x87}, 0xb9000}], 0x4, 0x735f746878cb5c41, &(0x7f0000004500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) getrlimit(0x2, &(0x7f0000000040)) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 08:04:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40049409, 0x0) 08:04:50 executing program 1: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 08:04:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14}, 0x14}}, 0x0) 08:04:50 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x6c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:50 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000006180)=[{&(0x7f0000004c00)='_', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 08:04:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r0, 0x0) 08:04:50 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) [ 510.230959][ T26] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 510.258172][ T27] audit: type=1400 audit(1653379490.971:321): avc: denied { ioctl } for pid=9371 comm="syz-executor.1" path="/dev/fuse" dev="devtmpfs" ino=98 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 510.460618][ T6337] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 510.520681][ T26] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 510.760862][ T6337] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 511.320717][ T26] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 511.330457][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.338697][ T26] usb 6-1: Product: syz [ 511.343079][ T26] usb 6-1: Manufacturer: syz [ 511.347903][ T26] usb 6-1: SerialNumber: syz [ 511.391480][ T26] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.640967][ T6337] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 511.650062][ T6337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.658350][ T6337] usb 1-1: Product: syz [ 511.663000][ T6337] usb 1-1: Manufacturer: syz [ 511.667605][ T6337] usb 1-1: SerialNumber: syz [ 511.737155][ T6337] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.970729][ T26] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 512.310736][ T6337] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 512.385188][ T26] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 512.390963][ T26] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 512.592419][ T3716] usb 6-1: USB disconnect, device number 57 [ 512.612580][ T26] ath9k_htc: Failed to initialize the device [ 512.618628][ T3716] usb 6-1: ath9k_htc: USB layer deinitialized [ 512.754016][ T6337] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 512.760448][ T6337] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 512.956901][ T3716] usb 1-1: USB disconnect, device number 85 [ 512.964964][ T6337] ath9k_htc: Failed to initialize the device [ 512.971598][ T3716] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:53 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x64, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:53 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400), 0x200, 0x0) 08:04:53 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) lseek(r0, 0x0, 0x2) 08:04:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@var={0x5, 0x0, 0x0, 0xe, 0xff}, @typedef={0xd}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000000c0)=""/180, 0x3b, 0xb4, 0x1}, 0x20) 08:04:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r1) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f00000043c0)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000001580)=""/87, 0x57}], 0x5}, 0x1ff}, {{&(0x7f00000018c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000001ac0)=""/217, 0xd9}, 0x1}, {{&(0x7f0000001bc0)=@vsock, 0x80, &(0x7f0000004080)=[{&(0x7f0000001c40)=""/80, 0x50}, {&(0x7f0000001cc0)=""/124, 0x7c}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/201, 0xc9}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/202, 0xca}], 0x6}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/135, 0x87}, 0xb9000}], 0x4, 0x735f746878cb5c41, &(0x7f0000004500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) getrlimit(0x2, &(0x7f0000000040)) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 08:04:53 executing program 2: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xa100c, &(0x7f0000000240)={[{'}:'}, {}], [{@dont_hash}]}) 08:04:53 executing program 3: syz_open_dev$usbfs(&(0x7f0000002940), 0x9, 0x1c0) 08:04:53 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dummy_hcd', 0x10000, 0x0) 08:04:54 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x6c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:54 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x0, 0x0) 08:04:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r1) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) (async) recvmmsg(r2, &(0x7f00000043c0)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000001580)=""/87, 0x57}], 0x5}, 0x1ff}, {{&(0x7f00000018c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000001ac0)=""/217, 0xd9}, 0x1}, {{&(0x7f0000001bc0)=@vsock, 0x80, &(0x7f0000004080)=[{&(0x7f0000001c40)=""/80, 0x50}, {&(0x7f0000001cc0)=""/124, 0x7c}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/201, 0xc9}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/202, 0xca}], 0x6}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/135, 0x87}, 0xb9000}], 0x4, 0x735f746878cb5c41, &(0x7f0000004500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) getrlimit(0x2, &(0x7f0000000040)) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 08:04:54 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) [ 513.420587][ T26] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 513.700782][ T26] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 513.800831][ T3716] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 514.080924][ T3716] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 514.500726][ T26] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 514.509831][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.518034][ T26] usb 6-1: Product: syz [ 514.522251][ T26] usb 6-1: Manufacturer: syz [ 514.526831][ T26] usb 6-1: SerialNumber: syz [ 514.571901][ T26] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 514.890777][ T3716] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 514.899953][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.909595][ T3716] usb 1-1: Product: syz [ 514.914051][ T3716] usb 1-1: Manufacturer: syz [ 514.918712][ T3716] usb 1-1: SerialNumber: syz [ 514.961554][ T3716] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.141068][ T26] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 515.555121][ T26] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 515.560840][ T26] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 515.620893][ T3716] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 515.760061][ T142] usb 6-1: USB disconnect, device number 58 [ 515.784174][ T26] ath9k_htc: Failed to initialize the device [ 515.790252][ T142] usb 6-1: ath9k_htc: USB layer deinitialized [ 516.044746][ T3716] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 516.050442][ T3716] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 08:04:57 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x64, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}]}}, &(0x7f00000000c0)=""/207, 0x4a, 0xcf, 0x2}, 0x20) 08:04:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0xa, 0xa, 0x401}, 0x14}}, 0x0) 08:04:57 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "8bce1ba518b091ecd1dadbc9ce10d7429004692d15acff7d0ddb05bcc41341851185e6655517a26cbe96d539402f3ddff97697fc67a2b35009d788775595df52"}, 0x48, 0xffffffffffffffff) 08:04:57 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2}, 0xb) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7c4ee01e) r3 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) 08:04:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}]}}, &(0x7f0000000100)=""/211, 0x2e, 0xd3, 0x1}, 0x20) [ 516.248776][ T6337] usb 1-1: USB disconnect, device number 86 [ 516.264859][ T3716] ath9k_htc: Failed to initialize the device [ 516.271307][ T6337] usb 1-1: ath9k_htc: USB layer deinitialized 08:04:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) 08:04:57 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 516.620617][ T26] usb 6-1: new high-speed USB device number 59 using dummy_hcd 08:04:57 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x6c, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:04:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x2, &(0x7f0000000040)=@raw=[@btf_id], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002700)=@delqdisc={0x24, 0x25, 0x1}, 0x24}}, 0x0) 08:04:57 executing program 1: syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) [ 516.900909][ T26] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 516.910784][ T6337] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 517.080639][ T6343] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 517.142145][ T3650] block nbd4: Receive control failed (result -32) [ 517.145220][ T9415] block nbd4: shutting down sockets [ 517.390866][ T6343] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 517.470973][ T6337] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 517.480052][ T6337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.488436][ T6337] usb 4-1: Product: syz [ 517.492932][ T6337] usb 4-1: Manufacturer: syz [ 517.497547][ T6337] usb 4-1: SerialNumber: syz [ 517.541780][ T6337] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 517.700702][ T26] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 517.709974][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.720828][ T26] usb 6-1: Product: syz [ 517.725089][ T26] usb 6-1: Manufacturer: syz [ 517.729754][ T26] usb 6-1: SerialNumber: syz [ 517.771621][ T26] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 518.190743][ T6337] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 518.271094][ T6343] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 518.280180][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.295295][ T6343] usb 1-1: Product: syz [ 518.299479][ T6343] usb 1-1: Manufacturer: syz [ 518.305090][ T6343] usb 1-1: SerialNumber: syz [ 518.363182][ T6343] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 518.380741][ T26] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 518.405403][ T6344] usb 4-1: USB disconnect, device number 7 [ 518.805046][ T26] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 518.810797][ T26] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 518.971326][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 519.013931][ T6343] usb 6-1: USB disconnect, device number 59 [ 519.023876][ T26] ath9k_htc: Failed to initialize the device [ 519.029971][ T6343] usb 6-1: ath9k_htc: USB layer deinitialized [ 519.270619][ T6337] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 519.277673][ T6337] ath9k_htc: Failed to initialize the device [ 519.284168][ T6344] usb 4-1: ath9k_htc: USB layer deinitialized [ 519.403198][ T6335] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 519.408882][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 08:05:00 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4f, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b2"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:05:00 executing program 2: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:05:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0xd01c4813, &(0x7f0000000140)) 08:05:00 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2}, 0xb) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7c4ee01e) r3 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2}, 0xb) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7c4ee01e) (async) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) 08:05:00 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xf9, &(0x7f0000000140)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 519.555752][ T27] audit: type=1400 audit(1653379500.271:322): avc: denied { open } for pid=9428 comm="syz-executor.2" path="/dev/ptyq9" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 08:05:00 executing program 2: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1000001) [ 519.604405][ T27] audit: type=1400 audit(1653379500.311:323): avc: denied { ioctl } for pid=9428 comm="syz-executor.2" path="/dev/ptyq9" dev="devtmpfs" ino=126 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 519.660450][ T3716] usb 1-1: USB disconnect, device number 87 [ 519.673570][ T6335] ath9k_htc: Failed to initialize the device [ 519.697592][ T9436] block nbd4: shutting down sockets 08:05:00 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x5451, 0x0) 08:05:00 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2}, 0xb) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7c4ee01e) (async) r3 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) (async) ioctl$NBD_DO_IT(r3, 0xab03) [ 519.718176][ T3716] usb 1-1: ath9k_htc: USB layer deinitialized [ 519.921235][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 519.970606][ T6337] usb 6-1: new high-speed USB device number 60 using dummy_hcd 08:05:00 executing program 2: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1000001) 08:05:00 executing program 3: statx(0xffffffffffffffff, 0x0, 0x2400, 0x0, 0x0) 08:05:00 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xbc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4f, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b2"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:05:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000000100)=""/211, 0x26, 0xd3, 0x1}, 0x20) [ 520.260923][ T6337] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 520.350843][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.362256][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.372224][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.385239][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.394485][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.405580][ T26] usb 2-1: config 0 descriptor?? [ 520.450654][ T6335] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 520.474005][ T26] usbhid 2-1:0.0: can't add hid device: -22 [ 520.479989][ T26] usbhid: probe of 2-1:0.0 failed with error -22 [ 520.625797][ T3650] block nbd4: Receive control failed (result -32) [ 520.626842][ T9450] block nbd4: shutting down sockets [ 520.731020][ T6335] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 521.060672][ T6337] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 521.069950][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.078397][ T6337] usb 6-1: Product: syz [ 521.082934][ T6337] usb 6-1: Manufacturer: syz [ 521.087701][ T6337] usb 6-1: SerialNumber: syz [ 521.131526][ T6337] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 521.530740][ T6335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 521.539884][ T6335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.548344][ T6335] usb 1-1: Product: syz [ 521.552758][ T6335] usb 1-1: Manufacturer: syz [ 521.557366][ T6335] usb 1-1: SerialNumber: syz [ 521.611548][ T6335] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 521.700769][ T6337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 522.123618][ T6337] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 522.129294][ T6337] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 522.190680][ T6335] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 522.327784][ T26] usb 6-1: USB disconnect, device number 60 [ 522.344218][ T6337] ath9k_htc: Failed to initialize the device [ 522.350402][ T26] usb 6-1: ath9k_htc: USB layer deinitialized [ 522.538389][ T142] usb 2-1: USB disconnect, device number 9 [ 522.615470][ T6335] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 522.621305][ T6335] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 08:05:03 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4f, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b2"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:05:03 executing program 2: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1000001) 08:05:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x890d, 0x0) 08:05:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7c4ee01e) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x86f) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r5 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) 08:05:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000180)=0x14) [ 522.816867][ T26] usb 1-1: USB disconnect, device number 88 [ 522.834828][ T6335] ath9k_htc: Failed to initialize the device [ 522.841968][ T26] usb 1-1: ath9k_htc: USB layer deinitialized 08:05:03 executing program 2: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1000001) 08:05:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xd17}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3f}]}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x4) 08:05:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) 08:05:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x89a0, 0x0) 08:05:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb}, 0x48) [ 523.278917][ T9477] nbd4: detected capacity change from 0 to 4318 [ 523.420594][ T142] usb 6-1: new high-speed USB device number 61 using dummy_hcd 08:05:04 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xbc, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4f, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b2"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}, {0x3, 0x4e00, '\x00W)'}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:05:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xead, 0x3d, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0x3}, @generic="2eb32d58f808ef98b2ebe3a217ec4b622fc61b275d8f6ffbeab2c2f20e7863ded8c8a51215bc6f7f2ef679a04b4bcdc8256ffd35740a9a3c25985d4e729b15e3ebcb6e374d7e127efde1b716591e965e6b274e1eb75579356548355798794a659581c71466d821be2ccebc3851aaf8510aff4fc2681f3ced7d29a3e03a798b4cc94d06f6f17f", @generic="40ae08a5d2802fa82402203a5291a7d66ecb3f01d3e8ab178b19015d2b1dd9ddf2a5b4ba401aa24eba36193ff411fe67b79f4b1a4010f947bb7b30a6c435bf0f97d53d9260c633d2dce0", @generic="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"]}]}, 0xec4}, 0x1, 0x0, 0x0, 0xc080}, 0x0) [ 523.702495][ T142] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 523.900791][ T26] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 524.191214][ T26] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 524.620833][ T142] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 524.629906][ T142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.640041][ T142] usb 6-1: Product: syz [ 524.644607][ T142] usb 6-1: Manufacturer: syz [ 524.649207][ T142] usb 6-1: SerialNumber: syz [ 524.701678][ T142] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.090793][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 525.100013][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.108186][ T26] usb 1-1: Product: syz [ 525.112765][ T26] usb 1-1: Manufacturer: syz [ 525.117444][ T26] usb 1-1: SerialNumber: syz [ 525.161312][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.290606][ T142] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 525.713187][ T142] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 525.718865][ T142] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 525.740734][ T26] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 525.857617][ T9477] block nbd4: shutting down sockets [ 525.915981][ T6335] usb 6-1: USB disconnect, device number 61 [ 525.934067][ T142] ath9k_htc: Failed to initialize the device [ 525.940148][ T6335] usb 6-1: ath9k_htc: USB layer deinitialized [ 526.165017][ T26] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 526.171738][ T26] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 08:05:07 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a585ad6e"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb4, &(0x7f00000005c0)={[{0x5, 0x4e00, "2043febf6b"}, {0x4f, 0x4e00, "04099c4e7545902c95548c3f1ed6b6499dbc28ce1db6049a340f7e7827bc2e5829408075280515520a56a6c740f5c4810a2e77fd3f2d868573446d51dd275666d9bfce9b1b849584eb2811201850b2"}, {0x4d, 0x4e00, "9e57fcdecaf423616312db90febc047eda7bb5a9ff77bfdc4ec1d870691c36c3e199b49cc7190a35f1ec3d76608dd4cabceac90862dfa219357eb794806de3a600a593766134bccb3ca7fda515"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 08:05:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='net/sockstat6\x00') read$watch_queue(r0, &(0x7f0000000040)=""/131, 0x83) 08:05:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x2, 0x0) [ 526.369976][ T6335] usb 1-1: USB disconnect, device number 89 [ 526.385430][ T26] ath9k_htc: Failed to initialize the device [ 526.397241][ T6335] usb 1-1: ath9k_htc: USB layer deinitialized [ 526.711369][ T3680] kworker/dying (3680) used greatest stack depth: 22056 bytes left [ 526.750610][ T3716] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 527.072613][ T3716] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 527.911312][ T3716] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 527.920388][ T3716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.928856][ T3716] usb 6-1: Product: syz [ 527.933109][ T3716] usb 6-1: Manufacturer: syz [ 527.937712][ T3716] usb 6-1: SerialNumber: syz [ 527.987394][ T3716] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 528.560796][ T3716] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 528.973071][ T3716] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 528.978829][ T3716] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 529.174869][ T6335] usb 6-1: USB disconnect, device number 62 [ 529.193434][ T3716] ath9k_htc: Failed to initialize the device [ 529.199611][ T6335] usb 6-1: ath9k_htc: USB layer deinitialized [ 553.590723][ T9] block nbd4: Possible stuck request ffff88801c508000: control (read@0,4096B). Runtime 30 seconds [ 562.563190][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.569505][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.042460][ T2967] udevd[2967]: worker [4022] /devices/virtual/block/nbd4 is taking a long time [ 624.003616][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.009947][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.160812][ T28] INFO: task udevd:4022 blocked for more than 143 seconds. [ 684.168031][ T28] Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 684.181146][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 684.191181][ T28] task:udevd state:D stack:26160 pid: 4022 ppid: 2967 flags:0x00004000 [ 684.200682][ T28] Call Trace: [ 684.204058][ T28] [ 684.206993][ T28] __schedule+0xa9a/0x4cc0 [ 684.211757][ T28] ? io_schedule_timeout+0x140/0x140 [ 684.217039][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 684.222893][ T28] ? preempt_schedule_common+0x59/0xc0 [ 684.228371][ T28] schedule+0xd2/0x1f0 [ 684.232963][ T28] io_schedule+0xba/0x130 [ 684.237313][ T28] folio_wait_bit_common+0x4f2/0xa90 [ 684.243088][ T28] ? next_uptodate_page+0x810/0x810 [ 684.249692][ T28] ? folio_add_lru+0x389/0x6a0 [ 684.255246][ T28] ? end_buffer_async_read_io+0x300/0x300 [ 684.265204][ T28] ? folio_unlock+0xc0/0xc0 [ 684.269707][ T28] ? alloc_pages+0x1b2/0x310 [ 684.274514][ T28] do_read_cache_folio+0x506/0x760 [ 684.280211][ T28] read_cache_page+0x59/0x2a0 [ 684.285700][ T28] read_part_sector+0xf6/0x920 [ 684.291835][ T28] ? adfspart_check_ADFS+0x410/0x410 [ 684.297142][ T28] adfspart_check_ICS+0x9a/0x690 [ 684.302520][ T28] ? __alloc_pages+0x3b6/0x500 [ 684.307362][ T28] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 684.314513][ T28] ? adfspart_check_ADFS+0x410/0x410 [ 684.319827][ T28] ? snprintf+0xbb/0xf0 [ 684.324542][ T28] ? vsprintf+0x30/0x30 [ 684.328720][ T28] ? alloc_pages+0x1b2/0x310 [ 684.333724][ T28] ? adfspart_check_ADFS+0x410/0x410 [ 684.339079][ T28] bdev_disk_changed+0x629/0xf60 [ 684.344516][ T28] ? iput.part.0+0x73/0x820 [ 684.349037][ T28] blkdev_get_whole+0x206/0x2d0 [ 684.354161][ T28] blkdev_get_by_dev.part.0+0x5d2/0xc80 [ 684.359815][ T28] ? devcgroup_check_permission+0x1ab/0x440 [ 684.368593][ T28] blkdev_get_by_dev+0x6b/0x80 [ 684.373542][ T28] blkdev_open+0x13c/0x2c0 [ 684.378953][ T28] do_dentry_open+0x4a1/0x11e0 [ 684.384165][ T28] ? blkdev_close+0x80/0x80 [ 684.388685][ T28] path_openat+0x1c71/0x2910 [ 684.393592][ T28] ? path_lookupat+0x860/0x860 [ 684.398347][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 684.405445][ T28] do_filp_open+0x1aa/0x400 [ 684.409962][ T28] ? may_open_dev+0xf0/0xf0 [ 684.414667][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 684.419596][ T28] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 684.426200][ T28] ? _find_next_bit+0x1e3/0x260 [ 684.431339][ T28] ? _raw_spin_unlock+0x24/0x40 [ 684.436209][ T28] ? alloc_fd+0x2f0/0x670 [ 684.440951][ T28] do_sys_openat2+0x16d/0x4c0 [ 684.445652][ T28] ? find_held_lock+0x2d/0x110 [ 684.450480][ T28] ? build_open_flags+0x6f0/0x6f0 [ 684.455626][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 684.460522][ T28] __x64_sys_openat+0x13f/0x1f0 [ 684.465387][ T28] ? __ia32_sys_open+0x1c0/0x1c0 [ 684.470343][ T28] ? syscall_enter_from_user_mode+0x21/0x70 [ 684.477013][ T28] do_syscall_64+0x35/0xb0 [ 684.482662][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 684.488587][ T28] RIP: 0033:0x7f0384b25697 [ 684.493053][ T28] RSP: 002b:00007ffce2eb21e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 684.501698][ T28] RAX: ffffffffffffffda RBX: 000055ae14436070 RCX: 00007f0384b25697 [ 684.509687][ T28] RDX: 00000000000a0800 RSI: 000055ae1441d3f0 RDI: 00000000ffffff9c [ 684.518041][ T28] RBP: 000055ae1441d3f0 R08: 0000000000000001 R09: 00007ffce2fba080 [ 684.530489][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 684.538472][ T28] R13: 000055ae14403440 R14: 0000000000000001 R15: 000055ae143e72c0 [ 684.546644][ T28] [ 684.549690][ T28] INFO: task syz-executor.4:9463 blocked for more than 143 seconds. [ 684.557822][ T28] Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 684.565144][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 684.573854][ T28] task:syz-executor.4 state:D stack:28520 pid: 9463 ppid: 3634 flags:0x00000004 [ 684.583998][ T28] Call Trace: [ 684.587287][ T28] [ 684.590224][ T28] __schedule+0xa9a/0x4cc0 [ 684.594772][ T28] ? io_schedule_timeout+0x140/0x140 [ 684.600070][ T28] schedule+0xd2/0x1f0 [ 684.604193][ T28] schedule_preempt_disabled+0xf/0x20 [ 684.609572][ T28] __mutex_lock+0xa32/0x12f0 [ 684.614186][ T28] ? blkdev_put+0x99/0x950 [ 684.618610][ T28] ? mutex_lock_io_nested+0x1150/0x1150 [ 684.625018][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 684.630000][ T28] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 684.636339][ T28] ? _raw_spin_unlock+0x24/0x40 [ 684.641237][ T28] ? locks_remove_file+0x2f7/0x570 [ 684.646383][ T28] blkdev_put+0x99/0x950 [ 684.650675][ T28] blkdev_close+0x64/0x80 [ 684.655017][ T28] __fput+0x277/0x9d0 [ 684.658987][ T28] ? blkdev_fsync+0xa0/0xa0 [ 684.663532][ T28] task_work_run+0xdd/0x1a0 [ 684.668091][ T28] exit_to_user_mode_prepare+0x23c/0x250 [ 684.673780][ T28] syscall_exit_to_user_mode+0x19/0x60 [ 684.679247][ T28] do_syscall_64+0x42/0xb0 [ 684.683701][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 684.690208][ T28] RIP: 0033:0x7f891fa3bd2b [ 684.694747][ T28] RSP: 002b:00007ffdc47b7470 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 684.703203][ T28] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f891fa3bd2b [ 684.711268][ T28] RDX: 0000001b2e820000 RSI: 0000001b2e8232a0 RDI: 0000000000000003 [ 684.719248][ T28] RBP: 00007f891fb9d960 R08: 0000000000000000 R09: 0000000061119322 [ 684.727274][ T28] R10: 00007ffdc47c9090 R11: 0000000000000293 R12: 000000000007fd93 [ 684.735414][ T28] R13: 00007ffdc47b7570 R14: 00007ffdc47b7590 R15: 0000000000000032 [ 684.745735][ T28] [ 684.748783][ T28] [ 684.748783][ T28] Showing all locks held in the system: [ 684.759232][ T28] 1 lock held by khungtaskd/28: [ 684.766372][ T28] #0: ffffffff8bd7f3a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 684.776638][ T28] 2 locks held by kworker/u4:4/966: [ 684.782548][ T28] 2 locks held by getty/3277: [ 684.787229][ T28] #0: ffff88814c633098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 684.798043][ T28] #1: ffffc90001bf92e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcea/0x1230 [ 684.808815][ T28] 1 lock held by udevd/4022: [ 684.813612][ T28] #0: ffff88801c3a3918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xc80 [ 684.824248][ T28] 1 lock held by syz-executor.4/9463: [ 684.829614][ T28] #0: ffff88801c3a3918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x99/0x950 [ 684.838978][ T28] [ 684.842178][ T28] ============================================= [ 684.842178][ T28] [ 684.851072][ T28] NMI backtrace for cpu 0 [ 684.855399][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 684.865637][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.875676][ T28] Call Trace: [ 684.878941][ T28] [ 684.881854][ T28] dump_stack_lvl+0xcd/0x134 [ 684.886440][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 684.891716][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 684.896953][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 684.902933][ T28] watchdog+0xc1d/0xf50 [ 684.907072][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 684.913039][ T28] kthread+0x2e9/0x3a0 [ 684.917162][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 684.922780][ T28] ret_from_fork+0x1f/0x30 [ 684.927181][ T28] [ 684.931020][ T28] Sending NMI from CPU 0 to CPUs 1: [ 684.936246][ C1] NMI backtrace for cpu 1 [ 684.936257][ C1] CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 684.936281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.936296][ C1] Workqueue: bat_events batadv_nc_worker [ 684.936402][ C1] RIP: 0010:kasan_check_range+0x34/0x180 [ 684.936429][ C1] Code: 89 f9 41 54 44 0f b6 c2 49 01 f1 55 53 0f 82 18 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 c7 0f 86 05 01 00 00 49 83 e9 01 <48> 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 ca 48 c1 ed 03 49 c1 [ 684.936452][ C1] RSP: 0018:ffffc900002ef9a8 EFLAGS: 00000092 [ 684.936469][ C1] RAX: ffff7fffffffffff RBX: 0000000000000746 RCX: ffffffff815c8022 [ 684.936486][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff900739e8 [ 684.936501][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff900739ef [ 684.936516][ C1] R10: fffffbfff200e73d R11: 0000000000000001 R12: 0000000000000001 [ 684.936531][ C1] R13: ffff888011e50200 R14: ffff888011e50c60 R15: dffffc0000000000 [ 684.936547][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 684.936570][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.936586][ C1] CR2: 00007f3e9c849990 CR3: 000000007063e000 CR4: 00000000003506e0 [ 684.936602][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 684.936616][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 684.936631][ C1] Call Trace: [ 684.936636][ C1] [ 684.936644][ C1] __lock_acquire+0x6f2/0x56c0 [ 684.936671][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 684.936697][ C1] ? lock_chain_count+0x20/0x20 [ 684.936723][ C1] lock_acquire+0x1ab/0x510 [ 684.936747][ C1] ? batadv_nc_process_nc_paths.part.0+0xb1/0x3c0 [ 684.936776][ C1] ? lock_release+0x720/0x720 [ 684.936800][ C1] ? batadv_nc_process_nc_paths.part.0+0x213/0x3c0 [ 684.936828][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 684.936852][ C1] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 684.936878][ C1] ? mark_held_locks+0x9f/0xe0 [ 684.936903][ C1] ? __local_bh_enable_ip+0xa0/0x120 [ 684.936967][ C1] batadv_nc_process_nc_paths.part.0+0xec/0x3c0 [ 684.936995][ C1] ? batadv_nc_process_nc_paths.part.0+0xb1/0x3c0 [ 684.937022][ C1] ? batadv_nc_packet_free+0x140/0x140 [ 684.937050][ C1] batadv_nc_worker+0xce4/0xfa0 [ 684.937076][ C1] process_one_work+0x996/0x1610 [ 684.937100][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 684.937123][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 684.937148][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 684.937175][ C1] worker_thread+0x665/0x1080 [ 684.937202][ C1] ? process_one_work+0x1610/0x1610 [ 684.937224][ C1] kthread+0x2e9/0x3a0 [ 684.937249][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 684.937278][ C1] ret_from_fork+0x1f/0x30 [ 684.937304][ C1] [ 684.939762][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 684.939774][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 684.939798][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.939811][ T28] Call Trace: [ 684.939818][ T28] [ 684.939825][ T28] dump_stack_lvl+0xcd/0x134 [ 684.939856][ T28] panic+0x2d7/0x636 [ 684.939897][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 684.939926][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 684.939951][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 684.939978][ T28] ? nmi_trigger_cpumask_backtrace+0x1c9/0x230 [ 684.940005][ T28] ? watchdog.cold+0x130/0x158 [ 684.940036][ T28] watchdog.cold+0x141/0x158 [ 684.940060][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 684.940085][ T28] kthread+0x2e9/0x3a0 [ 684.940111][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 684.940139][ T28] ret_from_fork+0x1f/0x30 [ 684.940164][ T28] [ 684.943918][ T28] Kernel Offset: disabled [ 685.313713][ T28] Rebooting in 86400 seconds..