2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:37 executing program 1: clock_gettime(0x1, &(0x7f00000003c0)) 08:34:37 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:37 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = accept4(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x80, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000001c0)=0xa22) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:37 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)) 08:34:37 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3342.686135][ T9588] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3342.699806][ T9588] ath9k_htc: Failed to initialize the device [ 3342.717436][T21800] usb 6-1: ath9k_htc: USB layer deinitialized [ 3342.915099][ T9680] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3343.086165][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3343.093753][ T9757] ath9k_htc: Failed to initialize the device [ 3343.101611][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3343.165128][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3343.172157][ T9613] ath9k_htc: Failed to initialize the device [ 3343.181317][ T9672] usb 3-1: ath9k_htc: USB layer deinitialized [ 3343.435309][ T9680] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3343.444596][ T9680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3343.458862][ T9680] usb 1-1: Product: syz [ 3343.463119][ T9680] usb 1-1: Manufacturer: syz [ 3343.469129][ T9680] usb 1-1: SerialNumber: syz [ 3343.495336][T11861] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3343.515989][ T9680] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3343.545256][ T9672] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3344.075343][ T9672] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3344.085322][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.093938][ T9672] usb 3-1: Product: syz [ 3344.098938][ T9672] usb 3-1: Manufacturer: syz [ 3344.104077][ T9672] usb 3-1: SerialNumber: syz [ 3344.115298][ T9680] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3344.115588][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3344.152192][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.162928][T11861] usb 5-1: Product: syz [ 3344.166143][ T9672] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3344.178055][T11861] usb 5-1: Manufacturer: syz [ 3344.182766][T11861] usb 5-1: SerialNumber: syz [ 3344.266270][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3344.345937][ T9588] usb 1-1: USB disconnect, device number 74 [ 3344.755251][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3344.935396][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:39 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:39 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) accept4(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x80, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:39 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)) 08:34:39 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:39 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3344.983502][ T9757] usb 3-1: USB disconnect, device number 113 08:34:39 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:39 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:39 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:39 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)) 08:34:39 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3345.171230][ T9680] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3345.187526][ T9680] ath9k_htc: Failed to initialize the device [ 3345.233633][ T9588] usb 1-1: ath9k_htc: USB layer deinitialized [ 3345.272345][T21800] usb 5-1: USB disconnect, device number 15 08:34:39 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:39 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3345.805106][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3345.812822][ T9672] ath9k_htc: Failed to initialize the device [ 3345.821628][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3345.965276][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3345.972351][T11861] ath9k_htc: Failed to initialize the device [ 3345.980101][T21800] usb 5-1: ath9k_htc: USB layer deinitialized [ 3346.195251][ T9757] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3346.345123][T21800] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3346.775263][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3346.784600][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.794144][ T9757] usb 3-1: Product: syz [ 3346.799177][ T9757] usb 3-1: Manufacturer: syz [ 3346.804925][ T9757] usb 3-1: SerialNumber: syz [ 3346.856064][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3346.865626][T21800] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3346.874698][T21800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.893312][T21800] usb 5-1: Product: syz [ 3346.899734][T21800] usb 5-1: Manufacturer: syz [ 3346.906434][T21800] usb 5-1: SerialNumber: syz [ 3346.946016][T21800] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3347.505300][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3347.525296][T21800] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:42 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:42 executing program 1: clock_gettime(0x1, 0x0) 08:34:42 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:42 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:42 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) [ 3347.720458][ T9054] usb 3-1: USB disconnect, device number 114 08:34:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3347.809506][ T9672] usb 5-1: USB disconnect, device number 16 08:34:42 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:42 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:42 executing program 1: clock_gettime(0x1, 0x0) 08:34:42 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:42 executing program 3: recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:42 executing program 1: clock_gettime(0x1, 0x0) [ 3348.525252][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3348.532864][ T9757] ath9k_htc: Failed to initialize the device [ 3348.542608][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3348.605806][T21800] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3348.612795][T21800] ath9k_htc: Failed to initialize the device [ 3348.621880][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3348.905089][ T9054] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3348.995097][ T9672] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3349.435214][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3349.444808][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.454642][ T9054] usb 3-1: Product: syz [ 3349.459801][ T9054] usb 3-1: Manufacturer: syz [ 3349.465787][ T9054] usb 3-1: SerialNumber: syz [ 3349.505954][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3349.555247][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3349.565255][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.573512][ T9672] usb 5-1: Product: syz [ 3349.578500][ T9672] usb 5-1: Manufacturer: syz [ 3349.583327][ T9672] usb 5-1: SerialNumber: syz [ 3349.636225][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3350.085237][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3350.245226][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:44 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:44 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:34:44 executing program 3: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:44 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:44 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) [ 3350.302981][ T9613] usb 3-1: USB disconnect, device number 115 08:34:45 executing program 3: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:45 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:34:45 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:34:45 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:45 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) [ 3350.527210][ T9757] usb 5-1: USB disconnect, device number 17 08:34:45 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:34:45 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 3351.165387][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3351.172366][ T9054] ath9k_htc: Failed to initialize the device [ 3351.182046][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3351.325049][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3351.332227][ T9672] ath9k_htc: Failed to initialize the device [ 3351.344767][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3351.555322][ T9613] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3351.705105][ T9757] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3352.075380][ T9613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3352.084598][ T9613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3352.094420][ T9613] usb 3-1: Product: syz [ 3352.099075][ T9613] usb 3-1: Manufacturer: syz [ 3352.103935][ T9613] usb 3-1: SerialNumber: syz [ 3352.156084][ T9613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3352.225344][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3352.234517][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3352.243332][ T9757] usb 5-1: Product: syz [ 3352.248016][ T9757] usb 5-1: Manufacturer: syz [ 3352.252626][ T9757] usb 5-1: SerialNumber: syz [ 3352.296372][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3352.725358][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3352.865217][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:47 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0), 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:47 executing program 3: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:34:47 executing program 1: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:47 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:34:47 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3352.946961][ T9054] usb 3-1: USB disconnect, device number 116 08:34:47 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:47 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:47 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:47 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) [ 3353.136611][ T9672] usb 5-1: USB disconnect, device number 18 08:34:47 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:47 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) [ 3353.335221][T11033] usb 2-1: new high-speed USB device number 3 using dummy_hcd 08:34:48 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) [ 3353.805126][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3353.812843][ T9613] ath9k_htc: Failed to initialize the device [ 3353.822009][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3353.855345][T11033] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3353.864533][T11033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.873680][T11033] usb 2-1: Product: syz [ 3353.878657][T11033] usb 2-1: Manufacturer: syz [ 3353.883255][T11033] usb 2-1: SerialNumber: syz [ 3353.889581][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3353.902321][ T9757] ath9k_htc: Failed to initialize the device [ 3353.911356][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3353.936362][T11033] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3354.195498][ T9054] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3354.315156][ T9672] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3354.555549][T11033] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3354.755775][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3354.775379][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.783437][ T9054] usb 3-1: Product: syz [ 3354.808901][ T9054] usb 3-1: Manufacturer: syz [ 3354.813551][ T9054] usb 3-1: SerialNumber: syz [ 3354.831423][T11861] usb 2-1: USB disconnect, device number 3 [ 3354.835199][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3354.858329][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.867010][ T9672] usb 5-1: Product: syz [ 3354.871379][ T9672] usb 5-1: Manufacturer: syz [ 3354.876828][ T9672] usb 5-1: SerialNumber: syz [ 3354.898362][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3354.935936][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3355.505214][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3355.505215][T21800] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3355.645435][T11033] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3355.652554][T11033] ath9k_htc: Failed to initialize the device [ 3355.659894][T11861] usb 2-1: ath9k_htc: USB layer deinitialized 08:34:50 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0), 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:50 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:50 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:34:50 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:50 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3355.734366][ T9588] usb 3-1: USB disconnect, device number 117 08:34:50 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3355.786171][ T9672] usb 5-1: USB disconnect, device number 19 08:34:50 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:50 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) 08:34:50 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:50 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:50 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 08:34:50 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3356.525138][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3356.534204][ T9054] ath9k_htc: Failed to initialize the device [ 3356.542989][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3356.615324][T21800] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3356.623040][T21800] ath9k_htc: Failed to initialize the device [ 3356.631294][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3356.938019][ T9588] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3357.025087][ T9672] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3357.475621][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3357.484798][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.493565][ T9588] usb 3-1: Product: syz [ 3357.498392][ T9588] usb 3-1: Manufacturer: syz [ 3357.503008][ T9588] usb 3-1: SerialNumber: syz [ 3357.576558][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3357.603114][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3357.614199][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.629016][ T9672] usb 5-1: Product: syz [ 3357.633234][ T9672] usb 5-1: Manufacturer: syz [ 3357.639851][ T9672] usb 5-1: SerialNumber: syz [ 3357.686275][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3358.215206][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3358.335345][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:53 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:53 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0), 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:53 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:34:53 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3358.433323][T12681] usb 3-1: USB disconnect, device number 118 08:34:53 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:53 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:53 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:34:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:53 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) socket$nl_route(0x10, 0x3, 0x0) [ 3358.614905][ T9680] usb 5-1: USB disconnect, device number 20 08:34:53 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:53 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:34:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:53 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) [ 3359.255086][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3359.262716][ T9588] ath9k_htc: Failed to initialize the device [ 3359.271521][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3359.412818][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3359.420276][ T9672] ath9k_htc: Failed to initialize the device [ 3359.428754][ T9680] usb 5-1: ath9k_htc: USB layer deinitialized [ 3359.655150][T12681] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3359.825064][ T9680] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3360.255619][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3360.264854][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3360.274240][T12681] usb 3-1: Product: syz [ 3360.279624][T12681] usb 3-1: Manufacturer: syz [ 3360.284234][T12681] usb 3-1: SerialNumber: syz [ 3360.346092][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3360.405486][ T9680] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3360.414772][ T9680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3360.425700][ T9680] usb 5-1: Product: syz [ 3360.429979][ T9680] usb 5-1: Manufacturer: syz [ 3360.434761][ T9680] usb 5-1: SerialNumber: syz [ 3360.486103][ T9680] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3361.005368][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3361.115413][ T9680] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:55 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:55 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:34:55 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 3361.221966][ T9672] usb 3-1: USB disconnect, device number 119 08:34:55 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:55 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:55 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:34:55 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:34:55 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 3361.351089][ T9588] usb 5-1: USB disconnect, device number 21 08:34:56 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:56 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 08:34:56 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$nl_route(0x10, 0x3, 0x0) 08:34:56 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3362.045122][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3362.052144][T12681] ath9k_htc: Failed to initialize the device [ 3362.060953][ T9672] usb 3-1: ath9k_htc: USB layer deinitialized [ 3362.205588][ T9680] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3362.212700][ T9680] ath9k_htc: Failed to initialize the device [ 3362.221079][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3362.435239][ T9672] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3362.585084][ T9588] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3362.955426][ T9672] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3362.964729][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.981547][ T9672] usb 3-1: Product: syz [ 3362.986914][ T9672] usb 3-1: Manufacturer: syz [ 3362.991522][ T9672] usb 3-1: SerialNumber: syz [ 3363.046221][ T9672] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3363.105273][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3363.114626][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3363.124467][ T9588] usb 5-1: Product: syz [ 3363.129577][ T9588] usb 5-1: Manufacturer: syz [ 3363.134191][ T9588] usb 5-1: SerialNumber: syz [ 3363.176081][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3363.615362][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3363.745174][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:58 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:58 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3363.834301][ T9054] usb 3-1: USB disconnect, device number 120 08:34:58 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:58 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:34:58 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3363.992305][T12681] usb 5-1: USB disconnect, device number 22 08:34:58 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:34:58 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:58 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) [ 3364.685725][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3364.692867][ T9675] ath9k_htc: Failed to initialize the device [ 3364.700970][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3364.765117][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3364.772848][ T9588] ath9k_htc: Failed to initialize the device [ 3364.781731][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3365.075260][ T9054] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3365.145075][T12681] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3365.615545][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3365.624849][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.635826][ T9054] usb 3-1: Product: syz [ 3365.640211][ T9054] usb 3-1: Manufacturer: syz [ 3365.645957][ T9054] usb 3-1: SerialNumber: syz [ 3365.695983][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3365.709833][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3365.720457][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.732501][T12681] usb 5-1: Product: syz [ 3365.739366][T12681] usb 5-1: Manufacturer: syz [ 3365.746752][T12681] usb 5-1: SerialNumber: syz [ 3365.796097][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3366.275293][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3366.445284][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:01 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:01 executing program 5: socket$nl_route(0x10, 0x3, 0x0) 08:35:01 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 3366.489919][ T9613] usb 3-1: USB disconnect, device number 121 08:35:01 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:01 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 08:35:01 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:01 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:01 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 3366.663437][T11861] usb 5-1: USB disconnect, device number 23 08:35:01 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:01 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:01 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:01 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) [ 3367.325166][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3367.332632][ T9054] ath9k_htc: Failed to initialize the device [ 3367.341965][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3367.485686][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3367.492835][T12681] ath9k_htc: Failed to initialize the device [ 3367.500879][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3367.715097][ T9613] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3367.905258][T11861] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3368.315453][ T9613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3368.324707][ T9613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.333774][ T9613] usb 3-1: Product: syz [ 3368.338875][ T9613] usb 3-1: Manufacturer: syz [ 3368.343520][ T9613] usb 3-1: SerialNumber: syz [ 3368.386008][ T9613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3368.465416][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3368.474615][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.483153][T11861] usb 5-1: Product: syz [ 3368.488692][T11861] usb 5-1: Manufacturer: syz [ 3368.493310][T11861] usb 5-1: SerialNumber: syz [ 3368.546128][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3369.045512][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3369.205286][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:03 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:03 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:03 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3369.263588][ T9054] usb 3-1: USB disconnect, device number 122 08:35:04 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:04 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)) 08:35:04 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) socket$nl_route(0x10, 0x3, 0x0) 08:35:04 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:35:04 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3369.424469][ T9757] usb 5-1: USB disconnect, device number 24 08:35:04 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:04 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:04 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 08:35:04 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3370.125068][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3370.132238][T11033] ath9k_htc: Failed to initialize the device [ 3370.141194][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3370.285151][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3370.292310][T11861] ath9k_htc: Failed to initialize the device [ 3370.301218][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3370.505213][ T9054] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3370.665265][ T9757] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3371.025240][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3371.035246][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3371.043904][ T9054] usb 3-1: Product: syz [ 3371.049225][ T9054] usb 3-1: Manufacturer: syz [ 3371.054339][ T9054] usb 3-1: SerialNumber: syz [ 3371.095985][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3371.185277][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3371.194763][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3371.204255][ T9757] usb 5-1: Product: syz [ 3371.209431][ T9757] usb 5-1: Manufacturer: syz [ 3371.214462][ T9757] usb 5-1: SerialNumber: syz [ 3371.256101][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3371.675264][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3371.845273][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:06 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:06 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3371.901821][ T9588] usb 3-1: USB disconnect, device number 123 08:35:06 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:06 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:06 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) [ 3372.065632][ T9675] usb 5-1: USB disconnect, device number 25 08:35:06 executing program 5: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:06 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:06 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$nl_route(0x10, 0x3, 0x0) [ 3372.585180][T11861] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3372.765495][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3372.772626][ T9054] ath9k_htc: Failed to initialize the device [ 3372.782318][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3372.925475][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3372.932584][ T9757] ath9k_htc: Failed to initialize the device [ 3372.942017][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3373.105220][T11861] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3373.114382][T11861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.131194][T11861] usb 6-1: Product: syz [ 3373.135873][T11861] usb 6-1: Manufacturer: syz [ 3373.140493][T11861] usb 6-1: SerialNumber: syz [ 3373.175170][ T9588] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3373.196829][T11861] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3373.355095][ T9675] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3373.735288][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3373.744460][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.755350][ T9588] usb 3-1: Product: syz [ 3373.759585][ T9588] usb 3-1: Manufacturer: syz [ 3373.764191][ T9588] usb 3-1: SerialNumber: syz [ 3373.765176][T11861] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3373.836727][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3373.925505][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3373.934874][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.945218][ T9675] usb 5-1: Product: syz [ 3373.949416][ T9675] usb 5-1: Manufacturer: syz [ 3373.954017][ T9675] usb 5-1: SerialNumber: syz [ 3374.017041][ T9054] usb 6-1: USB disconnect, device number 98 [ 3374.019732][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3374.475346][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:09 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3374.665366][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3374.699789][ T9672] usb 3-1: USB disconnect, device number 124 [ 3374.845298][T11861] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3374.852520][T11861] ath9k_htc: Failed to initialize the device [ 3374.861131][ T9054] usb 6-1: ath9k_htc: USB layer deinitialized 08:35:09 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:09 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:35:09 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3374.891934][ T9675] usb 5-1: USB disconnect, device number 26 08:35:09 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:09 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$nl_route(0x10, 0x3, 0x0) 08:35:09 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3375.575289][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3375.582337][ T9588] ath9k_htc: Failed to initialize the device [ 3375.590054][ T9672] usb 3-1: ath9k_htc: USB layer deinitialized [ 3375.725069][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3375.732124][T12681] ath9k_htc: Failed to initialize the device [ 3375.740870][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3375.975259][ T9672] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3376.135109][ T9675] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 3376.505355][ T9672] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3376.514911][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3376.524682][ T9672] usb 3-1: Product: syz [ 3376.529908][ T9672] usb 3-1: Manufacturer: syz [ 3376.534917][ T9672] usb 3-1: SerialNumber: syz [ 3376.586470][ T9672] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3376.685508][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3376.694634][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3376.703526][ T9675] usb 5-1: Product: syz [ 3376.708147][ T9675] usb 5-1: Manufacturer: syz [ 3376.712762][ T9675] usb 5-1: SerialNumber: syz [ 3376.756132][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3377.215280][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3377.355415][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:12 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3377.436634][T11861] usb 3-1: USB disconnect, device number 125 08:35:12 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 08:35:12 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:12 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3377.571442][ T9054] usb 5-1: USB disconnect, device number 27 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:12 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:12 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:12 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) [ 3378.145121][T12681] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3378.285335][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3378.292732][ T9672] ath9k_htc: Failed to initialize the device [ 3378.301053][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3378.445315][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3378.452430][ T9675] ath9k_htc: Failed to initialize the device [ 3378.461522][ T9054] usb 5-1: ath9k_htc: USB layer deinitialized [ 3378.665532][T12681] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3378.674648][T12681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3378.685332][T11861] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3378.693024][T12681] usb 4-1: Product: syz [ 3378.693048][T12681] usb 4-1: Manufacturer: syz [ 3378.704285][T12681] usb 4-1: SerialNumber: syz [ 3378.755925][T12681] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3378.855118][ T9054] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3379.296048][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3379.305321][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.313320][T11861] usb 3-1: Product: syz [ 3379.320372][T11861] usb 3-1: Manufacturer: syz [ 3379.326224][T11861] usb 3-1: SerialNumber: syz [ 3379.335192][T12681] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3379.376808][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3379.495361][ T9054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3379.504448][ T9054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.515420][ T9054] usb 5-1: Product: syz [ 3379.519613][ T9054] usb 5-1: Manufacturer: syz [ 3379.524209][ T9054] usb 5-1: SerialNumber: syz [ 3379.572505][ T9672] usb 4-1: USB disconnect, device number 47 [ 3379.600870][ T9054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3380.055325][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:14 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3380.272408][T21800] usb 3-1: USB disconnect, device number 126 [ 3380.305353][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3380.365097][T12681] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3380.375506][T12681] ath9k_htc: Failed to initialize the device [ 3380.382392][ T9672] usb 4-1: ath9k_htc: USB layer deinitialized 08:35:15 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:15 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:15 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:15 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:15 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3380.523698][ T9757] usb 5-1: USB disconnect, device number 28 08:35:15 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:35:15 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:35:15 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:15 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:15 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) [ 3381.085323][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3381.093157][T11861] ath9k_htc: Failed to initialize the device [ 3381.100872][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3381.405151][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3381.412559][ T9054] ath9k_htc: Failed to initialize the device [ 3381.426560][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3381.475316][T21800] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3381.785241][ T9757] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3382.055228][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3382.064297][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.072773][T21800] usb 3-1: Product: syz [ 3382.077439][T21800] usb 3-1: Manufacturer: syz [ 3382.082048][T21800] usb 3-1: SerialNumber: syz [ 3382.126468][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3382.305243][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3382.314318][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.322592][ T9757] usb 5-1: Product: syz [ 3382.326888][ T9757] usb 5-1: Manufacturer: syz [ 3382.331498][ T9757] usb 5-1: SerialNumber: syz [ 3382.376039][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3382.785226][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3382.955124][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:17 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:17 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3383.003825][T11861] usb 3-1: USB disconnect, device number 127 08:35:17 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:17 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:35:17 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:35:17 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3383.172981][ T9757] usb 5-1: USB disconnect, device number 29 08:35:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:17 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:17 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) 08:35:17 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:18 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 3383.815515][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3383.822550][T21800] ath9k_htc: Failed to initialize the device [ 3383.830516][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3384.045054][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3384.052470][ T9054] ath9k_htc: Failed to initialize the device [ 3384.060023][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3384.185139][T11861] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3384.415164][ T9757] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3384.705511][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3384.716228][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3384.724453][T11861] usb 3-1: Product: syz [ 3384.728907][T11861] usb 3-1: Manufacturer: syz [ 3384.733518][T11861] usb 3-1: SerialNumber: syz [ 3384.776139][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3384.955606][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3384.966447][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3384.974458][ T9757] usb 5-1: Product: syz [ 3384.978969][ T9757] usb 5-1: Manufacturer: syz [ 3384.983583][ T9757] usb 5-1: SerialNumber: syz [ 3385.036205][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3385.355377][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:20 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3385.573007][ T9054] usb 3-1: USB disconnect, device number 2 [ 3385.615439][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:20 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:20 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) 08:35:20 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) 08:35:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3385.835865][ T9672] usb 5-1: USB disconnect, device number 30 08:35:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:20 executing program 3: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:20 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:20 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 08:35:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) [ 3386.445248][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3386.452280][T11861] ath9k_htc: Failed to initialize the device [ 3386.458832][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3386.685248][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3386.692278][ T9757] ath9k_htc: Failed to initialize the device [ 3386.701162][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3386.825061][ T9054] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3387.066136][ T9672] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3387.415721][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3387.426118][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.434357][ T9054] usb 3-1: Product: syz [ 3387.438982][ T9054] usb 3-1: Manufacturer: syz [ 3387.443818][ T9054] usb 3-1: SerialNumber: syz [ 3387.496206][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3387.585183][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3387.594736][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.604172][ T9672] usb 5-1: Product: syz [ 3387.609324][ T9672] usb 5-1: Manufacturer: syz [ 3387.613956][ T9672] usb 5-1: SerialNumber: syz [ 3387.666287][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3388.125432][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3388.245114][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:22 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:22 executing program 3: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3388.339236][T21800] usb 3-1: USB disconnect, device number 3 08:35:23 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:23 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:23 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) 08:35:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:23 executing program 3: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3388.466477][T12681] usb 5-1: USB disconnect, device number 31 08:35:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:23 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:23 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:23 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) [ 3388.926308][ T3252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3388.932654][ T3252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.175207][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3389.182469][ T9054] ath9k_htc: Failed to initialize the device [ 3389.191302][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3389.325158][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3389.332203][ T9672] ath9k_htc: Failed to initialize the device [ 3389.340511][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3389.555263][T21800] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3389.705221][T12681] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3390.075321][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3390.085835][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3390.094552][T21800] usb 3-1: Product: syz [ 3390.099653][T21800] usb 3-1: Manufacturer: syz [ 3390.104894][T21800] usb 3-1: SerialNumber: syz [ 3390.156415][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3390.225168][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3390.234376][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3390.243615][T12681] usb 5-1: Product: syz [ 3390.251141][T12681] usb 5-1: Manufacturer: syz [ 3390.257102][T12681] usb 5-1: SerialNumber: syz [ 3390.306030][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3390.735163][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3390.905422][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:25 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:25 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3390.951210][T11861] usb 3-1: USB disconnect, device number 4 08:35:25 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:25 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:25 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) 08:35:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:25 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3391.121643][ T9054] usb 5-1: USB disconnect, device number 32 08:35:25 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) 08:35:25 executing program 1: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:25 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:25 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) [ 3391.805065][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3391.812842][T21800] ath9k_htc: Failed to initialize the device [ 3391.821404][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3391.965096][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3391.972384][T12681] ath9k_htc: Failed to initialize the device [ 3391.980157][ T9054] usb 5-1: ath9k_htc: USB layer deinitialized [ 3392.235134][T11861] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3392.365421][ T9054] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3392.775352][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3392.784787][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.795660][T11861] usb 3-1: Product: syz [ 3392.799847][T11861] usb 3-1: Manufacturer: syz [ 3392.804462][T11861] usb 3-1: SerialNumber: syz [ 3392.856373][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3392.885340][ T9054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3392.902039][ T9054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.912355][ T9054] usb 5-1: Product: syz [ 3392.918242][ T9054] usb 5-1: Manufacturer: syz [ 3392.922945][ T9054] usb 5-1: SerialNumber: syz [ 3392.966613][ T9054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3393.435281][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3393.545311][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:28 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:28 executing program 1: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) [ 3393.656977][ T9613] usb 3-1: USB disconnect, device number 5 08:35:28 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:28 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:28 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:28 executing program 1: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:28 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) [ 3393.772534][ T9757] usb 5-1: USB disconnect, device number 33 08:35:28 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:28 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:28 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:28 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:28 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 3394.525136][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3394.532118][T11861] ath9k_htc: Failed to initialize the device [ 3394.541584][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3394.605271][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3394.612864][ T9054] ath9k_htc: Failed to initialize the device [ 3394.623078][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3394.915160][ T9613] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3395.005297][ T9757] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3395.485991][ T9613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3395.495172][ T9613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.503176][ T9613] usb 3-1: Product: syz [ 3395.510032][ T9613] usb 3-1: Manufacturer: syz [ 3395.514647][ T9613] usb 3-1: SerialNumber: syz [ 3395.575300][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3395.584396][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.595283][ T9613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3395.618527][ T9757] usb 5-1: Product: syz [ 3395.622734][ T9757] usb 5-1: Manufacturer: syz [ 3395.633481][ T9757] usb 5-1: SerialNumber: syz [ 3395.685881][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3396.345375][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3396.405220][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3396.566344][T12681] usb 3-1: USB disconnect, device number 6 08:35:31 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:31 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:31 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) 08:35:31 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:31 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3396.626093][T11861] usb 5-1: USB disconnect, device number 34 08:35:31 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:31 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) 08:35:31 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:31 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:31 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:31 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 3397.345509][T11033] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3397.405325][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3397.412430][ T9613] ath9k_htc: Failed to initialize the device [ 3397.425499][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3397.495524][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3397.502627][ T9757] ath9k_htc: Failed to initialize the device [ 3397.511734][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3397.785140][T12681] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3397.895408][T11861] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3397.945841][T11033] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3397.956965][T11033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3397.965959][T11033] usb 4-1: Product: syz [ 3397.970409][T11033] usb 4-1: Manufacturer: syz [ 3397.978151][T11033] usb 4-1: SerialNumber: syz [ 3398.036277][T11033] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3398.305159][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3398.315047][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3398.323209][T12681] usb 3-1: Product: syz [ 3398.329570][T12681] usb 3-1: Manufacturer: syz [ 3398.334282][T12681] usb 3-1: SerialNumber: syz [ 3398.386680][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3398.495515][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3398.504754][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3398.516108][T11861] usb 5-1: Product: syz [ 3398.520301][T11861] usb 5-1: Manufacturer: syz [ 3398.524897][T11861] usb 5-1: SerialNumber: syz [ 3398.586255][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3398.645296][T11033] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3398.874133][ T9588] usb 4-1: USB disconnect, device number 48 [ 3398.965134][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3399.181673][T21800] usb 3-1: USB disconnect, device number 7 [ 3399.315189][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:34 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:34 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000044c0)) 08:35:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:34 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:34 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:34 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3399.533676][T12454] usb 5-1: USB disconnect, device number 35 08:35:34 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 08:35:34 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:34 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) [ 3399.725079][T11033] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3399.738694][T11033] ath9k_htc: Failed to initialize the device [ 3399.769577][ T9588] usb 4-1: ath9k_htc: USB layer deinitialized 08:35:34 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:34 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) [ 3400.047127][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3400.054345][T12681] ath9k_htc: Failed to initialize the device [ 3400.063900][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3400.365090][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3400.372124][T11861] ath9k_htc: Failed to initialize the device [ 3400.380255][T12454] usb 5-1: ath9k_htc: USB layer deinitialized [ 3400.445151][T21800] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3400.745099][T12454] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3401.015459][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3401.024660][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.039403][T21800] usb 3-1: Product: syz [ 3401.043601][T21800] usb 3-1: Manufacturer: syz [ 3401.049464][T21800] usb 3-1: SerialNumber: syz [ 3401.116190][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3401.275411][T12454] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3401.285282][T12454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.294152][T12454] usb 5-1: Product: syz [ 3401.299303][T12454] usb 5-1: Manufacturer: syz [ 3401.304087][T12454] usb 5-1: SerialNumber: syz [ 3401.355931][T12454] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3401.785189][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3401.935197][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3402.005340][T11033] usb 3-1: USB disconnect, device number 8 08:35:36 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:36 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:36 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:35:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3402.152635][ T9588] usb 5-1: USB disconnect, device number 36 08:35:36 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:35:36 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:35:37 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) [ 3402.845109][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3402.852674][T21800] ath9k_htc: Failed to initialize the device [ 3402.862316][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3403.005188][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3403.012193][T12454] ath9k_htc: Failed to initialize the device [ 3403.020849][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3403.215085][T11033] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3403.395091][ T9588] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3403.735732][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3403.745152][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3403.753340][T11033] usb 3-1: Product: syz [ 3403.759945][T11033] usb 3-1: Manufacturer: syz [ 3403.764754][T11033] usb 3-1: SerialNumber: syz [ 3403.806365][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3404.025432][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3404.035384][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3404.044371][ T9588] usb 5-1: Product: syz [ 3404.049364][ T9588] usb 5-1: Manufacturer: syz [ 3404.054701][ T9588] usb 5-1: SerialNumber: syz [ 3404.106543][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3404.395178][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3404.615221][T21800] usb 3-1: USB disconnect, device number 9 [ 3404.765908][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:39 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:35:39 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:39 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:35:39 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3404.983575][ T9675] usb 5-1: USB disconnect, device number 37 08:35:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:35:39 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:35:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) 08:35:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) [ 3405.485255][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3405.492401][T11033] ath9k_htc: Failed to initialize the device [ 3405.500248][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3405.805250][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3405.812239][ T9588] ath9k_htc: Failed to initialize the device [ 3405.819497][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3405.885695][T21800] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3406.175109][ T9675] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3406.405351][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3406.414722][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.430273][T21800] usb 3-1: Product: syz [ 3406.434617][T21800] usb 3-1: Manufacturer: syz [ 3406.440553][T21800] usb 3-1: SerialNumber: syz [ 3406.495869][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3406.705171][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3406.715388][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.723394][ T9675] usb 5-1: Product: syz [ 3406.729547][ T9675] usb 5-1: Manufacturer: syz [ 3406.734251][ T9675] usb 5-1: SerialNumber: syz [ 3406.776344][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3407.075280][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3407.292362][T12454] usb 3-1: USB disconnect, device number 10 [ 3407.355295][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:42 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) 08:35:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:35:42 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:35:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:35:42 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3407.573458][ T9757] usb 5-1: USB disconnect, device number 38 08:35:42 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:35:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:35:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:42 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) 08:35:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:42 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) [ 3408.125093][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3408.132782][T21800] ath9k_htc: Failed to initialize the device [ 3408.143639][T12454] usb 3-1: ath9k_htc: USB layer deinitialized [ 3408.455171][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3408.462282][ T9675] ath9k_htc: Failed to initialize the device [ 3408.471293][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3408.495052][T12454] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 3408.845124][ T9757] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3409.015337][T12454] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3409.024667][T12454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.034286][T12454] usb 3-1: Product: syz [ 3409.039407][T12454] usb 3-1: Manufacturer: syz [ 3409.044132][T12454] usb 3-1: SerialNumber: syz [ 3409.096143][T12454] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3409.365370][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3409.375284][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.383315][ T9757] usb 5-1: Product: syz [ 3409.389419][ T9757] usb 5-1: Manufacturer: syz [ 3409.394896][ T9757] usb 5-1: SerialNumber: syz [ 3409.445865][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3409.675212][T12454] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3409.892329][ T9675] usb 3-1: USB disconnect, device number 11 [ 3410.025180][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x0) 08:35:44 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:44 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:35:44 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:44 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:35:44 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3410.242356][T11033] usb 5-1: USB disconnect, device number 39 08:35:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x0) 08:35:45 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:45 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:45 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) [ 3410.765211][T12454] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3410.772216][T12454] ath9k_htc: Failed to initialize the device [ 3410.781183][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3411.085067][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3411.092217][ T9757] ath9k_htc: Failed to initialize the device [ 3411.104683][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3411.155165][ T9675] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3411.465075][T11033] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3411.705365][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3411.714525][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3411.724635][ T9675] usb 3-1: Product: syz [ 3411.729892][ T9675] usb 3-1: Manufacturer: syz [ 3411.735380][ T9675] usb 3-1: SerialNumber: syz [ 3411.786172][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3412.045459][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3412.054724][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.064699][T11033] usb 5-1: Product: syz [ 3412.069798][T11033] usb 5-1: Manufacturer: syz [ 3412.074398][T11033] usb 5-1: SerialNumber: syz [ 3412.136139][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3412.355164][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3412.569449][T11861] usb 3-1: USB disconnect, device number 12 [ 3412.785132][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:47 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:47 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x0) 08:35:47 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:35:47 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3413.005691][T12681] usb 5-1: USB disconnect, device number 40 08:35:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:47 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:35:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:47 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) [ 3413.415816][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3413.423993][ T9675] ath9k_htc: Failed to initialize the device [ 3413.454542][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3413.805181][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3413.812482][T11033] ath9k_htc: Failed to initialize the device [ 3413.821301][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3413.845196][T11861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3414.216161][T12681] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3414.365491][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3414.374996][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.383382][T11861] usb 3-1: Product: syz [ 3414.389122][T11861] usb 3-1: Manufacturer: syz [ 3414.394079][T11861] usb 3-1: SerialNumber: syz [ 3414.436155][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3414.785506][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3414.796534][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.804670][T12681] usb 5-1: Product: syz [ 3414.811693][T12681] usb 5-1: Manufacturer: syz [ 3414.817727][T12681] usb 5-1: SerialNumber: syz [ 3414.876136][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3415.005389][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3415.221090][T11033] usb 3-1: USB disconnect, device number 13 [ 3415.519866][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:50 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:50 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:50 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:35:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:50 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3415.732106][ T9757] usb 5-1: USB disconnect, device number 41 08:35:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:50 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:35:50 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 3416.045177][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3416.055574][T11861] ath9k_htc: Failed to initialize the device 08:35:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3416.086704][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3416.485228][T11033] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3416.605325][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3416.612353][T12681] ath9k_htc: Failed to initialize the device [ 3416.620675][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3417.016007][ T9757] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3417.035546][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3417.044625][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.054877][T11033] usb 3-1: Product: syz [ 3417.060539][T11033] usb 3-1: Manufacturer: syz [ 3417.066302][T11033] usb 3-1: SerialNumber: syz [ 3417.106123][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3417.535358][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3417.544417][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.554654][ T9757] usb 5-1: Product: syz [ 3417.560668][ T9757] usb 5-1: Manufacturer: syz [ 3417.566890][ T9757] usb 5-1: SerialNumber: syz [ 3417.616199][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3417.685462][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3417.904861][T21800] usb 3-1: USB disconnect, device number 14 [ 3418.185165][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:53 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:53 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:53 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3418.401850][T11861] usb 5-1: USB disconnect, device number 42 08:35:53 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:53 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:53 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) [ 3418.765038][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3418.778054][T11033] ath9k_htc: Failed to initialize the device [ 3418.803829][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3419.205033][T21800] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3419.245533][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3419.252668][ T9757] ath9k_htc: Failed to initialize the device [ 3419.259540][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3419.655485][T11861] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3419.725244][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3419.734328][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3419.745163][T21800] usb 3-1: Product: syz [ 3419.749366][T21800] usb 3-1: Manufacturer: syz [ 3419.754158][T21800] usb 3-1: SerialNumber: syz [ 3419.806060][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3420.205558][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3420.215069][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.223540][T11861] usb 5-1: Product: syz [ 3420.230483][T11861] usb 5-1: Manufacturer: syz [ 3420.236477][T11861] usb 5-1: SerialNumber: syz [ 3420.276188][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3420.375178][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3420.593169][T12681] usb 3-1: USB disconnect, device number 15 [ 3420.945149][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:55 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:55 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:35:55 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:55 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:55 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:35:55 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3421.158795][ T9588] usb 5-1: USB disconnect, device number 43 08:35:55 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:55 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) socket$inet_udp(0x2, 0x2, 0x0) 08:35:55 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:55 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) [ 3421.405184][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3421.413273][T21800] ath9k_htc: Failed to initialize the device [ 3421.453036][T12681] usb 3-1: ath9k_htc: USB layer deinitialized 08:35:56 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) 08:35:56 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) socket$inet_udp(0x2, 0x2, 0x0) [ 3421.855049][T12681] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3421.965143][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3421.972267][T11861] ath9k_htc: Failed to initialize the device [ 3421.981325][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3422.355161][ T9588] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3422.415174][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3422.424760][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3422.434114][T12681] usb 3-1: Product: syz [ 3422.439413][T12681] usb 3-1: Manufacturer: syz [ 3422.444470][T12681] usb 3-1: SerialNumber: syz [ 3422.485963][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3422.875280][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3422.885462][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3422.893467][ T9588] usb 5-1: Product: syz [ 3422.898090][ T9588] usb 5-1: Manufacturer: syz [ 3422.902707][ T9588] usb 5-1: SerialNumber: syz [ 3422.946137][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3423.065256][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3423.283177][T11033] usb 3-1: USB disconnect, device number 16 [ 3423.535116][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:58 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:58 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:58 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 08:35:58 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 08:35:58 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3423.747034][T11861] usb 5-1: USB disconnect, device number 44 08:35:58 executing program 1: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:58 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:35:58 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:58 executing program 1: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) [ 3424.126108][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3424.133212][T12681] ath9k_htc: Failed to initialize the device [ 3424.153490][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3424.545080][T11033] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 3424.606054][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3424.613183][ T9588] ath9k_htc: Failed to initialize the device [ 3424.622403][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3424.995406][T11861] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3425.095345][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3425.105061][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.113631][T11033] usb 3-1: Product: syz [ 3425.119071][T11033] usb 3-1: Manufacturer: syz [ 3425.124418][T11033] usb 3-1: SerialNumber: syz [ 3425.182644][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3425.565620][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3425.575092][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.583249][T11861] usb 5-1: Product: syz [ 3425.588617][T11861] usb 5-1: Manufacturer: syz [ 3425.593474][T11861] usb 5-1: SerialNumber: syz [ 3425.656548][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3425.805379][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3426.032548][ T9588] usb 3-1: USB disconnect, device number 17 [ 3426.315396][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:01 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:36:01 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) socket$inet_udp(0x2, 0x2, 0x0) 08:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:36:01 executing program 1: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:01 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3426.532954][T12681] usb 5-1: USB disconnect, device number 45 08:36:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:01 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:01 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) socket$inet_udp(0x2, 0x2, 0x0) 08:36:01 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:01 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3426.845752][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3426.852851][T11033] ath9k_htc: Failed to initialize the device [ 3426.884247][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3427.285130][ T9588] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3427.405996][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3427.413099][T11861] ath9k_htc: Failed to initialize the device [ 3427.421209][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3427.785236][T12681] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3427.805501][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3427.814760][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3427.825416][ T9588] usb 3-1: Product: syz [ 3427.829615][ T9588] usb 3-1: Manufacturer: syz [ 3427.834226][ T9588] usb 3-1: SerialNumber: syz [ 3427.886182][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3428.305463][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3428.315347][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3428.323380][T12681] usb 5-1: Product: syz [ 3428.331347][T12681] usb 5-1: Manufacturer: syz [ 3428.337109][T12681] usb 5-1: SerialNumber: syz [ 3428.406665][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3428.495236][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3428.715421][T10730] usb 3-1: USB disconnect, device number 18 [ 3429.005986][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:03 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) 08:36:03 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:03 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:03 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:03 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:03 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3429.221276][T11861] usb 5-1: USB disconnect, device number 46 08:36:03 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:03 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:03 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 08:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 08:36:04 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:04 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:04 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) [ 3429.565061][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3429.579156][ T9588] ath9k_htc: Failed to initialize the device [ 3429.624215][T10730] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:04 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3429.995139][T10730] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3430.045047][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3430.053358][T12681] ath9k_htc: Failed to initialize the device [ 3430.061386][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3430.435146][T11861] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3430.515650][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3430.525302][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3430.533665][T10730] usb 3-1: Product: syz [ 3430.538761][T10730] usb 3-1: Manufacturer: syz [ 3430.543828][T10730] usb 3-1: SerialNumber: syz [ 3430.596234][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3430.955150][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3430.964477][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3430.974868][T11861] usb 5-1: Product: syz [ 3430.979667][T11861] usb 5-1: Manufacturer: syz [ 3430.984651][T11861] usb 5-1: SerialNumber: syz [ 3431.036037][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3431.245264][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3431.465999][T12681] usb 3-1: USB disconnect, device number 19 [ 3431.605222][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:06 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 08:36:06 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:06 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3431.821845][ T9054] usb 5-1: USB disconnect, device number 47 08:36:06 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:06 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:06 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) [ 3432.285209][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3432.292327][T10730] ath9k_htc: Failed to initialize the device [ 3432.301565][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3432.655077][T12681] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3432.685427][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3432.692678][T11861] ath9k_htc: Failed to initialize the device [ 3432.700627][ T9054] usb 5-1: ath9k_htc: USB layer deinitialized [ 3433.085249][ T9054] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3433.175476][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3433.184706][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3433.193334][T12681] usb 3-1: Product: syz [ 3433.198050][T12681] usb 3-1: Manufacturer: syz [ 3433.202660][T12681] usb 3-1: SerialNumber: syz [ 3433.246197][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3433.705425][ T9054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3433.714708][ T9054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3433.724653][ T9054] usb 5-1: Product: syz [ 3433.730015][ T9054] usb 5-1: Manufacturer: syz [ 3433.734637][ T9054] usb 5-1: SerialNumber: syz [ 3433.786237][ T9054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3433.825384][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3434.045291][T11861] usb 3-1: USB disconnect, device number 20 [ 3434.475260][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:09 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:09 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:36:09 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:09 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:09 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:09 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3434.692893][T11033] usb 5-1: USB disconnect, device number 48 08:36:09 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x200201) [ 3434.845044][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3434.866264][T12681] ath9k_htc: Failed to initialize the device 08:36:09 executing program 1: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:09 executing program 3: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:09 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3434.894011][T11861] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:09 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x200201) 08:36:09 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3435.285046][T10730] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3435.305877][T11861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3435.565145][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3435.572170][ T9054] ath9k_htc: Failed to initialize the device [ 3435.583623][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3435.825367][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3435.834849][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.845396][T11861] usb 3-1: Product: syz [ 3435.849763][T11861] usb 3-1: Manufacturer: syz [ 3435.854505][T11861] usb 3-1: SerialNumber: syz [ 3435.865297][T10730] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3435.882909][T10730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.893819][T10730] usb 2-1: Product: syz [ 3435.899337][T10730] usb 2-1: Manufacturer: syz [ 3435.904486][T10730] usb 2-1: SerialNumber: syz [ 3435.906143][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3435.945100][T11033] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3435.946625][T10730] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3436.465232][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3436.475834][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3436.484533][T11033] usb 5-1: Product: syz [ 3436.490798][T11033] usb 5-1: Manufacturer: syz [ 3436.496345][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3436.505981][T11033] usb 5-1: SerialNumber: syz [ 3436.555864][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3436.635170][T10730] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3436.714117][ T9588] usb 3-1: USB disconnect, device number 21 [ 3436.858022][T12681] usb 2-1: USB disconnect, device number 4 [ 3437.125286][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:11 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:11 executing program 3: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:11 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x200201) 08:36:11 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:11 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:11 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x200201) [ 3437.338546][ T9675] usb 5-1: USB disconnect, device number 49 08:36:12 executing program 3: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:12 executing program 5: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:12 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:12 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) [ 3437.567181][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3437.574291][T11861] ath9k_htc: Failed to initialize the device [ 3437.597452][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:12 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:12 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) [ 3437.725489][T10730] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3437.734176][T10730] ath9k_htc: Failed to initialize the device [ 3437.772526][T12681] usb 2-1: ath9k_htc: USB layer deinitialized [ 3437.985234][ T9588] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3438.205087][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3438.212204][T11033] ath9k_htc: Failed to initialize the device [ 3438.220000][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3438.555450][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3438.564842][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3438.574443][ T9588] usb 3-1: Product: syz [ 3438.580126][ T9588] usb 3-1: Manufacturer: syz [ 3438.584845][ T9588] usb 3-1: SerialNumber: syz [ 3438.614976][ T9675] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3438.635907][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3439.166334][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3439.176087][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3439.184380][ T9675] usb 5-1: Product: syz [ 3439.190934][ T9675] usb 5-1: Manufacturer: syz [ 3439.196549][ T9675] usb 5-1: SerialNumber: syz [ 3439.246253][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3439.265189][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3439.484276][T10730] usb 3-1: USB disconnect, device number 22 [ 3439.835218][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:14 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:14 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) 08:36:14 executing program 5: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:14 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:14 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) 08:36:14 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3440.052316][T12681] usb 5-1: USB disconnect, device number 50 08:36:14 executing program 5: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:14 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:14 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) 08:36:14 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:14 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) [ 3440.285064][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3440.306549][ T9588] ath9k_htc: Failed to initialize the device [ 3440.350987][T10730] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:15 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) [ 3440.605213][ T9757] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3440.745184][T10730] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3440.925271][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3440.932351][ T9675] ath9k_htc: Failed to initialize the device [ 3440.941195][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3441.225276][ T9757] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3441.235035][ T9757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.243028][ T9757] usb 1-1: Product: syz [ 3441.247875][ T9757] usb 1-1: Manufacturer: syz [ 3441.252584][ T9757] usb 1-1: SerialNumber: syz [ 3441.266686][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3441.281562][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.294350][T10730] usb 3-1: Product: syz [ 3441.302818][T12681] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3441.305954][ T9757] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3441.320393][T10730] usb 3-1: Manufacturer: syz [ 3441.332635][T10730] usb 3-1: SerialNumber: syz [ 3441.386987][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3441.855238][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3441.864593][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.875228][T12681] usb 5-1: Product: syz [ 3441.879776][T12681] usb 5-1: Manufacturer: syz [ 3441.884559][T12681] usb 5-1: SerialNumber: syz [ 3441.936230][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3441.958764][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3442.025183][ T9757] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3442.177311][ T9675] usb 3-1: USB disconnect, device number 23 [ 3442.245246][T10730] usb 1-1: USB disconnect, device number 75 [ 3442.505149][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:17 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:17 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:17 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:17 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:17 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:17 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) [ 3442.719420][T21800] usb 5-1: USB disconnect, device number 51 08:36:17 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:17 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:17 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:17 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:17 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) [ 3443.005111][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3443.023825][ T9672] ath9k_htc: Failed to initialize the device [ 3443.060357][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3443.085205][ T9757] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3443.108698][ T9757] ath9k_htc: Failed to initialize the device 08:36:17 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) [ 3443.145276][T10730] usb 1-1: ath9k_htc: USB layer deinitialized [ 3443.435098][ T9675] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3443.525041][T10730] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3443.565166][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3443.565305][T12681] ath9k_htc: Failed to initialize the device [ 3443.566110][T21800] usb 5-1: ath9k_htc: USB layer deinitialized [ 3443.945311][T21800] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3443.956447][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3443.966105][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3443.974177][ T9675] usb 3-1: Product: syz [ 3443.981921][ T9675] usb 3-1: Manufacturer: syz [ 3443.988614][ T9675] usb 3-1: SerialNumber: syz [ 3444.035989][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3444.065335][T10730] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3444.074498][T10730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.091915][T10730] usb 1-1: Product: syz [ 3444.097115][T10730] usb 1-1: Manufacturer: syz [ 3444.101737][T10730] usb 1-1: SerialNumber: syz [ 3444.156284][T10730] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3444.475346][T21800] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3444.484517][T21800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.501329][T21800] usb 5-1: Product: syz [ 3444.506847][T21800] usb 5-1: Manufacturer: syz [ 3444.511456][T21800] usb 5-1: SerialNumber: syz [ 3444.555956][T21800] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3444.686780][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3444.735318][T10730] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3444.905776][ T9757] usb 3-1: USB disconnect, device number 24 [ 3444.960175][T11033] usb 1-1: USB disconnect, device number 76 [ 3445.135143][T21800] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:19 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:19 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:19 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:36:19 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) clock_gettime(0x2, &(0x7f0000000400)) 08:36:19 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:19 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3445.362500][ T9588] usb 5-1: USB disconnect, device number 52 08:36:20 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:20 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x2, &(0x7f0000000400)) 08:36:20 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:20 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:20 executing program 5: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:20 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) clock_gettime(0x2, &(0x7f0000000400)) [ 3445.725144][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3445.735692][ T9675] ath9k_htc: Failed to initialize the device [ 3445.762467][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3445.805366][T10730] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3445.812465][T10730] ath9k_htc: Failed to initialize the device [ 3445.847561][T11033] usb 1-1: ath9k_htc: USB layer deinitialized [ 3446.045095][ T9672] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 3446.165094][ T9757] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3446.205025][T21800] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3446.212235][T21800] ath9k_htc: Failed to initialize the device [ 3446.224855][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3446.235143][T11033] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3446.565224][ T9672] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3446.574345][ T9672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.584612][ T9672] usb 6-1: Product: syz [ 3446.591037][ T9672] usb 6-1: Manufacturer: syz [ 3446.596919][ T9672] usb 6-1: SerialNumber: syz [ 3446.608129][ T9588] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3446.656284][ T9672] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3446.715780][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3446.724859][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.733572][ T9757] usb 3-1: Product: syz [ 3446.738412][ T9757] usb 3-1: Manufacturer: syz [ 3446.749535][ T9757] usb 3-1: SerialNumber: syz [ 3446.805939][T11033] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3446.816698][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3446.835362][T11033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.843399][T11033] usb 1-1: Product: syz [ 3446.857014][T11033] usb 1-1: Manufacturer: syz [ 3446.861661][T11033] usb 1-1: SerialNumber: syz [ 3446.906328][T11033] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3447.135525][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3447.145436][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3447.154392][ T9588] usb 5-1: Product: syz [ 3447.159856][ T9588] usb 5-1: Manufacturer: syz [ 3447.165827][ T9588] usb 5-1: SerialNumber: syz [ 3447.216232][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3447.235192][ T9672] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3447.462821][ T9054] usb 6-1: USB disconnect, device number 99 [ 3447.525266][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3447.575663][T11033] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3447.743973][T10730] usb 3-1: USB disconnect, device number 25 [ 3447.799666][T11861] usb 1-1: USB disconnect, device number 77 [ 3447.815135][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:22 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:22 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:22 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) clock_gettime(0x2, &(0x7f0000000400)) 08:36:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:22 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:22 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3448.032712][T12681] usb 5-1: USB disconnect, device number 53 08:36:22 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) clock_gettime(0x2, &(0x7f0000000400)) 08:36:22 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:22 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) clock_gettime(0x2, &(0x7f0000000400)) [ 3448.295377][ T9672] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3448.308765][ T9672] ath9k_htc: Failed to initialize the device [ 3448.331666][ T9054] usb 6-1: ath9k_htc: USB layer deinitialized 08:36:23 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:23 executing program 1: clock_gettime(0x2, &(0x7f0000000400)) [ 3448.605106][T11033] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3448.612668][T11033] ath9k_htc: Failed to initialize the device [ 3448.619105][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3448.626579][ T9613] ath9k_htc: Failed to initialize the device [ 3448.633017][T10730] usb 3-1: ath9k_htc: USB layer deinitialized [ 3448.633343][T11861] usb 1-1: ath9k_htc: USB layer deinitialized [ 3448.855201][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3448.862832][ T9588] ath9k_htc: Failed to initialize the device [ 3448.870927][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3448.995695][T11861] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3449.045159][T10730] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3449.245186][T12681] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3449.555318][T11861] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3449.564699][T11861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.575414][T11861] usb 1-1: Product: syz [ 3449.575418][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3449.575443][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.579820][T11861] usb 1-1: Manufacturer: syz [ 3449.598382][T10730] usb 3-1: Product: syz [ 3449.605396][T11861] usb 1-1: SerialNumber: syz [ 3449.612612][T10730] usb 3-1: Manufacturer: syz [ 3449.622784][T10730] usb 3-1: SerialNumber: syz [ 3449.656331][T11861] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3449.686493][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3449.766341][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3449.775836][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.783977][T12681] usb 5-1: Product: syz [ 3449.789001][T12681] usb 5-1: Manufacturer: syz [ 3449.793617][T12681] usb 5-1: SerialNumber: syz [ 3449.846067][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3450.255169][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3450.345180][T11861] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3450.365896][ T3252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.372226][ T3252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.425423][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3450.474578][T11033] usb 3-1: USB disconnect, device number 26 [ 3450.566523][ T9613] usb 1-1: USB disconnect, device number 78 08:36:25 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:25 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:25 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:25 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:25 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:25 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3450.643372][ T9757] usb 5-1: USB disconnect, device number 54 08:36:25 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:25 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:25 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:25 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:25 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:25 executing program 1: clock_gettime(0x2, 0x0) [ 3451.325131][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3451.332194][T10730] ath9k_htc: Failed to initialize the device [ 3451.340610][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3451.405320][T11861] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3451.412378][T11861] ath9k_htc: Failed to initialize the device [ 3451.420344][ T9613] usb 1-1: ath9k_htc: USB layer deinitialized [ 3451.485145][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3451.492235][T12681] ath9k_htc: Failed to initialize the device [ 3451.505963][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3451.735957][T11033] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3451.785350][ T9613] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3451.895013][ T9757] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3452.285736][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3452.295707][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.304154][T11033] usb 3-1: Product: syz [ 3452.310431][T11033] usb 3-1: Manufacturer: syz [ 3452.315931][T11033] usb 3-1: SerialNumber: syz [ 3452.335310][ T9613] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3452.344383][ T9613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.355896][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3452.380960][ T9613] usb 1-1: Product: syz [ 3452.393416][ T9613] usb 1-1: Manufacturer: syz [ 3452.398258][ T9613] usb 1-1: SerialNumber: syz [ 3452.445515][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3452.455855][ T9613] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3452.468180][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.492753][ T9757] usb 5-1: Product: syz [ 3452.498079][ T9757] usb 5-1: Manufacturer: syz [ 3452.502705][ T9757] usb 5-1: SerialNumber: syz [ 3452.546475][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3452.985129][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3453.075237][ T9613] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3453.135241][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3453.215992][ T9757] usb 3-1: USB disconnect, device number 27 [ 3453.311042][ T9054] usb 1-1: USB disconnect, device number 79 08:36:27 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:27 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:27 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:27 executing program 1: clock_gettime(0x2, 0x0) 08:36:27 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:27 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3453.362447][T12681] usb 5-1: USB disconnect, device number 55 08:36:28 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:28 executing program 1: clock_gettime(0x2, 0x0) 08:36:28 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:28 executing program 1: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:28 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3453.735399][ T3626] usb 4-1: new high-speed USB device number 49 using dummy_hcd 08:36:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) [ 3453.995094][T27697] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3454.045382][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3454.053404][T11033] ath9k_htc: Failed to initialize the device [ 3454.062521][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3454.125181][ T9613] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3454.133140][ T9613] ath9k_htc: Failed to initialize the device [ 3454.142317][ T9054] usb 1-1: ath9k_htc: USB layer deinitialized [ 3454.205368][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3454.212394][T11861] ath9k_htc: Failed to initialize the device [ 3454.223002][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3454.265431][ T3626] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3454.276142][ T3626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.284843][ T3626] usb 4-1: Product: syz [ 3454.291958][ T3626] usb 4-1: Manufacturer: syz [ 3454.298494][ T3626] usb 4-1: SerialNumber: syz [ 3454.346966][ T3626] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3454.425432][ T9757] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3454.525360][T27697] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3454.535050][ T9054] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3454.542855][T27697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.554207][T27697] usb 2-1: Product: syz [ 3454.560192][T27697] usb 2-1: Manufacturer: syz [ 3454.566717][T27697] usb 2-1: SerialNumber: syz [ 3454.606379][T27697] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3454.645093][T12681] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3454.942014][ T3626] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3454.951724][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3454.964520][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.978721][ T9757] usb 3-1: Product: syz [ 3454.982959][ T9757] usb 3-1: Manufacturer: syz [ 3454.991394][ T9757] usb 3-1: SerialNumber: syz [ 3455.036783][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3455.075714][ T9054] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3455.086440][ T9054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.097733][ T9054] usb 1-1: Product: syz [ 3455.102394][ T9054] usb 1-1: Manufacturer: syz [ 3455.110525][ T9054] usb 1-1: SerialNumber: syz [ 3455.156030][ T9054] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3455.203375][ T9613] usb 4-1: USB disconnect, device number 49 [ 3455.209663][T12454] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3455.225578][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3455.257535][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.274685][T12681] usb 5-1: Product: syz [ 3455.280438][T12681] usb 5-1: Manufacturer: syz [ 3455.286836][T12681] usb 5-1: SerialNumber: syz [ 3455.366142][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3455.436834][T11861] usb 2-1: USB disconnect, device number 5 [ 3455.615485][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3455.755141][T11033] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3455.830184][T12681] usb 3-1: USB disconnect, device number 28 [ 3455.965101][ T3626] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3455.972667][ T3626] ath9k_htc: Failed to initialize the device [ 3455.982337][ T9613] usb 4-1: ath9k_htc: USB layer deinitialized [ 3455.985449][T10730] usb 1-1: USB disconnect, device number 80 [ 3455.996791][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:30 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:30 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 08:36:30 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:30 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:30 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:30 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) [ 3456.224388][ T9613] usb 5-1: USB disconnect, device number 56 [ 3456.295084][T12454] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3456.302485][T12454] ath9k_htc: Failed to initialize the device [ 3456.354008][T11861] usb 2-1: ath9k_htc: USB layer deinitialized 08:36:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 08:36:31 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:31 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:31 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:31 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:31 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) [ 3456.695173][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3456.704123][ T9757] ath9k_htc: Failed to initialize the device [ 3456.720418][T19535] FAULT_INJECTION: forcing a failure. [ 3456.720418][T19535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3456.741002][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3456.765001][T19535] CPU: 0 PID: 19535 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 3456.773751][T19535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3456.783912][T19535] Call Trace: [ 3456.787207][T19535] dump_stack_lvl+0x1d3/0x29f [ 3456.792027][T19535] ? show_regs_print_info+0x12/0x12 [ 3456.797324][T19535] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3456.803139][T19535] ? __might_fault+0xb8/0x110 [ 3456.807944][T19535] ? snprintf+0xc0/0x110 [ 3456.812217][T19535] should_fail+0x384/0x4b0 [ 3456.816721][T19535] _copy_to_user+0x2d/0x130 [ 3456.821576][T19535] simple_read_from_buffer+0xd9/0x160 [ 3456.827423][T19535] proc_fail_nth_read+0x195/0x210 [ 3456.832584][T19535] ? proc_fault_inject_write+0x370/0x370 [ 3456.838248][T19535] ? __mutex_lock_common+0x570/0x3770 [ 3456.843819][T19535] ? rw_verify_area+0x1b8/0x370 [ 3456.848742][T19535] ? fsnotify_perm+0x2fd/0x4d0 [ 3456.853588][T19535] ? proc_fault_inject_write+0x370/0x370 [ 3456.859249][T19535] vfs_read+0x294/0xc20 [ 3456.863424][T19535] ? rcu_lock_release+0x9/0x20 [ 3456.868444][T19535] ? __lock_acquire+0x6100/0x6100 [ 3456.873550][T19535] ? kernel_read+0x70/0x70 [ 3456.878079][T19535] ? __fget_files+0x34f/0x380 [ 3456.882818][T19535] ? mutex_lock_nested+0x1a/0x20 [ 3456.887785][T19535] ? __fdget_pos+0x24e/0x2f0 [ 3456.892384][T19535] ? ksys_read+0x72/0x2a0 [ 3456.896716][T19535] ksys_read+0x171/0x2a0 [ 3456.901068][T19535] ? vfs_write+0xc90/0xc90 [ 3456.905572][T19535] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3456.911585][T19535] ? lockdep_hardirqs_on+0x8d/0x130 [ 3456.916834][T19535] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3456.922832][T19535] do_syscall_64+0x3d/0xb0 [ 3456.927273][T19535] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3456.933261][T19535] RIP: 0033:0x41935c [ 3456.937152][T19535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3456.956956][T19535] RSP: 002b:00007f8181b47170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3456.966789][T19535] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 3456.975343][T19535] RDX: 000000000000000f RSI: 00007f8181b471e0 RDI: 0000000000000004 [ 3456.983574][T19535] RBP: 00007f8181b471d0 R08: 0000000000000000 R09: 0000000000000000 [ 3456.991988][T19535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3456.999968][T19535] R13: 00007ffe32233dbf R14: 00007f8181b47300 R15: 0000000000022000 [ 3457.013085][T11033] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3457.022158][T11033] ath9k_htc: Failed to initialize the device [ 3457.029735][T10730] usb 1-1: ath9k_htc: USB layer deinitialized [ 3457.085697][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3457.093535][ T9672] ath9k_htc: Failed to initialize the device [ 3457.102398][ T9613] usb 5-1: ath9k_htc: USB layer deinitialized [ 3457.165415][T12681] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3457.465046][ T9613] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3457.725394][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3457.734474][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3457.744332][T12681] usb 3-1: Product: syz [ 3457.749482][T12681] usb 3-1: Manufacturer: syz [ 3457.754103][T12681] usb 3-1: SerialNumber: syz [ 3457.805985][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3457.985383][ T9613] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3457.994466][ T9613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.010138][ T9613] usb 5-1: Product: syz [ 3458.014420][ T9613] usb 5-1: Manufacturer: syz [ 3458.020626][ T9613] usb 5-1: SerialNumber: syz [ 3458.075986][ T9613] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3458.475144][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3458.645162][ T9613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3458.695305][T10730] usb 3-1: USB disconnect, device number 29 08:36:33 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:33 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:33 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3458.860575][ T9672] usb 5-1: USB disconnect, device number 57 08:36:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x3, 0x0, &(0x7f0000000140)) 08:36:33 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:36:33 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x4, 0x0, &(0x7f0000000140)) 08:36:33 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) [ 3459.575232][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3459.582352][ T9588] ath9k_htc: Failed to initialize the device [ 3459.590642][T10730] usb 3-1: ath9k_htc: USB layer deinitialized [ 3459.725111][ T9613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3459.732587][ T9613] ath9k_htc: Failed to initialize the device [ 3459.740392][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3459.975286][T10730] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3460.125342][ T9672] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3460.515249][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3460.524665][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.533674][T10730] usb 3-1: Product: syz [ 3460.538778][T10730] usb 3-1: Manufacturer: syz [ 3460.543642][T10730] usb 3-1: SerialNumber: syz [ 3460.596192][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3460.715554][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3460.724667][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.734160][ T9672] usb 5-1: Product: syz [ 3460.739936][ T9672] usb 5-1: Manufacturer: syz [ 3460.744749][ T9672] usb 5-1: SerialNumber: syz [ 3460.786303][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3461.266838][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3461.445322][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3461.483221][ T9613] usb 3-1: USB disconnect, device number 30 08:36:36 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:36:36 executing program 3 (fault-call:0 fault-nth:0): clock_gettime(0x2, &(0x7f0000000400)) 08:36:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:36 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3461.663808][T11033] usb 5-1: USB disconnect, device number 58 [ 3461.740179][T19663] FAULT_INJECTION: forcing a failure. [ 3461.740179][T19663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3461.804488][T19663] CPU: 0 PID: 19663 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3461.813127][T19663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3461.823202][T19663] Call Trace: [ 3461.826589][T19663] dump_stack_lvl+0x1d3/0x29f [ 3461.831302][T19663] ? show_regs_print_info+0x12/0x12 [ 3461.836679][T19663] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3461.842422][T19663] ? __might_fault+0xb8/0x110 [ 3461.847136][T19663] ? rcu_lock_release+0x5/0x20 [ 3461.852035][T19663] should_fail+0x384/0x4b0 [ 3461.856487][T19663] _copy_to_user+0x2d/0x130 [ 3461.861018][T19663] put_timespec64+0xf6/0x150 [ 3461.865776][T19663] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3461.871372][T19663] ? get_timespec64+0x250/0x250 [ 3461.876250][T19663] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3461.882375][T19663] __x64_sys_clock_gettime+0x1b8/0x220 [ 3461.887869][T19663] ? __ia32_sys_clock_settime+0x240/0x240 [ 3461.893717][T19663] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3461.899970][T19663] ? lockdep_hardirqs_on+0x8d/0x130 [ 3461.905214][T19663] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3461.911307][T19663] do_syscall_64+0x3d/0xb0 [ 3461.915752][T19663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3461.921673][T19663] RIP: 0033:0x4665d9 [ 3461.926028][T19663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3461.946026][T19663] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 08:36:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x4) [ 3461.954472][T19663] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3461.962558][T19663] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3461.970550][T19663] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3461.978899][T19663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3461.987272][T19663] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) 08:36:36 executing program 3 (fault-call:0 fault-nth:1): clock_gettime(0x2, &(0x7f0000000400)) [ 3462.205746][T19687] FAULT_INJECTION: forcing a failure. [ 3462.205746][T19687] name failslab, interval 1, probability 0, space 0, times 1 [ 3462.233399][T19687] CPU: 0 PID: 19687 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3462.242221][T19687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3462.252884][T19687] Call Trace: [ 3462.256315][T19687] dump_stack_lvl+0x1d3/0x29f [ 3462.261325][T19687] ? show_regs_print_info+0x12/0x12 [ 3462.267706][T19687] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3462.273663][T19687] ? __fs_reclaim_acquire+0x30/0x30 [ 3462.279322][T19687] ? __might_sleep+0x100/0x100 [ 3462.284445][T19687] should_fail+0x384/0x4b0 [ 3462.289054][T19687] ? __anon_vma_prepare+0x66/0x480 [ 3462.294334][T19687] should_failslab+0x5/0x20 [ 3462.299090][T19687] kmem_cache_alloc+0x6b/0x340 [ 3462.303980][T19687] ? rcu_lock_release+0x5/0x20 [ 3462.308868][T19687] __anon_vma_prepare+0x66/0x480 [ 3462.313840][T19687] do_huge_pmd_anonymous_page+0xbf1/0xce0 [ 3462.320106][T19687] ? count_memcg_event_mm+0x2e4/0x330 [ 3462.325513][T19687] ? do_swap_page+0x2120/0x2120 [ 3462.330392][T19687] ? vma_thp_gfp_mask+0x170/0x170 [ 3462.335584][T19687] handle_mm_fault+0x207e/0x2640 [ 3462.340744][T19687] ? finish_fault+0x670/0x670 [ 3462.345448][T19687] ? __init_rwsem+0x160/0x160 [ 3462.350449][T19687] ? vmacache_find+0x4ef/0x5d0 [ 3462.355521][T19687] do_user_addr_fault+0x8ce/0x1120 [ 3462.361218][T19687] exc_page_fault+0xa1/0x1e0 [ 3462.366093][T19687] asm_exc_page_fault+0x1e/0x30 [ 3462.371004][T19687] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3462.377491][T19687] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3462.397988][T19687] RSP: 0018:ffffc90009fe7d88 EFLAGS: 00010202 [ 3462.404273][T19687] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3462.412381][T19687] RDX: 0000000000000000 RSI: ffffc90009fe7e00 RDI: 0000000020000400 [ 3462.420703][T19687] RBP: ffffc90009fe7e70 R08: 0000000000000000 R09: fffff520013fcfc2 [ 3462.429014][T19687] R10: fffff520013fcfc2 R11: 0000000000000000 R12: 0000000000000010 [ 3462.437354][T19687] R13: 00007ffffffff000 R14: ffffc90009fe7e00 R15: 0000000020000400 [ 3462.445482][T19687] ? _copy_to_user+0xb1/0x130 [ 3462.450367][T19687] _copy_to_user+0xef/0x130 [ 3462.454952][T19687] put_timespec64+0xf6/0x150 [ 3462.459655][T19687] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3462.465040][T19687] ? get_timespec64+0x250/0x250 [ 3462.470026][T19687] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3462.476112][T19687] __x64_sys_clock_gettime+0x1b8/0x220 [ 3462.481787][T19687] ? __ia32_sys_clock_settime+0x240/0x240 [ 3462.487768][T19687] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3462.494284][T19687] ? lockdep_hardirqs_on+0x8d/0x130 [ 3462.499509][T19687] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3462.505678][T19687] do_syscall_64+0x3d/0xb0 [ 3462.510134][T19687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3462.516029][T19687] RIP: 0033:0x4665d9 [ 3462.519932][T19687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3462.539816][T19687] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3462.548437][T19687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3462.556765][T19687] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3462.564740][T19687] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3462.573063][T19687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3462.581151][T19687] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3462.601123][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3462.608474][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3462.616137][T10730] ath9k_htc: Failed to initialize the device [ 3462.622482][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3462.622576][ T9672] ath9k_htc: Failed to initialize the device [ 3462.644421][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3463.025218][T11033] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3463.575791][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3463.585216][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3463.593452][T11033] usb 5-1: Product: syz [ 3463.597831][T11033] usb 5-1: Manufacturer: syz [ 3463.602632][T11033] usb 5-1: SerialNumber: syz [ 3463.646537][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3464.255109][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:39 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x7) 08:36:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:36:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:39 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:39 executing program 3 (fault-call:0 fault-nth:2): clock_gettime(0x2, &(0x7f0000000400)) [ 3464.472499][T10730] usb 5-1: USB disconnect, device number 59 08:36:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x700) [ 3464.552318][T19724] FAULT_INJECTION: forcing a failure. [ 3464.552318][T19724] name failslab, interval 1, probability 0, space 0, times 0 [ 3464.587505][T19724] CPU: 1 PID: 19724 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3464.596406][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3464.606742][T19724] Call Trace: [ 3464.610043][T19724] dump_stack_lvl+0x1d3/0x29f [ 3464.614799][T19724] ? show_regs_print_info+0x12/0x12 [ 3464.620120][T19724] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3464.625879][T19724] ? __fs_reclaim_acquire+0x30/0x30 [ 3464.631131][T19724] ? __might_sleep+0x100/0x100 [ 3464.635921][T19724] ? rcu_read_lock_sched_held+0x87/0x110 [ 3464.641657][T19724] should_fail+0x384/0x4b0 [ 3464.646094][T19724] ? __anon_vma_prepare+0xaf/0x480 [ 3464.651218][T19724] should_failslab+0x5/0x20 [ 3464.655720][T19724] kmem_cache_alloc+0x6b/0x340 [ 3464.660590][T19724] ? __anon_vma_prepare+0x66/0x480 [ 3464.665995][T19724] ? rcu_lock_release+0x5/0x20 [ 3464.670777][T19724] __anon_vma_prepare+0xaf/0x480 [ 3464.675716][T19724] do_huge_pmd_anonymous_page+0xbf1/0xce0 [ 3464.681430][T19724] ? count_memcg_event_mm+0x2e4/0x330 [ 3464.686966][T19724] ? do_swap_page+0x2120/0x2120 [ 3464.691811][T19724] ? vma_thp_gfp_mask+0x170/0x170 [ 3464.696834][T19724] handle_mm_fault+0x207e/0x2640 [ 3464.701818][T19724] ? finish_fault+0x670/0x670 [ 3464.706491][T19724] ? __init_rwsem+0x160/0x160 [ 3464.711158][T19724] ? vmacache_find+0x4ef/0x5d0 [ 3464.715921][T19724] do_user_addr_fault+0x8ce/0x1120 [ 3464.721123][T19724] exc_page_fault+0xa1/0x1e0 [ 3464.725709][T19724] asm_exc_page_fault+0x1e/0x30 [ 3464.730633][T19724] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3464.737047][T19724] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3464.757018][T19724] RSP: 0018:ffffc9000a0efd88 EFLAGS: 00010202 [ 3464.763089][T19724] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3464.771254][T19724] RDX: 0000000000000000 RSI: ffffc9000a0efe00 RDI: 0000000020000400 [ 3464.779402][T19724] RBP: ffffc9000a0efe70 R08: 0000000000000000 R09: fffff5200141dfc2 [ 3464.787381][T19724] R10: fffff5200141dfc2 R11: 0000000000000000 R12: 0000000000000010 [ 3464.795362][T19724] R13: 00007ffffffff000 R14: ffffc9000a0efe00 R15: 0000000020000400 [ 3464.803448][T19724] ? _copy_to_user+0xb1/0x130 [ 3464.808212][T19724] _copy_to_user+0xef/0x130 [ 3464.812719][T19724] put_timespec64+0xf6/0x150 [ 3464.817398][T19724] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3464.822672][T19724] ? get_timespec64+0x250/0x250 [ 3464.827603][T19724] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3464.833768][T19724] __x64_sys_clock_gettime+0x1b8/0x220 [ 3464.839219][T19724] ? __ia32_sys_clock_settime+0x240/0x240 [ 3464.844930][T19724] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3464.850898][T19724] ? lockdep_hardirqs_on+0x8d/0x130 [ 3464.856353][T19724] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3464.862320][T19724] do_syscall_64+0x3d/0xb0 [ 3464.867004][T19724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3464.873167][T19724] RIP: 0033:0x4665d9 [ 3464.877052][T19724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3464.896998][T19724] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 08:36:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) [ 3464.905417][T19724] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3464.913376][T19724] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3464.921534][T19724] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3464.929619][T19724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3464.937602][T19724] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) 08:36:39 executing program 3 (fault-call:0 fault-nth:3): clock_gettime(0x2, &(0x7f0000000400)) 08:36:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:36:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x4000000) [ 3465.146424][T19742] FAULT_INJECTION: forcing a failure. [ 3465.146424][T19742] name failslab, interval 1, probability 0, space 0, times 0 [ 3465.201481][T19742] CPU: 1 PID: 19742 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3465.209960][T19742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3465.220235][T19742] Call Trace: [ 3465.223536][T19742] dump_stack_lvl+0x1d3/0x29f [ 3465.228683][T19742] ? show_regs_print_info+0x12/0x12 [ 3465.234000][T19742] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3465.239833][T19742] ? __fs_reclaim_acquire+0x30/0x30 [ 3465.245059][T19742] ? __might_sleep+0x100/0x100 [ 3465.249964][T19742] ? up_write+0x12c/0x4d0 [ 3465.254332][T19742] should_fail+0x384/0x4b0 [ 3465.258775][T19742] ? __khugepaged_enter+0x2c/0x330 [ 3465.264179][T19742] should_failslab+0x5/0x20 [ 3465.268775][T19742] kmem_cache_alloc+0x6b/0x340 [ 3465.273542][T19742] __khugepaged_enter+0x2c/0x330 [ 3465.278588][T19742] do_huge_pmd_anonymous_page+0x4f1/0xce0 [ 3465.284359][T19742] ? count_memcg_event_mm+0x2e4/0x330 [ 3465.289758][T19742] ? vma_thp_gfp_mask+0x170/0x170 [ 3465.294911][T19742] handle_mm_fault+0x207e/0x2640 [ 3465.299867][T19742] ? finish_fault+0x670/0x670 [ 3465.304667][T19742] ? __init_rwsem+0x160/0x160 [ 3465.309437][T19742] ? vmacache_find+0x4ef/0x5d0 [ 3465.314305][T19742] do_user_addr_fault+0x8ce/0x1120 [ 3465.319419][T19742] exc_page_fault+0xa1/0x1e0 [ 3465.324026][T19742] asm_exc_page_fault+0x1e/0x30 [ 3465.328940][T19742] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3465.335390][T19742] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3465.355549][T19742] RSP: 0018:ffffc9000a14fd88 EFLAGS: 00010202 [ 3465.361634][T19742] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3465.370015][T19742] RDX: 0000000000000000 RSI: ffffc9000a14fe00 RDI: 0000000020000400 [ 3465.378355][T19742] RBP: ffffc9000a14fe70 R08: 0000000000000000 R09: fffff52001429fc2 [ 3465.386334][T19742] R10: fffff52001429fc2 R11: 0000000000000000 R12: 0000000000000010 [ 3465.394393][T19742] R13: 00007ffffffff000 R14: ffffc9000a14fe00 R15: 0000000020000400 [ 3465.402464][T19742] ? _copy_to_user+0xb1/0x130 [ 3465.407248][T19742] _copy_to_user+0xef/0x130 [ 3465.411770][T19742] put_timespec64+0xf6/0x150 [ 3465.416656][T19742] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3465.421935][T19742] ? get_timespec64+0x250/0x250 [ 3465.426780][T19742] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3465.432758][T19742] __x64_sys_clock_gettime+0x1b8/0x220 [ 3465.438303][T19742] ? __ia32_sys_clock_settime+0x240/0x240 [ 3465.444271][T19742] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3465.450413][T19742] ? lockdep_hardirqs_on+0x8d/0x130 [ 3465.455777][T19742] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3465.462061][T19742] do_syscall_64+0x3d/0xb0 [ 3465.466665][T19742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3465.472550][T19742] RIP: 0033:0x4665d9 [ 3465.476438][T19742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3465.496141][T19742] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3465.504555][T19742] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3465.512983][T19742] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3465.521066][T19742] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3465.529558][T19742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3465.537872][T19742] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3465.545943][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3465.553895][T11861] ath9k_htc: Failed to initialize the device [ 3465.584098][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3465.976467][T10730] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3466.575248][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3466.584449][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3466.594549][T10730] usb 5-1: Product: syz [ 3466.600390][T10730] usb 5-1: Manufacturer: syz [ 3466.605695][T10730] usb 5-1: SerialNumber: syz [ 3466.665987][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3467.305040][T10730] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:36:42 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) 08:36:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x7000000) 08:36:42 executing program 3 (fault-call:0 fault-nth:4): clock_gettime(0x2, &(0x7f0000000400)) 08:36:42 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3467.533778][ T9672] usb 5-1: USB disconnect, device number 60 08:36:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), 0x4) accept4(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000280)=0x80, 0x80000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000001c0), 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1412, 0x10, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3467.623738][T19770] FAULT_INJECTION: forcing a failure. [ 3467.623738][T19770] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 3467.723963][T19770] CPU: 0 PID: 19770 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3467.732643][T19770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3467.742800][T19770] Call Trace: [ 3467.746107][T19770] dump_stack_lvl+0x1d3/0x29f [ 3467.750924][T19770] ? show_regs_print_info+0x12/0x12 [ 3467.756230][T19770] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3467.761994][T19770] should_fail+0x384/0x4b0 [ 3467.766444][T19770] prepare_alloc_pages+0x1d1/0x5a0 [ 3467.771593][T19770] __alloc_pages+0x14d/0x5f0 [ 3467.776307][T19770] ? __rmqueue_pcplist+0x2030/0x2030 [ 3467.781890][T19770] ? __lock_acquire+0x6100/0x6100 [ 3467.787130][T19770] ? do_raw_spin_unlock+0x134/0x8a0 [ 3467.792360][T19770] alloc_pages_vma+0x9c7/0xe70 [ 3467.797164][T19770] do_huge_pmd_anonymous_page+0x5b9/0xce0 [ 3467.803000][T19770] ? count_memcg_event_mm+0x2e4/0x330 [ 3467.808598][T19770] ? vma_thp_gfp_mask+0x170/0x170 [ 3467.813668][T19770] handle_mm_fault+0x207e/0x2640 [ 3467.818660][T19770] ? finish_fault+0x670/0x670 08:36:42 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @nl=@kern={0x10, 0x0, 0x0, 0x12500000}, @generic={0x1d, "4378570f33ac39edb395f685175e"}, 0x8001, 0x0, 0x0, 0x0, 0x119, &(0x7f0000000000)='gre0\x00', 0xfffffffffffffffe, 0x0, 0x9}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3467.823376][T19770] ? __init_rwsem+0x160/0x160 [ 3467.828103][T19770] ? vmacache_find+0x4ef/0x5d0 [ 3467.832989][T19770] do_user_addr_fault+0x8ce/0x1120 [ 3467.838140][T19770] exc_page_fault+0xa1/0x1e0 [ 3467.842860][T19770] asm_exc_page_fault+0x1e/0x30 [ 3467.847732][T19770] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3467.854253][T19770] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3467.874052][T19770] RSP: 0018:ffffc9000a2a7d88 EFLAGS: 00010202 [ 3467.880145][T19770] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3467.888317][T19770] RDX: 0000000000000000 RSI: ffffc9000a2a7e00 RDI: 0000000020000400 [ 3467.896401][T19770] RBP: ffffc9000a2a7e70 R08: 0000000000000000 R09: fffff52001454fc2 [ 3467.904559][T19770] R10: fffff52001454fc2 R11: 0000000000000000 R12: 0000000000000010 [ 3467.912582][T19770] R13: 00007ffffffff000 R14: ffffc9000a2a7e00 R15: 0000000020000400 08:36:42 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x68d6126b704c3b66, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3467.920613][T19770] ? _copy_to_user+0xb1/0x130 [ 3467.925351][T19770] _copy_to_user+0xef/0x130 [ 3467.930059][T19770] put_timespec64+0xf6/0x150 [ 3467.934672][T19770] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3467.940073][T19770] ? get_timespec64+0x250/0x250 [ 3467.945129][T19770] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3467.951499][T19770] __x64_sys_clock_gettime+0x1b8/0x220 [ 3467.957158][T19770] ? __ia32_sys_clock_settime+0x240/0x240 [ 3467.962922][T19770] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3467.968947][T19770] ? lockdep_hardirqs_on+0x8d/0x130 08:36:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) [ 3467.974184][T19770] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3467.980245][T19770] do_syscall_64+0x3d/0xb0 [ 3467.984715][T19770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3467.990881][T19770] RIP: 0033:0x4665d9 [ 3467.994815][T19770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3468.014943][T19770] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 08:36:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) [ 3468.023466][T19770] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3468.031560][T19770] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3468.039729][T19770] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3468.047974][T19770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3468.056061][T19770] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3468.365155][T10730] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3468.372386][T10730] ath9k_htc: Failed to initialize the device [ 3468.380500][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3468.775185][ T9672] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3469.345267][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3469.354361][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3469.364455][ T9672] usb 5-1: Product: syz [ 3469.369849][ T9672] usb 5-1: Manufacturer: syz [ 3469.376502][ T9672] usb 5-1: SerialNumber: syz [ 3469.436008][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3470.045181][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:44 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:44 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:36:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000012cc0)=[{{&(0x7f000000e200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000e740)=[{&(0x7f000000e280)=""/242, 0xf2}, {&(0x7f000000e380)=""/103, 0x67}, {&(0x7f000000e400)=""/196, 0xc4}, {&(0x7f000000e500)=""/13, 0xd}, {&(0x7f000000e540)=""/226, 0xe2}, {&(0x7f000000e640)=""/87, 0x57}, {&(0x7f000000e6c0)=""/84, 0x54}], 0x7, &(0x7f000000e7c0)=""/165, 0xa5}, 0x6}, {{&(0x7f000000e880)=@can, 0x80, &(0x7f00000119c0)=[{&(0x7f000000e900)=""/4096, 0x1000}, {&(0x7f000000f900)=""/71, 0x47}, {&(0x7f000000f980)=""/4096, 0x1000}, {&(0x7f0000010980)=""/4096, 0x1000}, {&(0x7f0000011980)=""/13, 0xd}], 0x5, &(0x7f0000011a40)=""/67, 0x43}, 0xffffffff}, {{&(0x7f0000011ac0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000012b80)=[{&(0x7f0000011b40)=""/4096, 0x1000}, {&(0x7f0000012b40)=""/7, 0x7}], 0x2, &(0x7f0000012bc0)=""/244, 0xf4}}], 0x3, 0x40000003, 0x0) sendmsg$can_j1939(r0, &(0x7f0000012ec0)={&(0x7f0000012d80)={0x1d, r1, 0x10000, {0x0, 0x0, 0x1}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000012dc0)="4151caf615a28f385df4928ffe21a250efe0832b82ac93ad4b230acd0de2c839f669d2240062b66db7c291e42846fdefb0fbdd62dac28c8ff68f457eef62bf36d5cbdbace6be2f38d7c99938ad406f8006884df594a559de1d734dd1ebe6dd2b378719897808152d7e5e6ac7b2eb04ca1d13a4686da77b462e25be2b282a9e9cf2576c35a685310d33b599c91c8655e020a187f0a0ecc35fd1664f949350aea86a24e66a229179a8", 0xa8}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xf, 0x6, 0x1f, 0xd0b, 0x4, r0, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000180)=0x5) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) connect$can_j1939(r5, &(0x7f0000000300)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040)=0x80000000, 0x1d) 08:36:44 executing program 3 (fault-call:0 fault-nth:5): clock_gettime(0x2, &(0x7f0000000400)) 08:36:44 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:44 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) [ 3470.263831][T10730] usb 5-1: USB disconnect, device number 61 [ 3470.352675][T19835] FAULT_INJECTION: forcing a failure. [ 3470.352675][T19835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:36:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) [ 3470.451178][T19835] CPU: 0 PID: 19835 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3470.459727][T19835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3470.469891][T19835] Call Trace: [ 3470.473366][T19835] dump_stack_lvl+0x1d3/0x29f [ 3470.478259][T19835] ? show_regs_print_info+0x12/0x12 [ 3470.483478][T19835] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3470.489216][T19835] ? __fs_reclaim_acquire+0x30/0x30 [ 3470.494454][T19835] should_fail+0x384/0x4b0 08:36:45 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:36:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/230) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x1, {0x1, 0x1, 0x2}, 0x1}, 0x8) [ 3470.498982][T19835] prepare_alloc_pages+0x1d1/0x5a0 [ 3470.504212][T19835] __alloc_pages+0x14d/0x5f0 [ 3470.508838][T19835] ? __rmqueue_pcplist+0x2030/0x2030 [ 3470.514232][T19835] ? rcu_read_lock_sched_held+0x87/0x110 [ 3470.519892][T19835] ? alloc_pages+0x2e5/0x520 [ 3470.524534][T19835] pte_alloc_one+0x7f/0x320 [ 3470.529322][T19835] ? asan.module_ctor+0x10/0x10 [ 3470.534195][T19835] ? __rmqueue_pcplist+0x2030/0x2030 [ 3470.539701][T19835] __pte_alloc+0x75/0x210 [ 3470.544146][T19835] ? free_pgtables+0x2d0/0x2d0 [ 3470.548934][T19835] ? alloc_pages_vma+0x9f6/0xe70 [ 3470.553899][T19835] do_anonymous_page+0xf31/0x14a0 [ 3470.558968][T19835] ? fault_around_bytes_set+0xb0/0xb0 [ 3470.564377][T19835] handle_mm_fault+0x19cd/0x2640 [ 3470.569459][T19835] ? finish_fault+0x670/0x670 [ 3470.574263][T19835] ? __init_rwsem+0x160/0x160 [ 3470.579053][T19835] ? vmacache_find+0x4ef/0x5d0 [ 3470.583934][T19835] do_user_addr_fault+0x8ce/0x1120 [ 3470.589204][T19835] exc_page_fault+0xa1/0x1e0 [ 3470.593908][T19835] asm_exc_page_fault+0x1e/0x30 [ 3470.598795][T19835] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3470.605152][T19835] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3470.625996][T19835] RSP: 0018:ffffc9000a4efd88 EFLAGS: 00010202 [ 3470.632090][T19835] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3470.640077][T19835] RDX: 0000000000000000 RSI: ffffc9000a4efe00 RDI: 0000000020000400 [ 3470.648066][T19835] RBP: ffffc9000a4efe70 R08: 0000000000000000 R09: fffff5200149dfc2 [ 3470.656053][T19835] R10: fffff5200149dfc2 R11: 0000000000000000 R12: 0000000000000010 [ 3470.664044][T19835] R13: 00007ffffffff000 R14: ffffc9000a4efe00 R15: 0000000020000400 [ 3470.672047][T19835] ? _copy_to_user+0xb1/0x130 [ 3470.676750][T19835] _copy_to_user+0xef/0x130 [ 3470.681276][T19835] put_timespec64+0xf6/0x150 [ 3470.685877][T19835] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3470.691282][T19835] ? get_timespec64+0x250/0x250 [ 3470.696151][T19835] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 08:36:45 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000040)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/124) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 3470.702165][T19835] __x64_sys_clock_gettime+0x1b8/0x220 [ 3470.707636][T19835] ? __ia32_sys_clock_settime+0x240/0x240 [ 3470.713459][T19835] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3470.719712][T19835] ? lockdep_hardirqs_on+0x8d/0x130 [ 3470.724930][T19835] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3470.730919][T19835] do_syscall_64+0x3d/0xb0 [ 3470.735352][T19835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3470.741268][T19835] RIP: 0033:0x4665d9 [ 3470.745179][T19835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3470.764894][T19835] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3470.773415][T19835] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3470.781405][T19835] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3470.789395][T19835] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3470.797384][T19835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3470.805451][T19835] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000000c0)=0x7fffffff, 0x4) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={0x0, 0x3}) recvmsg$can_j1939(r0, &(0x7f0000008f00)={&(0x7f0000008740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000008d40)=[{&(0x7f00000087c0)=""/122, 0x7a}, {&(0x7f0000008840)=""/121, 0x79}, {&(0x7f00000088c0)=""/175, 0xaf}, {&(0x7f0000008980)=""/158, 0x9e}, {&(0x7f0000008a40)=""/242, 0xf2}, {&(0x7f0000008b40)=""/167, 0xa7}, {&(0x7f0000008c00)=""/48, 0x30}, {&(0x7f0000008c40)=""/78, 0x4e}, {&(0x7f0000000040)=""/70, 0x46}], 0x6, &(0x7f0000008e00)=""/194, 0xc2}, 0x20010102) sendmsg$can_j1939(r1, &(0x7f0000009040)={&(0x7f0000008f40)={0x1d, r3, 0x0, {0x1, 0x0, 0x3}, 0xfd}, 0x18, &(0x7f0000009000)={&(0x7f0000008f80)="37570063e4a1d2aa65eca95a0945e43c0e0a543846de48a364d9262078ead01ec88a521b80e5da1370132b2031b5c70c769c4fecfb66d903769ca53586895711c3e3", 0x42}, 0x1, 0x0, 0x0, 0x47d197c848956836}, 0x4004000) 08:36:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) [ 3470.975854][T11861] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3471.085030][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3471.092337][ T9672] ath9k_htc: Failed to initialize the device [ 3471.105578][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3471.485157][T10730] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3471.575374][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3471.584544][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.593545][T11861] usb 3-1: Product: syz [ 3471.598316][T11861] usb 3-1: Manufacturer: syz [ 3471.602933][T11861] usb 3-1: SerialNumber: syz [ 3471.646249][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3472.095189][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3472.104778][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3472.114698][T10730] usb 5-1: Product: syz [ 3472.119448][T10730] usb 5-1: Manufacturer: syz [ 3472.124167][T10730] usb 5-1: SerialNumber: syz [ 3472.175854][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3472.225474][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3472.456463][T10730] usb 3-1: USB disconnect, device number 31 [ 3472.815142][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:47 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:36:47 executing program 3 (fault-call:0 fault-nth:6): clock_gettime(0x2, &(0x7f0000000400)) 08:36:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) clock_gettime(0x2, &(0x7f0000000400)) 08:36:47 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x25, 0x6, 0x8, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000040)=0xfffffffffffffcad) 08:36:47 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3473.041539][ T9672] usb 5-1: USB disconnect, device number 62 [ 3473.128248][T19900] FAULT_INJECTION: forcing a failure. [ 3473.128248][T19900] name failslab, interval 1, probability 0, space 0, times 0 08:36:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x2, &(0x7f0000000400)) [ 3473.212728][T19900] CPU: 1 PID: 19900 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3473.221293][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3473.231363][T19900] Call Trace: [ 3473.234661][T19900] dump_stack_lvl+0x1d3/0x29f [ 3473.239544][T19900] ? show_regs_print_info+0x12/0x12 [ 3473.244891][T19900] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3473.245175][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3473.250625][T19900] ? __fs_reclaim_acquire+0x30/0x30 [ 3473.262693][T19900] ? __might_sleep+0x100/0x100 [ 3473.267480][T19900] ? __alloc_pages+0x2fd/0x5f0 [ 3473.272270][T19900] should_fail+0x384/0x4b0 [ 3473.276793][T19900] ? ptlock_alloc+0x1c/0x60 [ 3473.281412][T19900] should_failslab+0x5/0x20 [ 3473.285318][T11861] ath9k_htc: Failed to initialize the device [ 3473.286100][T19900] kmem_cache_alloc+0x6b/0x340 [ 3473.296880][T19900] ptlock_alloc+0x1c/0x60 [ 3473.301233][T19900] pte_alloc_one+0xc3/0x320 [ 3473.305759][T19900] ? asan.module_ctor+0x10/0x10 [ 3473.310627][T19900] ? __rmqueue_pcplist+0x2030/0x2030 [ 3473.315938][T19900] __pte_alloc+0x75/0x210 [ 3473.320281][T19900] ? free_pgtables+0x2d0/0x2d0 [ 3473.325039][T19900] ? alloc_pages_vma+0x9f6/0xe70 [ 3473.329976][T19900] do_anonymous_page+0xf31/0x14a0 [ 3473.334997][T19900] ? fault_around_bytes_set+0xb0/0xb0 [ 3473.340369][T19900] handle_mm_fault+0x19cd/0x2640 [ 3473.345399][T19900] ? finish_fault+0x670/0x670 [ 3473.350071][T19900] ? __init_rwsem+0x160/0x160 [ 3473.354733][T19900] ? vmacache_find+0x4ef/0x5d0 [ 3473.359499][T19900] do_user_addr_fault+0x8ce/0x1120 [ 3473.364625][T19900] exc_page_fault+0xa1/0x1e0 [ 3473.369308][T19900] asm_exc_page_fault+0x1e/0x30 [ 3473.374159][T19900] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3473.380477][T19900] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3473.400090][T19900] RSP: 0018:ffffc9000acffd88 EFLAGS: 00010202 [ 3473.406146][T19900] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3473.414197][T19900] RDX: 0000000000000000 RSI: ffffc9000acffe00 RDI: 0000000020000400 [ 3473.422244][T19900] RBP: ffffc9000acffe70 R08: 0000000000000000 R09: fffff5200159ffc2 [ 3473.430285][T19900] R10: fffff5200159ffc2 R11: 0000000000000000 R12: 0000000000000010 [ 3473.438248][T19900] R13: 00007ffffffff000 R14: ffffc9000acffe00 R15: 0000000020000400 [ 3473.446316][T19900] ? _copy_to_user+0xb1/0x130 [ 3473.450987][T19900] _copy_to_user+0xef/0x130 [ 3473.455479][T19900] put_timespec64+0xf6/0x150 [ 3473.460081][T19900] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3473.465455][T19900] ? get_timespec64+0x250/0x250 [ 3473.470297][T19900] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3473.476286][T19900] __x64_sys_clock_gettime+0x1b8/0x220 [ 3473.481729][T19900] ? __ia32_sys_clock_settime+0x240/0x240 [ 3473.487440][T19900] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3473.493405][T19900] ? lockdep_hardirqs_on+0x8d/0x130 [ 3473.498589][T19900] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3473.504726][T19900] do_syscall_64+0x3d/0xb0 [ 3473.509230][T19900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3473.515106][T19900] RIP: 0033:0x4665d9 [ 3473.518999][T19900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3473.538760][T19900] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3473.547158][T19900] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3473.555112][T19900] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 08:36:48 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) [ 3473.563084][T19900] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3473.571036][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3473.578998][T19900] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3473.589366][T10730] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:48 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) clock_gettime(0x2, &(0x7f0000000400)) 08:36:48 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) 08:36:48 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) clock_gettime(0x2, &(0x7f0000000400)) 08:36:48 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x800) socketpair(0x18, 0x1, 0x2, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r1, &(0x7f0000002ec0)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001a40)=""/197, 0xc5}, {&(0x7f0000001b40)=""/240, 0x5b}, {&(0x7f0000001c40)=""/70, 0x46}, {&(0x7f0000001cc0)=""/79, 0x4f}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/13, 0xd}], 0x7}, 0x40010020) sendto$rose(r1, &(0x7f0000000100)="3a0c41317d001d8453eda78f4606ee170dade561b6b8954c6df6b6ffeb725ac2b6cbe2965016861ebc2682c62e11b1fbc949d979b20a58", 0x37, 0x8000, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x111180, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x9) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3473.885031][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3473.896758][ T9675] ath9k_htc: Failed to initialize the device [ 3473.904495][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3473.995313][T10730] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3474.315197][ T9672] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3474.615603][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3474.624838][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3474.633487][T10730] usb 3-1: Product: syz [ 3474.638601][T10730] usb 3-1: Manufacturer: syz [ 3474.643221][T10730] usb 3-1: SerialNumber: syz [ 3474.692329][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3474.926829][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3474.936111][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3474.944132][ T9672] usb 5-1: Product: syz [ 3474.948986][ T9672] usb 5-1: Manufacturer: syz [ 3474.953607][ T9672] usb 5-1: SerialNumber: syz [ 3475.006846][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3475.305146][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3475.523494][ T9675] usb 3-1: USB disconnect, device number 32 [ 3475.615240][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:50 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) 08:36:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) clock_gettime(0x2, &(0x7f0000000400)) 08:36:50 executing program 3 (fault-call:0 fault-nth:7): clock_gettime(0x2, &(0x7f0000000400)) 08:36:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/61) 08:36:50 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3475.840428][ T9588] usb 5-1: USB disconnect, device number 63 [ 3475.923147][T19981] FAULT_INJECTION: forcing a failure. [ 3475.923147][T19981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:36:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/192) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @bcast}, 0x1c) 08:36:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) [ 3476.037150][T19981] CPU: 1 PID: 19981 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3476.046223][T19981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3476.056292][T19981] Call Trace: [ 3476.059588][T19981] dump_stack_lvl+0x1d3/0x29f [ 3476.064292][T19981] ? show_regs_print_info+0x12/0x12 [ 3476.069517][T19981] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3476.075291][T19981] ? __fs_reclaim_acquire+0x30/0x30 [ 3476.080508][T19981] ? rcu_read_lock_sched_held+0x87/0x110 [ 3476.086169][T19981] should_fail+0x384/0x4b0 [ 3476.090617][T19981] prepare_alloc_pages+0x1d1/0x5a0 [ 3476.095878][T19981] __alloc_pages+0x14d/0x5f0 [ 3476.100498][T19981] ? __rmqueue_pcplist+0x2030/0x2030 [ 3476.105995][T19981] ? _raw_spin_unlock+0x24/0x40 [ 3476.110876][T19981] ? __pte_alloc+0x1a4/0x210 [ 3476.115498][T19981] alloc_pages_vma+0x4e8/0xe70 [ 3476.120282][T19981] do_anonymous_page+0x31b/0x14a0 [ 3476.125306][T19981] ? fault_around_bytes_set+0xb0/0xb0 [ 3476.130767][T19981] handle_mm_fault+0x19cd/0x2640 [ 3476.135744][T19981] ? finish_fault+0x670/0x670 [ 3476.140720][T19981] ? __init_rwsem+0x160/0x160 [ 3476.145388][T19981] ? vmacache_find+0x4ef/0x5d0 [ 3476.150144][T19981] do_user_addr_fault+0x8ce/0x1120 [ 3476.155250][T19981] exc_page_fault+0xa1/0x1e0 [ 3476.159867][T19981] asm_exc_page_fault+0x1e/0x30 [ 3476.164733][T19981] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3476.171079][T19981] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3476.190794][T19981] RSP: 0018:ffffc9000af3fd88 EFLAGS: 00010202 [ 3476.196858][T19981] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3476.204826][T19981] RDX: 0000000000000000 RSI: ffffc9000af3fe00 RDI: 0000000020000400 [ 3476.212806][T19981] RBP: ffffc9000af3fe70 R08: 0000000000000000 R09: fffff520015e7fc2 [ 3476.220858][T19981] R10: fffff520015e7fc2 R11: 0000000000000000 R12: 0000000000000010 [ 3476.228817][T19981] R13: 00007ffffffff000 R14: ffffc9000af3fe00 R15: 0000000020000400 [ 3476.236787][T19981] ? _copy_to_user+0xb1/0x130 [ 3476.241461][T19981] _copy_to_user+0xef/0x130 [ 3476.245951][T19981] put_timespec64+0xf6/0x150 [ 3476.250528][T19981] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3476.255800][T19981] ? get_timespec64+0x250/0x250 [ 3476.260637][T19981] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3476.266612][T19981] __x64_sys_clock_gettime+0x1b8/0x220 [ 3476.272058][T19981] ? __ia32_sys_clock_settime+0x240/0x240 [ 3476.277762][T19981] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3476.284162][T19981] ? lockdep_hardirqs_on+0x8d/0x130 [ 3476.289435][T19981] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3476.295566][T19981] do_syscall_64+0x3d/0xb0 [ 3476.299992][T19981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3476.305965][T19981] RIP: 0033:0x4665d9 [ 3476.309963][T19981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3476.329735][T19981] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3476.338576][T19981] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3476.346550][T19981] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3476.354505][T19981] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3476.362476][T19981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3476.370434][T19981] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) clock_gettime(0x2, &(0x7f0000000400)) [ 3476.383658][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3476.401621][T10730] ath9k_htc: Failed to initialize the device 08:36:51 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) [ 3476.457915][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000640)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/243, 0xf3}], 0x6, &(0x7f0000000540)=""/221, 0xdd}, 0x2160) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:51 executing program 1: clock_gettime(0x2, &(0x7f0000000400)) [ 3476.695110][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3476.702626][ T9672] ath9k_htc: Failed to initialize the device [ 3476.710224][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3476.865151][ T9675] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3477.105097][ T9588] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3477.465642][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3477.474729][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3477.483904][ T9675] usb 3-1: Product: syz [ 3477.488840][ T9675] usb 3-1: Manufacturer: syz [ 3477.493494][ T9675] usb 3-1: SerialNumber: syz [ 3477.536303][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3477.675267][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3477.684520][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3477.694807][ T9588] usb 5-1: Product: syz [ 3477.699560][ T9588] usb 5-1: Manufacturer: syz [ 3477.704167][ T9588] usb 5-1: SerialNumber: syz [ 3477.756325][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3478.165144][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3478.375202][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3478.392255][T11033] usb 3-1: USB disconnect, device number 33 08:36:53 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:53 executing program 3 (fault-call:0 fault-nth:8): clock_gettime(0x2, &(0x7f0000000400)) 08:36:53 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1a, 0x1, 0x7, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1d, 0x6, 0x2, &(0x7f0000000200)) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0xfffffe76) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xb0000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) socket$kcm(0x29, 0x5, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1}, 0x100) 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 08:36:53 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:53 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3478.613102][T11861] usb 5-1: USB disconnect, device number 64 [ 3478.702220][T20057] FAULT_INJECTION: forcing a failure. [ 3478.702220][T20057] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:36:53 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) [ 3478.828030][T20057] CPU: 0 PID: 20057 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3478.836508][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3478.846842][T20057] Call Trace: [ 3478.850129][T20057] dump_stack_lvl+0x1d3/0x29f [ 3478.854833][T20057] ? show_regs_print_info+0x12/0x12 [ 3478.860132][T20057] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3478.865873][T20057] ? __might_fault+0xb8/0x110 [ 3478.870581][T20057] ? snprintf+0xc0/0x110 [ 3478.874847][T20057] should_fail+0x384/0x4b0 [ 3478.879369][T20057] _copy_to_user+0x2d/0x130 [ 3478.883991][T20057] simple_read_from_buffer+0xd9/0x160 [ 3478.889475][T20057] proc_fail_nth_read+0x195/0x210 [ 3478.894612][T20057] ? proc_fault_inject_write+0x370/0x370 [ 3478.900388][T20057] ? __mutex_lock_common+0x570/0x3770 [ 3478.905785][T20057] ? rw_verify_area+0x1b8/0x370 [ 3478.910807][T20057] ? fsnotify_perm+0x2fd/0x4d0 [ 3478.915579][T20057] ? proc_fault_inject_write+0x370/0x370 [ 3478.921238][T20057] vfs_read+0x294/0xc20 [ 3478.925412][T20057] ? rcu_lock_release+0x9/0x20 [ 3478.930186][T20057] ? __lock_acquire+0x6100/0x6100 [ 3478.935269][T20057] ? kernel_read+0x70/0x70 [ 3478.939734][T20057] ? __fget_files+0x34f/0x380 [ 3478.944530][T20057] ? mutex_lock_nested+0x1a/0x20 [ 3478.949577][T20057] ? __fdget_pos+0x24e/0x2f0 [ 3478.954195][T20057] ? ksys_read+0x72/0x2a0 [ 3478.958549][T20057] ksys_read+0x171/0x2a0 [ 3478.962806][T20057] ? vfs_write+0xc90/0xc90 [ 3478.967407][T20057] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3478.973490][T20057] ? lockdep_hardirqs_on+0x8d/0x130 08:36:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0xff, 0x5, 0x20, 0x83, 0xff, "4f9bff2252cd6a4989de992c8c14b451a001ed", 0xfffff800, 0xfffffffd}) 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) [ 3478.978812][T20057] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3478.985870][T20057] do_syscall_64+0x3d/0xb0 [ 3478.990407][T20057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3478.996401][T20057] RIP: 0033:0x41935c [ 3479.000404][T20057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3479.020024][T20057] RSP: 002b:00007f7b60ac9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3479.028469][T20057] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 3479.036463][T20057] RDX: 000000000000000f RSI: 00007f7b60ac91e0 RDI: 0000000000000003 [ 3479.044454][T20057] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3479.052489][T20057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3479.060476][T20057] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) 08:36:53 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) [ 3479.245172][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3479.253169][ T9675] ath9k_htc: Failed to initialize the device [ 3479.261441][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3479.405147][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3479.412703][ T9588] ath9k_htc: Failed to initialize the device [ 3479.420867][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3479.645235][T11033] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3479.795016][T11861] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3480.165400][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3480.175435][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3480.184103][T11033] usb 3-1: Product: syz [ 3480.190498][T11033] usb 3-1: Manufacturer: syz [ 3480.196082][T11033] usb 3-1: SerialNumber: syz [ 3480.246105][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3480.315452][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3480.324578][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3480.336625][T11861] usb 5-1: Product: syz [ 3480.340812][T11861] usb 5-1: Manufacturer: syz [ 3480.346706][T11861] usb 5-1: SerialNumber: syz [ 3480.386202][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3480.815399][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3480.955157][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3481.031807][T12454] usb 3-1: USB disconnect, device number 34 08:36:55 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:55 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @hci={0x1f, 0x1, 0x3}, @generic={0x5, "29a79dcf05763f403fdddbbc9593"}, @l2tp={0x2, 0x0, @empty, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x5, 0x800}) 08:36:55 executing program 0: accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) 08:36:55 executing program 3: clock_gettime(0x3, &(0x7f0000000400)) 08:36:55 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3481.170869][ T9613] usb 5-1: USB disconnect, device number 65 08:36:55 executing program 1: clock_gettime(0x2, 0x0) 08:36:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 08:36:55 executing program 3: clock_gettime(0x4, &(0x7f0000000400)) 08:36:55 executing program 0: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) 08:36:56 executing program 1: clock_gettime(0x2, 0x0) 08:36:56 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3481.885113][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3481.892204][T11033] ath9k_htc: Failed to initialize the device [ 3481.901015][T12454] usb 3-1: ath9k_htc: USB layer deinitialized [ 3482.045039][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3482.052270][T11861] ath9k_htc: Failed to initialize the device [ 3482.060081][ T9613] usb 5-1: ath9k_htc: USB layer deinitialized [ 3482.255078][T12454] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3482.425051][ T9613] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3482.775305][T12454] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3482.784804][T12454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3482.795808][T12454] usb 3-1: Product: syz [ 3482.799994][T12454] usb 3-1: Manufacturer: syz [ 3482.804595][T12454] usb 3-1: SerialNumber: syz [ 3482.856092][T12454] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3482.955461][ T9613] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3482.964604][ T9613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3482.974486][ T9613] usb 5-1: Product: syz [ 3482.979239][ T9613] usb 5-1: Manufacturer: syz [ 3482.983878][ T9613] usb 5-1: SerialNumber: syz [ 3483.026227][ T9613] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3483.425128][T12454] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3483.595177][ T9613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3483.646704][ T9675] usb 3-1: USB disconnect, device number 35 08:36:58 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0x0, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:58 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x2001, 0x1}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:58 executing program 3: clock_gettime(0xa, &(0x7f0000000400)) 08:36:58 executing program 1: clock_gettime(0x2, 0x0) 08:36:58 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3483.811657][ T9672] usb 5-1: USB disconnect, device number 66 08:36:58 executing program 3: clock_gettime(0xb, &(0x7f0000000400)) 08:36:58 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x50, 0x6a, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)) 08:36:58 executing program 3: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000111420002cbd70ebfbdbdf2508004a00000ccf380000000800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 08:36:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @rc={0x1f, @any, 0x8}, @hci={0x1f, 0x1, 0x3}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x1, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000000)='syzkaller1\x00', 0xffff, 0x1, 0x8}) 08:36:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r1, &(0x7f0000002900)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/127, 0x7f}], 0x4, &(0x7f0000001280)=""/73, 0x49}, 0x1}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001300)=""/58, 0x3a}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/30, 0x1e}, {&(0x7f0000002380)=""/173, 0xad}, {&(0x7f0000002440)=""/235, 0xeb}, {&(0x7f0000002540)=""/228, 0xe4}, {&(0x7f0000002640)=""/120, 0x78}, {&(0x7f00000026c0)=""/253, 0xfd}, {&(0x7f00000027c0)=""/57, 0x39}], 0x9, &(0x7f00000028c0)=""/36, 0x24}, 0x7}], 0x2, 0x40010002, &(0x7f0000002980)={0x77359400}) 08:36:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x834a, 0x2a8502) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x54, 0x3, 0x8001, {0x9, 0x80}, {0x1, 0x4}, @const={0x0, {0x2750, 0x5, 0x3, 0x5f6}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa52280, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x3, &(0x7f0000000140)={[0x40]}, 0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x20002, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000280)=""/142) write$smackfs_cipso(r2, &(0x7f0000000200)={'/dev/vsock\x00', 0x20, 0x64, 0x20, 0x1, 0x20, [{0x9e}]}, 0x4c) clock_gettime(0x2, &(0x7f0000000400)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000001c0)={0x2}) 08:36:58 executing program 3: clock_gettime(0x2, &(0x7f00000000c0)) r0 = fork() clock_gettime(0x1, &(0x7f0000000040)) r1 = fork() getpgrp(r1) syz_open_procfs$namespace(r1, &(0x7f00000032c0)='ns/time\x00') r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') r3 = fork() getpgrp(r3) syz_open_procfs$namespace(r3, &(0x7f00000032c0)='ns/time\x00') getpgrp(r1) r4 = syz_open_procfs$namespace(r0, &(0x7f00000032c0)='ns/time\x00') r5 = fork() getpgrp(r5) syz_open_procfs$namespace(r5, &(0x7f00000032c0)='ns/time\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x429a, 0x0, 0x4a03d42f8031e8ca}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r5, 0x7, r4, &(0x7f0000000000)={0xffffffffffffffff, r6, 0xffffffff}) [ 3484.445185][T12454] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3484.453579][T12454] ath9k_htc: Failed to initialize the device [ 3484.461843][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3484.685273][ T9613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3484.692352][ T9613] ath9k_htc: Failed to initialize the device [ 3484.700736][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3484.875371][ T9675] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3485.095479][ T9672] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3485.425202][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3485.434560][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3485.443407][ T9675] usb 3-1: Product: syz [ 3485.448420][ T9675] usb 3-1: Manufacturer: syz [ 3485.454105][ T9675] usb 3-1: SerialNumber: syz [ 3485.505829][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3485.635742][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3485.644822][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3485.656167][ T9672] usb 5-1: Product: syz [ 3485.660354][ T9672] usb 5-1: Manufacturer: syz [ 3485.667378][ T9672] usb 5-1: SerialNumber: syz [ 3485.728009][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3486.155305][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3486.375740][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3486.382139][T11033] usb 3-1: USB disconnect, device number 36 08:37:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000040)) 08:37:01 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0x0, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0xffffffffffffff10) 08:37:01 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3486.592780][T10730] usb 5-1: USB disconnect, device number 67 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) 08:37:01 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) 08:37:01 executing program 3: clock_gettime(0x0, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001840)={0x10000001}) clock_gettime(0x0, &(0x7f0000003b80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/53, 0x35}], 0x6, &(0x7f00000004c0)=""/8, 0x8}, 0x10001}, {{&(0x7f0000000500)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/152, 0x98}, {&(0x7f00000016c0)=""/145, 0x91}, {&(0x7f0000001780)=""/192, 0xc0}, {&(0x7f0000001840)}], 0x6, &(0x7f0000001900)=""/151, 0x97}, 0xff}, {{&(0x7f00000019c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/14, 0xe}], 0x2, &(0x7f0000002ac0)=""/4096, 0x1000}, 0x1}], 0x3, 0x40000000, &(0x7f0000003bc0)={r1, r2+60000000}) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x1, {0x2, 0xf1, 0x1}, {}, 0xfd, 0xfd}, {0x3, 0x2, {0x0, 0x3, 0x4}, {0x2, 0x0, 0x1}, 0x2, 0xfe}, {0xfffffffffffffffe, 0x3, {0x1, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0x1fe, 0xfd}], 0x60) 08:37:01 executing program 3: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x7f, 0x602f0f3d, 0x6000}) clock_gettime(0x2, &(0x7f0000000000)) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f00000003c0)=""/15, 0xf}], 0x5}, 0x40000021) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000000)=0x26) r1 = socket(0x21, 0x5, 0x6) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:01 executing program 3: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x30000015}) clock_gettime(0x2, &(0x7f0000000400)) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:01 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/126, 0x7e}], 0x1, &(0x7f0000000140)=""/225, 0xe1}, 0x5}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f00000003c0)}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x7, &(0x7f0000001700)=""/106, 0x6a}}], 0x2, 0x1, &(0x7f0000001800)={0x0, 0x989680}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x356732434e80de53, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) recvmmsg(r2, &(0x7f0000001e80)=[{{&(0x7f0000001b40)=@xdp, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001900)=""/13, 0xd}, {&(0x7f0000001bc0)=""/249, 0xf9}, {&(0x7f0000001cc0)=""/219, 0xdb}], 0x3, &(0x7f0000001e00)=""/79, 0x4f}, 0x40}], 0x1, 0x2142, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000001840)=""/136) write$smackfs_cipso(r0, &(0x7f0000001940)=ANY=[@ANYBLOB="5c292f405e7b21232d3a28255e5c203030303030303030303030303030303030313820303030303030303030303030303030303030303820303030303030303030303230263030303030303030303030303031353020303030303030303030303030303030303031363020304ed61f8a2a8b8835e9c03030303030303030303030303030303031340900000000000000303030303038303030303031333020303030303030303030303030303030303030363120305d41b803b2c90e4430303030303030303030382030303030303030303030303030453030303032312000"/236], 0xe2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000001a40)=""/208) [ 3487.255141][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3487.262116][ T9675] ath9k_htc: Failed to initialize the device [ 3487.276559][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3487.496553][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3487.504292][ T9672] ath9k_htc: Failed to initialize the device [ 3487.512306][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3487.635170][T11033] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3487.885188][T10730] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3488.155286][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3488.164489][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3488.179158][T11033] usb 3-1: Product: syz [ 3488.183384][T11033] usb 3-1: Manufacturer: syz [ 3488.189681][T11033] usb 3-1: SerialNumber: syz [ 3488.241305][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3488.455461][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3488.464600][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3488.474378][T10730] usb 5-1: Product: syz [ 3488.480114][T10730] usb 5-1: Manufacturer: syz [ 3488.486284][T10730] usb 5-1: SerialNumber: syz [ 3488.546151][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3488.815242][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3489.032326][T11033] usb 3-1: USB disconnect, device number 37 [ 3489.195135][T10730] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:04 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0x0, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)={0xfffffffc, 0x2, 0x4, 0x1000, 0x10000, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x80, 0x47, 0x3, "88e3d160"}, 0x3, 0x3, @planes=&(0x7f00000000c0)={0x100, 0x4, @userptr=0x6, 0x400}, 0x2, 0x0, r3}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={r1, 0x1}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000040)) 08:37:04 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:04 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x0, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3489.413360][ T9675] usb 5-1: USB disconnect, device number 68 08:37:04 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1412, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80e0}, 0x4040) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000000)) r4 = socket(0x9, 0xa, 0x9) ioctl$SIOCRSACCEPT(r4, 0x89e3) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x140041, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000200)={0x7, 0x1f, 0x2, 0x4000, r5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x81, 0x0, 0x10000}) 08:37:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:04 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:37:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000003500)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/40, 0x28}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/90, 0x5a}], 0x5}}, {{&(0x7f00000007c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/51, 0x33}, {&(0x7f0000000880)=""/21, 0x15}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/85, 0x55}, {&(0x7f0000000a00)=""/10, 0xa}], 0x5, &(0x7f0000000ac0)=""/238, 0xee}, 0xe7a}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/212, 0xd4}, {&(0x7f0000000cc0)=""/48, 0x30}], 0x2, &(0x7f0000000d40)=""/111, 0x6f}, 0x8}, {{&(0x7f0000000dc0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e40)=""/157, 0x9d}, {&(0x7f0000000f00)=""/50, 0x32}, {&(0x7f0000000f40)=""/169, 0xa9}], 0x3}, 0x8}, {{&(0x7f0000001040)=@sco, 0x80, &(0x7f0000001340)=[{&(0x7f00000010c0)=""/183, 0xb7}, {&(0x7f0000001180)=""/189, 0xbd}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/186, 0xba}], 0x4, &(0x7f0000001380)=""/45, 0x2d}, 0x7fff}, {{&(0x7f00000013c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001440)=""/213, 0xd5}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001600)=""/19, 0x13}, {&(0x7f0000001640)=""/203, 0xcb}], 0x4, &(0x7f0000001780)=""/42, 0x2a}, 0x1}, {{&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/55, 0x37}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/234, 0xea}], 0x4}}, {{&(0x7f0000002ac0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002b40)=""/192, 0xc0}, {&(0x7f0000002c00)=""/68, 0x44}, {&(0x7f0000002c80)=""/197, 0xc5}, {&(0x7f0000002d80)=""/176, 0xb0}, {&(0x7f0000002e40)=""/129, 0x81}, {&(0x7f0000002f00)=""/131, 0x83}, {&(0x7f0000002fc0)=""/164, 0xa4}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003100)=""/190, 0xbe}], 0x1, &(0x7f0000003200)=""/155, 0x9b}, 0x80000000}], 0x9, 0x43, &(0x7f0000003540)={r1, r2+60000000}) recvmmsg(r0, &(0x7f0000007100)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/141, 0x8d}], 0x4, &(0x7f0000000240)=""/237, 0xed}, 0xa03e}, {{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000006900)=[{&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/79, 0x4f}, {&(0x7f0000001240)=""/25, 0x19}, {&(0x7f0000005740)=""/209, 0xd1}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/174, 0xae}], 0x7, &(0x7f0000006980)=""/173, 0xad}, 0xfffffffb}, {{&(0x7f0000006a40)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006ac0)=""/251, 0xfb}, {&(0x7f0000006bc0)=""/142, 0x8e}, {&(0x7f0000006c80)=""/147, 0x93}, {&(0x7f0000006d40)=""/125, 0x7d}, {&(0x7f0000006dc0)=""/13, 0xd}, {&(0x7f0000006e00)=""/97, 0x61}, {&(0x7f0000006e80)=""/228, 0xe4}], 0x7, &(0x7f0000007000)=""/199, 0xc7}, 0x3}], 0x3, 0x60000140, &(0x7f00000071c0)={0x77359400}) sendmsg$can_j1939(r0, &(0x7f0000003680)={&(0x7f0000003580)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0xfe}, 0x18, &(0x7f0000003640)={&(0x7f00000035c0)="0a8fa4003b67e2500df12dda90f44e01c7e75f4a515594632e5382e4a6a4050106cafff5f8d8b4b553bb48c980999660b2065e8dc226ebadd7aa6114721d861915e355d99005e72689555f9bf53c30fe02", 0x51}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3489.895201][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3489.912654][ T9613] ath9k_htc: Failed to initialize the device 08:37:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x6, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000040)) [ 3489.950607][T11033] usb 3-1: ath9k_htc: USB layer deinitialized 08:37:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3490.145516][T12454] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3490.291296][T10730] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3490.305700][T10730] ath9k_htc: Failed to initialize the device [ 3490.341661][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3490.357004][T11033] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3490.705154][ T9675] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3490.755562][T12454] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3490.764723][T12454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.775485][T12454] usb 1-1: Product: syz [ 3490.779677][T12454] usb 1-1: Manufacturer: syz [ 3490.784277][T12454] usb 1-1: SerialNumber: syz [ 3490.846464][T12454] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3490.945520][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3490.954593][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.964130][T11033] usb 3-1: Product: syz [ 3490.969198][T11033] usb 3-1: Manufacturer: syz [ 3490.973798][T11033] usb 3-1: SerialNumber: syz [ 3491.025941][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3491.235409][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3491.244472][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3491.261453][ T9675] usb 5-1: Product: syz [ 3491.267627][ T9675] usb 5-1: Manufacturer: syz [ 3491.272337][ T9675] usb 5-1: SerialNumber: syz [ 3491.333656][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3491.485240][T12454] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3491.655198][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3491.712820][ T9613] usb 1-1: USB disconnect, device number 81 [ 3491.876355][T11861] usb 3-1: USB disconnect, device number 38 [ 3491.955302][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:06 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:06 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x2}, 0xff}, 0x18) socketpair(0x21, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x1}}, 0x18) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r4 = accept4$rose(r2, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) 08:37:06 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) 08:37:06 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x37f683, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x2}) 08:37:06 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:06 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x0, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3492.167922][ T9757] usb 5-1: USB disconnect, device number 69 08:37:06 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7) 08:37:06 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) 08:37:07 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:07 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0x4}, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @llc={0x1a, 0x322, 0x6, 0x80, 0x9, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x2, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000000)='batadv0\x00', 0x8, 0x5, 0x8}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:07 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) 08:37:07 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) [ 3492.526112][T12454] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3492.536604][T12454] ath9k_htc: Failed to initialize the device [ 3492.564199][ T9613] usb 1-1: ath9k_htc: USB layer deinitialized [ 3492.685831][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3492.702765][T11033] ath9k_htc: Failed to initialize the device [ 3492.711306][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3493.005230][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3493.012581][ T9675] ath9k_htc: Failed to initialize the device [ 3493.020643][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3493.075185][T11861] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3493.385106][ T9757] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3493.655668][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3493.665199][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3493.673833][T11861] usb 3-1: Product: syz [ 3493.680171][T11861] usb 3-1: Manufacturer: syz [ 3493.684799][T11861] usb 3-1: SerialNumber: syz [ 3493.736214][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3493.945187][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3493.955251][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3493.963326][ T9757] usb 5-1: Product: syz [ 3493.969838][ T9757] usb 5-1: Manufacturer: syz [ 3493.974539][ T9757] usb 5-1: SerialNumber: syz [ 3494.015878][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3494.325181][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3494.552774][ T9675] usb 3-1: USB disconnect, device number 39 [ 3494.615095][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:09 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:09 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:09 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:09 executing program 3: clock_gettime(0x3, &(0x7f0000000400)) 08:37:09 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000000)) 08:37:09 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x0, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3494.831852][ T9588] usb 5-1: USB disconnect, device number 70 08:37:09 executing program 3: clock_gettime(0x3, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x0, 0x80001) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) accept4(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80, 0x80800) r1 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x800) sendmsg$kcm(r1, &(0x7f0000000dc0)={&(0x7f0000000300)=@generic={0x8, "ec40e0340c4099d36807018d1a46714d1f4ec74f200c7dc6dcfb7661e49ae748e20ae74dda61c2e20d3211bc563e44d0804160caf0466025d5e896e1ba7c3cd27931ea51c0549345ad2ecfbd937faa91ffffa3cee5d40daf820371133a06dc1495875fb6dad96f3866ee9f5cf9dab67f9633e55aa27d4d8c8486dee932fd"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="0bd0903a419c1d62b2320f3077c4a8129782ce8ff08f899e6375e9daea47a99810a0d494c927cd8688c5c3d6da43844adb1b555b8ff47e285886a327e35c0d8be8da411fdfbefe4e68bfcb64b6505cdb822d01578e4be1dd06801c83d696c1a3335e78", 0x63}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)}, {&(0x7f0000000540)="de96b6f4f85d1c51aa25e528947a88d8d5f42e4e6692e1064d285aea3c3e5a3423df3c258361b99309cef9dd0386d2cf134fd3b0dd50fba17c3211401c98c9711cc2295bde0279260b9daa467fb16655bd2aea3017d1bc7d4441b9fc45fe9f6af9b52ebea206225924a0c2636e096360bdcdb4d49a06198b2b6a62c7960db2fcb7c794d769ee250d8439b761c917ef9cf3f43770650eea5b14d8e8b1a37c10e14ef6d052e6917009b930f0d54107e70ad42da2166630f018df49b8d525add745640db68012bfb12913f11e780403e5523021e54632e047ad83d153bb24803553bb", 0xe1}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x730}, 0x42) socketpair(0x28, 0x4, 0x505, &(0x7f0000000100)) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000140)=0xd60) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000180)=""/140) 08:37:09 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x9, 0x9, 0x1, 0x5, 0xf0b, 0xfffffffe}) 08:37:09 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:09 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:09 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:09 executing program 3: clock_gettime(0x2, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)) 08:37:09 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0xebf, 0x2, 0x4, 0x1, 0x84, {0x0, 0x2710}, {0x5, 0x1, 0x4, 0x8, 0x0, 0x4, "32ce95ef"}, 0xcdf3, 0x3, @userptr=0x5, 0x1ff}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x100, 0x0, 0x4, 0x20, 0x101, {0x0, 0xea60}, {0x2, 0x1, 0x40, 0xfe, 0x6, 0x1, "13a9497a"}, 0xb2, 0x7, @userptr=0x1, 0x2000}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x20000) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000240)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = fork() getpgrp(r6) syz_open_procfs$namespace(r6, &(0x7f00000032c0)='ns/time\x00') syz_open_procfs$namespace(r6, &(0x7f0000000100)='ns/mnt\x00') ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r5}) [ 3495.405177][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3495.412207][T11033] ath9k_htc: Failed to initialize the device [ 3495.420378][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3495.646218][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3495.653242][ T9757] ath9k_htc: Failed to initialize the device [ 3495.661144][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3495.785039][ T9675] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3496.025832][ T9588] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3496.305234][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3496.314393][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.329128][ T9675] usb 3-1: Product: syz [ 3496.333301][ T9675] usb 3-1: Manufacturer: syz [ 3496.339607][ T9675] usb 3-1: SerialNumber: syz [ 3496.386062][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3496.555705][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3496.570617][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.578784][ T9588] usb 5-1: Product: syz [ 3496.583103][ T9588] usb 5-1: Manufacturer: syz [ 3496.593535][ T9588] usb 5-1: SerialNumber: syz [ 3496.635925][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3496.965293][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3497.181655][T10730] usb 3-1: USB disconnect, device number 40 [ 3497.215113][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:12 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:12 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:12 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:12 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/55, 0x37}, {&(0x7f00000000c0)=""/140, 0x8c}], 0x2, &(0x7f00000001c0)=""/210, 0xd2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/115, 0x73}], 0x3, &(0x7f0000000580)=""/124, 0x7c}, 0xd93}, {{&(0x7f0000000600)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/200, 0xc8}], 0x1, &(0x7f00000007c0)=""/77, 0x4d}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)=""/255, 0xff}, {&(0x7f0000000940)=""/33, 0x21}], 0x2, &(0x7f00000009c0)=""/137, 0x89}}, {{&(0x7f0000000a80)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b00)=""/140, 0x8c}, {&(0x7f0000000bc0)=""/94, 0x5e}, {&(0x7f0000000c40)=""/194, 0xc2}, {&(0x7f0000000d40)=""/7, 0x7}, {&(0x7f0000000d80)=""/170, 0xaa}, {&(0x7f0000000e40)=""/150, 0x96}, {&(0x7f0000000f00)=""/83, 0x53}, {&(0x7f0000000f80)=""/34, 0x22}], 0x8, &(0x7f0000001040)=""/191, 0xbf}}, {{&(0x7f0000001100)=@x25={0x9, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001180)=""/244, 0xf4}, {&(0x7f0000001280)=""/131, 0x83}], 0x2}, 0x1000}, {{&(0x7f0000001380)=@can, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/148, 0x94}], 0x1, &(0x7f0000001500)=""/9, 0x9}, 0x4}], 0x7, 0x2, &(0x7f0000001700)={0x77359400}) bind$can_j1939(r0, &(0x7f0000001740)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x3}, 0xff}, 0x18) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001780), 0x4) clock_gettime(0x2, &(0x7f0000000400)) 08:37:12 executing program 5: clock_gettime(0x0, &(0x7f0000006040)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005e00)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/159, 0x9f}], 0x4, &(0x7f0000000440)=""/187, 0xbb}, 0x47f}, {{&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/43, 0x2b}, {&(0x7f0000006100)=""/104, 0x68}, {&(0x7f0000000900)=""/152, 0x98}, {&(0x7f00000009c0)=""/100, 0x64}, {&(0x7f0000000a40)=""/115, 0x73}], 0x9, &(0x7f0000000b80)=""/219, 0xdb}, 0x1}, {{&(0x7f0000000c80)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/232, 0xe8}, {&(0x7f0000001e00)=""/97, 0x61}, {&(0x7f0000001e80)=""/147, 0x93}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/101, 0x65}, {&(0x7f0000002fc0)=""/211, 0xd3}], 0x7, &(0x7f0000003140)=""/109, 0x6d}, 0x6}, {{&(0x7f00000031c0)=@nfc_llcp, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003240)=""/127, 0x7f}], 0x1}, 0x2}, {{&(0x7f0000003300)=@generic, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003380)=""/209, 0xd1}, {&(0x7f0000003480)=""/214, 0xd6}, {&(0x7f0000003580)=""/242, 0xf2}, {&(0x7f0000003680)=""/170, 0xaa}, {&(0x7f0000003740)=""/178, 0xb2}, {&(0x7f0000003800)=""/248, 0xf8}, {&(0x7f0000003900)=""/33, 0x21}, {&(0x7f0000003940)=""/146, 0x92}, {&(0x7f0000003a00)=""/12, 0xc}, {&(0x7f0000003a40)=""/82, 0x52}], 0xa, &(0x7f0000003b80)=""/229, 0xe5}, 0x20}, {{&(0x7f0000003c80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/191, 0xbf}, {&(0x7f0000004e40)=""/255, 0xff}, {&(0x7f0000004f40)=""/198, 0xc6}, {&(0x7f0000005040)=""/65, 0x41}, {&(0x7f00000050c0)=""/189, 0xbd}], 0x7, &(0x7f0000005200)=""/216, 0xd8}, 0x6ab1}, {{&(0x7f0000005300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000005380)}, 0x8}, {{&(0x7f00000053c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005440)=""/203, 0xcb}, {&(0x7f0000005540)=""/234, 0xea}, {&(0x7f0000005640)=""/11, 0xb}, {&(0x7f0000005680)=""/127, 0x7f}], 0x4, &(0x7f0000005740)=""/226, 0xe2}, 0x4}, {{&(0x7f0000005840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000058c0)=""/239, 0xef}, {&(0x7f00000059c0)=""/8, 0x8}, {&(0x7f0000005a00)=""/83, 0x53}, {&(0x7f0000005a80)=""/156, 0x9c}, {&(0x7f0000005b40)=""/218, 0xda}, {&(0x7f0000005c40)=""/233, 0xe9}], 0x6, &(0x7f0000005dc0)=""/8, 0x8}, 0x2}], 0x9, 0x40000143, &(0x7f0000006080)={r0, r1+60000000}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000005380), 0xb36b, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000060c0)={0x0, 0x2, 0x8}) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80100) 08:37:12 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3497.432710][T11033] usb 5-1: USB disconnect, device number 71 08:37:12 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:12 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) getsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:37:12 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0xfffffff9], &(0x7f0000000080)=[0x2, 0x5, 0xfdb2, 0x20, 0x9, 0x9, 0x2, 0xffff, 0x7], 0x14, 0x5, 0x3, &(0x7f00000000c0)=[0xffff, 0x0, 0x10000, 0xbc, 0xffffffe1], &(0x7f0000000100)=[0xffffffff, 0x0, 0xfffffff9, 0x81]}) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 08:37:12 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:12 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x492a00, 0x0) recvmsg$can_j1939(r2, &(0x7f00000012c0)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000001200)=[{&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/48, 0x30}], 0x4, &(0x7f0000001240)=""/74, 0x4a}, 0x40000020) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000140)) accept4(r0, &(0x7f0000003500)=@can={0x1d, 0x0}, &(0x7f0000003580)=0x80, 0x80800) bind$can_j1939(r2, &(0x7f00000035c0)={0x1d, r3, 0x1, {0x0, 0x0, 0x2}, 0x103}, 0x18) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0x1}}, 0x18) [ 3498.045104][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3498.052092][ T9675] ath9k_htc: Failed to initialize the device [ 3498.060747][T10730] usb 3-1: ath9k_htc: USB layer deinitialized [ 3498.295113][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3498.302496][ T9588] ath9k_htc: Failed to initialize the device [ 3498.310632][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3498.425001][T10730] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3498.675008][T11033] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3498.955386][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3498.964448][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3498.980101][T10730] usb 3-1: Product: syz [ 3498.984283][T10730] usb 3-1: Manufacturer: syz [ 3498.989313][T10730] usb 3-1: SerialNumber: syz [ 3499.045990][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3499.305116][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3499.314766][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3499.324361][T11033] usb 5-1: Product: syz [ 3499.329486][T11033] usb 5-1: Manufacturer: syz [ 3499.334098][T11033] usb 5-1: SerialNumber: syz [ 3499.385929][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3499.625404][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3499.845073][ T9757] usb 3-1: USB disconnect, device number 41 [ 3500.035233][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:14 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4}) 08:37:14 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x9000001c}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xa, 0x1, 0x3, 0x80000, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) clock_gettime(0x1, &(0x7f00000003c0)) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x9, 0x6, &(0x7f0000000600)=[{&(0x7f0000000100)="8cac7d667e27459b58489cc0060b1db93d202a27ab8226d679a389a6f1ed9a7c0919ad0a46af4bcecf059adae7007702fb23cb158f1ec408fb71a89642849ef389cda26e12e6416b8dcd239fbddb7607003f947d249bb79eabdd47b3669bc17bb18027a1ca439ea8894f5f370d56793a051107db8ae5be3b8a5f44ae462d562f4e6cd6dae14d30a9fdbef18e440c660678b212181df2c7e3ec6998a55d03a0ca39c915b88b38b0c3b5c1aa15e72696d9", 0xb0, 0x80}, {&(0x7f00000001c0)="ddcf287867f9923711aca731636597c45ea07207bc4cf3625cc62ef5dd8810336bf9bf75d1e576d34c36126d9a87f92b200944f0e9948156dc0dd072c8dcca0f55e53e170ff0fc235db222acaa1b7eab38b49093c3ba6449a5ea7c3c245d00ea224749745cad5af64f23d3462830118464cdca779f26d2110094e3876c0a55927d20c1d5cf9917f6110b08f9ddb76888d61da0e603619c76b74196f8cd36d19b9bf3e2c6accd8dfe8e30e6f854c662661bb051a64018383d3e2b3e3c4e013c67c2990ad228f53d7f096ab1c463dd2dec08bc11dbf83334b1c2713f24380f39c987769c1915dd", 0xe6, 0x7fffffff}, {&(0x7f00000002c0)="fda719010fa09e4d36637f74273c3d74ab9f576d657f40c82696bef31885fa70fedefa2109d5e8dc4802c4661c2338b36a9cd0393c6257b1bdf8a6b3c72868d844a7d89782f5b0afaadcdd80f2357f8c5c9bcf4278500af58cea6a797263748d276819d96b3ea84d62ea8111af7a2880c83667443c46f084ae6e18ca0d1761305fdbf692f1e2f3e3ae0b204644eabb6ac2be77e4c9e126502ad866de084276db", 0xa0}, {&(0x7f0000000440)="14405c232394d20df8edcd1528f616b4ed49f31ec0be3d688e19385cfaeee3665f0728b5dc691e2a3f06efc2a13f41bd2151eb4871ee881dd041019d810a4a2af1614b1ff9cf896bd89f949fff9679ebbd025330842566a39d07ed2633788f1cde234f96144b59af277d455a809dd01b50ce5d044ab8c5e4c6c40bd665c4deb946da2d7148d9d6c184cf428d404f600537481edca5b34ccc36715c2b1445a369cf63cf10c4a58f0b", 0xa8, 0x8}, {&(0x7f0000000840)="bfea79c09568b8a3f8354e07b1b7680f29e00b945333468e305b6af690924065d0e05f", 0x23, 0x2}, {&(0x7f0000000500)="de68a96e00883952e1749c0ea89627949b589a6b64d658c62fe51e8ee1cce4e78acc0267cd5e627d2c37a8d9a7e50d86305ebb3132c025cb71f37ecfceb050b931a25ea9ebb07bfd9233705be41c3d53b06181d1579b3e5c59d1fcfc059930afa4d3b939416513cf21e6cecfdef8deb04e62c37350a46121036d5318d686f1f4afbc358503f716617544ea29525b383f39fad0ede0451d1b6d54368e6811bc16432e9601c1b509598ef99c4199b9024c895d15a98dba1c394f44de36abb604ad8c8c5368388295b6f9ba5e01dec38696bde7f94429238724e9537fb2d6223008fc5bde5dd63970f64df935bd", 0xec, 0x6eaf}], 0x1, &(0x7f00000007c0)={[{@codepage={'codepage', 0x3d, 'cp932'}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 08:37:14 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:14 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:14 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:14 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3500.251350][ T9588] usb 5-1: USB disconnect, device number 72 [ 3500.360367][T20719] loop3: detected capacity change from 0 to 264192 08:37:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) socket(0x26, 0x80004, 0xfc5) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000240)={0x80000002}) socketpair(0xf, 0xa, 0x2004, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_setlink={0x48, 0x13, 0x300, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x61, 0x44}, [@IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3f}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000000)=0x4) 08:37:15 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:15 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3500.439731][T20719] exfat: Deprecated parameter 'codepage' [ 3500.494707][T20719] exfat: Bad value for 'codepage' 08:37:15 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:15 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x1], 0x2, 0x2, 0x1000, &(0x7f0000000080)=[0x401, 0x3], &(0x7f00000000c0)=[0xfffffffe, 0xfffff801, 0x80000000, 0xa1, 0x800]}) 08:37:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000, 0x2) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3500.703671][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3500.721055][T10730] ath9k_htc: Failed to initialize the device 08:37:15 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3500.757101][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3501.085021][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3501.092593][T11033] ath9k_htc: Failed to initialize the device [ 3501.100485][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3501.165088][ T9757] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3501.475153][ T9588] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3501.745299][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3501.754550][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3501.763020][ T9757] usb 3-1: Product: syz [ 3501.767798][ T9757] usb 3-1: Manufacturer: syz [ 3501.772408][ T9757] usb 3-1: SerialNumber: syz [ 3501.836046][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3501.995332][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3502.005012][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3502.013844][ T9588] usb 5-1: Product: syz [ 3502.020246][ T9588] usb 5-1: Manufacturer: syz [ 3502.025966][ T9588] usb 5-1: SerialNumber: syz [ 3502.076203][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3502.555187][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3502.655203][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3502.786594][T11861] usb 3-1: USB disconnect, device number 42 08:37:17 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:17 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept4(r0, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x50) 08:37:17 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) socket$kcm(0x29, 0x5, 0x0) 08:37:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:17 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:17 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3502.875324][T10730] usb 5-1: USB disconnect, device number 73 08:37:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:17 executing program 5: socketpair(0xa, 0xa, 0x5, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000008c0)=@caif=@util={0x25, "66c219685a27f269a203bd55ba7e1a0f"}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)="1ff654c4fa9f076d761681f5cbd57799be9bb520807d0446e7ae96d58d07b0a48ac6c4d9cf944af5a1d2b476cfefc3f13d4cd79fd6d0533a44018fc7e284b572ee3899a88c79e5872630084919095f4a2ec87c6700e14f9f4f187c733847f93a1dd10151247f81a92a2162a3160f44c15b39c9c55c86f60dd54acebf91788ddc0296d36351aa491ed872054d8fa7d150c4efdd9b2366abb6b6769132f26eb9aae164aeae144b0b5e7a7db511", 0xac}, {&(0x7f0000000a00)="154f2ba1985988efb2b1163022007aa4f4e31b99e938672d22c611de96f66f149aa63a9252a5447a6fb82f5a9f235e8b5435b725cbf6ccdaa3646b308f7a7e88da1cf5b2bf154bcb869bed609c897a3d30d27f42ca98199ac6f03f3531f05f9fd8b236c0c17f5c027db09c37", 0x6c}], 0x2, &(0x7f0000000ac0)=[{0x50, 0x113, 0x8, "2ac78bad8723fca0b9ed29854c20fddfd2d9da1266f069033c65617a1de8d2e675635923860cec5eec31bdf03956539a0401df6a4a365fde1f87704f3dd1"}, {0x48, 0x102, 0x2, "7402ba3e2d1ff0edbbaabee32ba8772a9db5ff110a739144fc515c3befc23dff4d9d52c17ee4c5bb2dd0ace45ceb56de804513caad01fd19"}, {0xe8, 0x11, 0x7, "48914443e2871cf470361ae20342d2e09454630e3497a613b2506eeb4c1f24d964b4715eaa2815196b76c2424950b0da44c74199c791d5ab01ea39750b6b4d091c850090993b1ddf556d086eb3a0dc692b19617c8b1e74dbbb285d54ab270aa76421a2d7ddeadf5476e47bdff576c70f417ac1a0c0ae419a1ae5301da677cd33f9a62c7ba6defcfe6f61a3583429c0dcc85108113379264e409c2cce4b90f6a608643872a25000840fd83647b90c5540f6b78f40c4cab086f6ab3fc1cf1d7ad4a7f1cc4117c83ad054e946631fffff39dc89d2771592bf"}], 0x180}, 0x40000) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x1}, 0xfe}, 0x18) 08:37:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:17 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:17 executing program 3: clock_gettime(0x2, &(0x7f0000004700)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) recvmmsg(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)=@ax25={{0x3, @netrom}, [@rose, @null, @netrom, @null, @rose, @remote, @null, @bcast]}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/241, 0xf1}], 0x3, &(0x7f0000000440)=""/170, 0xaa}, 0x20}, {{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/23, 0x17}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/133, 0x85}], 0x3, &(0x7f0000000740)=""/182, 0xb6}, 0x2}, {{&(0x7f0000000840)=@tipc=@name, 0x80, &(0x7f0000001a40)=[{0xfffffffffffffffe}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x4, &(0x7f0000001a80)=""/193, 0xc1}}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003000)=[{&(0x7f0000001c00)=""/240, 0xf0}, {&(0x7f0000001d00)=""/35, 0x23}, {&(0x7f0000001d40)=""/75, 0x4b}, {&(0x7f0000001dc0)=""/39, 0x27}, {&(0x7f0000001e00)=""/196, 0xc4}, {&(0x7f0000001f00)=""/4089, 0xff9}, {&(0x7f0000004740)=""/262, 0x106}], 0x7, &(0x7f0000003080)=""/97, 0x61}, 0x9}, {{&(0x7f0000003100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003180)=""/54, 0x36}], 0x1, &(0x7f0000003200)=""/67, 0x43}, 0x9}, {{&(0x7f0000003280)=@ll, 0x80, &(0x7f0000004400)=[{&(0x7f0000003300)=""/108, 0x6c}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/92, 0x5c}], 0x3, &(0x7f0000004440)=""/197, 0xc5}, 0x14}], 0x6, 0x2160, &(0x7f00000046c0)) 08:37:17 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3503.645212][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3503.652586][ T9757] ath9k_htc: Failed to initialize the device [ 3503.661758][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3503.735330][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3503.742902][ T9588] ath9k_htc: Failed to initialize the device [ 3503.751673][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3504.025011][T11861] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3504.125540][T10730] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3504.595366][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3504.604801][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.615814][T11861] usb 3-1: Product: syz [ 3504.620360][T11861] usb 3-1: Manufacturer: syz [ 3504.629780][T11861] usb 3-1: SerialNumber: syz [ 3504.645349][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3504.655384][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.664185][T10730] usb 5-1: Product: syz [ 3504.670911][T10730] usb 5-1: Manufacturer: syz [ 3504.676805][T10730] usb 5-1: SerialNumber: syz [ 3504.692445][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3504.716561][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3505.325139][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3505.325163][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:20 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:20 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000080)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000000)={"a215734ef16a9e3ce779a4d1a7101557f53f380f15b0193c6d6bfefb750e", 0xe1e9, 0x2, 0x1, [0x3, 0x9, 0x0, 0x4, 0x101, 0xf70, 0x2, 0x80000001, 0x9, 0x1000, 0x4, 0x0, 0x9000000, 0x20, 0x4, 0x8, 0x1819403c, 0x2]}) 08:37:20 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000002c0)={0x0, &(0x7f0000000280)=""/35}) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0xff}, 0x1}, 0x18, &(0x7f0000000100)={&(0x7f0000000180)="6734acb09de02a76f522a38086cce524e08772b44f28bfe44b7900800c413bea9f9a965793cd0fbb4a8cfd5a28f20da922af471dc39009c4745a13785cbc18e6061b31e02d4be77c8490c216d440ff0f81cd3daa81b053d043df31139b717c41fe272234416cc4b5b57ac73add497d36ac37ae55cacce97c223d28e5600445a64879e5e705b9596153ac67c0f957aef7e476df26cb6a1329b408172bfc55c3ab217886d5157b577dde12a2cda2947217d7f636b1ca7201b669528f0e1142", 0xbe}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000340)=""/59) 08:37:20 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:20 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000007800)) [ 3505.562034][ T9588] usb 3-1: USB disconnect, device number 43 [ 3505.589927][ T9672] usb 5-1: USB disconnect, device number 74 08:37:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:20 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:20 executing program 3: clock_gettime(0x7, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000080)=0x3, 0x4) 08:37:20 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0xfffffffffffffffe, &(0x7f0000000000)=0x23) 08:37:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:20 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3506.365112][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3506.372399][ T9757] ath9k_htc: Failed to initialize the device [ 3506.375014][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3506.385505][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3506.401006][ T9675] ath9k_htc: Failed to initialize the device [ 3506.412023][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3506.765165][ T9588] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3506.785350][ T9672] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 3507.285466][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3507.294772][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.304377][ T9588] usb 3-1: Product: syz [ 3507.309589][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3507.318764][ T9588] usb 3-1: Manufacturer: syz [ 3507.323373][ T9588] usb 3-1: SerialNumber: syz [ 3507.330405][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.340082][ T9672] usb 5-1: Product: syz [ 3507.344274][ T9672] usb 5-1: Manufacturer: syz [ 3507.356498][ T9672] usb 5-1: SerialNumber: syz [ 3507.396370][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3507.418026][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3508.005245][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3508.017767][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:22 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:22 executing program 3: getpid() clock_gettime(0x4bf8b627505b48fb, &(0x7f0000000040)) r0 = fork() getpgrp(r0) syz_open_procfs$namespace(r0, &(0x7f00000032c0)='ns/time\x00') capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x7363, 0x4, 0x4, 0xfff, 0x5, 0x8e}) 08:37:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x800) 08:37:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:22 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000007800)) [ 3508.230098][T21800] usb 3-1: USB disconnect, device number 44 [ 3508.259794][T12454] usb 5-1: USB disconnect, device number 75 08:37:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3508.401099][T20974] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 08:37:23 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:23 executing program 3: clock_gettime(0x5, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000040)=0xfede) [ 3509.085085][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3509.092219][ T9672] ath9k_htc: Failed to initialize the device [ 3509.098630][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3509.109314][ T9675] ath9k_htc: Failed to initialize the device [ 3509.117119][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3509.124792][T12454] usb 5-1: ath9k_htc: USB layer deinitialized [ 3509.495092][T12454] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 3509.495130][T21800] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3510.015259][T12454] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3510.024351][T12454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.034125][T12454] usb 5-1: Product: syz [ 3510.038779][T12454] usb 5-1: Manufacturer: syz [ 3510.043387][T12454] usb 5-1: SerialNumber: syz [ 3510.064457][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3510.075062][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.084588][T21800] usb 3-1: Product: syz [ 3510.085968][T12454] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3510.093533][T21800] usb 3-1: Manufacturer: syz [ 3510.104011][T21800] usb 3-1: SerialNumber: syz [ 3510.165961][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3510.765168][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3510.785469][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:25 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:25 executing program 3: clock_gettime(0x5, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000080)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) 08:37:25 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socket(0xa, 0x801, 0x5e2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100), 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1401, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc8d0}, 0x20000800) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1d, 0xa, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f00000000c0)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180)=0x5, 0x4) [ 3510.984662][T11861] usb 5-1: USB disconnect, device number 76 08:37:25 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000007800)) [ 3511.066708][T11033] usb 3-1: USB disconnect, device number 45 08:37:25 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:25 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40012140, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) recvmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/93, 0x5d}], 0x6, &(0x7f00000003c0)=""/50, 0x32}, 0x0) 08:37:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:25 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/119) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x103400) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000200)=""/217) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:25 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3511.805092][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3511.806078][ T3252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.812758][T12454] ath9k_htc: Failed to initialize the device [ 3511.818359][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3511.818482][T21800] ath9k_htc: Failed to initialize the device [ 3511.818842][ T3252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3511.834972][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3511.852436][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3512.205179][T11861] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 3512.215158][T11033] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3512.725180][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3512.734347][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.742923][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3512.752219][T11861] usb 5-1: Product: syz [ 3512.756986][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.765990][T11861] usb 5-1: Manufacturer: syz [ 3512.770604][T11861] usb 5-1: SerialNumber: syz [ 3512.775799][T11033] usb 3-1: Product: syz [ 3512.779985][T11033] usb 3-1: Manufacturer: syz [ 3512.784619][T11033] usb 3-1: SerialNumber: syz [ 3512.825929][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3512.842119][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3513.425164][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3513.434722][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:28 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:28 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)=@ax25={{0x3, @default}, [@netrom, @remote, @default, @default, @null, @bcast, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000540)=""/49, 0x31}], 0x8, &(0x7f0000000600)=""/214, 0xd6}, 0x5}, {{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/178, 0xb2}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/84, 0x54}, {&(0x7f0000000940)=""/145, 0x91}, {&(0x7f0000000a00)=""/136, 0x88}], 0x5, &(0x7f0000000b40)=""/119, 0x77}, 0x9}], 0x2, 0x0, &(0x7f0000000c40)) 08:37:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x3e1302, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x20001) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) 08:37:28 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:28 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), 0x0) [ 3513.656147][T12454] usb 3-1: USB disconnect, device number 46 [ 3513.682463][ T3626] usb 5-1: USB disconnect, device number 77 08:37:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 08:37:28 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f0000000000)) 08:37:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:28 executing program 5: syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x800) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000009580)={0x0, @nl=@unspec, @xdp={0x2c, 0x4, 0x0, 0x19}, @can={0x1d, 0x0}, 0x240b, 0x0, 0x0, 0x0, 0x336, &(0x7f0000009540)='dummy0\x00', 0xfffffffffffff7a3, 0x2, 0x9}) bind$can_j1939(r1, &(0x7f0000009600)={0x1d, r2, 0x0, {0x2}, 0x1}, 0x18) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000e00)=0xe8) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x5) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x5]) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3, 0x2, {0x1, 0xff, 0x4}, 0xff}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000000c0)=0x1) 08:37:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) [ 3514.525115][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3514.532448][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3514.539823][T11033] ath9k_htc: Failed to initialize the device [ 3514.548539][T11861] ath9k_htc: Failed to initialize the device [ 3514.554825][T12454] usb 3-1: ath9k_htc: USB layer deinitialized [ 3514.565096][ T3626] usb 5-1: ath9k_htc: USB layer deinitialized [ 3514.935017][ T3626] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 3514.945458][T12454] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3515.465198][ T3626] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3515.474592][T12454] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3515.483915][ T3626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.495202][T12454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.503523][ T3626] usb 5-1: Product: syz [ 3515.509313][T12454] usb 3-1: Product: syz [ 3515.513783][ T3626] usb 5-1: Manufacturer: syz [ 3515.520240][T12454] usb 3-1: Manufacturer: syz [ 3515.526057][ T3626] usb 5-1: SerialNumber: syz [ 3515.531817][T12454] usb 3-1: SerialNumber: syz [ 3515.586042][T12454] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3515.599522][ T3626] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3516.185141][ T3626] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3516.199099][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], 0x0, 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 3: clock_gettime(0x5, &(0x7f0000000000)) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 08:37:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x15, 0xa, 0x3c6, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f000000ae40)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/156, 0x9c}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/225, 0xe1}, {&(0x7f0000002400)=""/138, 0x8a}], 0x6}, 0x7bd6}, {{&(0x7f00000024c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002540)=""/129, 0x81}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2, &(0x7f0000002640)=""/160, 0xa0}, 0x6}, {{&(0x7f0000002700)=@qipcrtr, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002780)=""/158, 0x9e}, {&(0x7f0000003900)=""/206, 0xce}, {&(0x7f0000002840)=""/58, 0x3a}], 0x3, &(0x7f0000003a40)=""/175, 0xaf}, 0x2}, {{&(0x7f0000003b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003b80)=""/134, 0x86}, {&(0x7f0000003c40)=""/56, 0x38}, {&(0x7f0000003c80)=""/63, 0x3f}, {&(0x7f0000003cc0)=""/229, 0xe5}, {&(0x7f0000003dc0)=""/107, 0x6b}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/172, 0xac}, {&(0x7f0000004f00)=""/195, 0xc3}, {&(0x7f0000005000)=""/133, 0x85}], 0x9, &(0x7f0000005180)=""/231, 0xe7}, 0x4}, {{&(0x7f0000005280)=@llc, 0x80, &(0x7f0000005680)=[{&(0x7f0000005300)=""/144, 0x90}, {&(0x7f00000053c0)=""/221, 0xdd}, {&(0x7f00000054c0)=""/199, 0xc7}, {&(0x7f00000055c0)=""/36, 0x24}, {&(0x7f0000005600)=""/100, 0x64}], 0x5}, 0x101}, {{&(0x7f0000005700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000008c80)=[{&(0x7f0000005780)=""/132, 0x84}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/4096, 0x1000}, {&(0x7f0000007840)=""/244, 0xf4}, {&(0x7f0000007940)=""/247, 0xf7}, {&(0x7f0000007a40)=""/218, 0xda}, {&(0x7f0000007b40)=""/176, 0xb0}, {&(0x7f000000b040)=""/4109, 0x100d}, {&(0x7f0000008c00)=""/115, 0x73}], 0x9}, 0x8}, {{&(0x7f0000008d40)=@generic, 0x80, &(0x7f000000adc0)=[{&(0x7f0000008dc0)=""/4096, 0x1000}, {&(0x7f0000009dc0)=""/4096, 0x1000}], 0x2, &(0x7f000000ae00)}, 0xfffff33a}], 0x7, 0x30, &(0x7f000000b000)={0x77359400}) connect$netrom(r1, &(0x7f0000002880)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) 08:37:31 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:31 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), 0x0) [ 3516.408349][T11033] usb 3-1: USB disconnect, device number 47 [ 3516.432219][ T9672] usb 5-1: USB disconnect, device number 78 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], 0x0, 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x1, 0xff, 0x3}, {0x1, 0xff}, 0xfd, 0xfe}, {0x2, 0x0, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x2}, 0x1, 0x2}], 0x40) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:31 executing program 3: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/185, 0xb9}], 0x8, &(0x7f00000005c0)=""/18, 0x12}, 0x400}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=""/112, 0x70}, {&(0x7f0000001940)=""/67, 0x43}, {&(0x7f00000019c0)=""/218, 0xda}], 0x8, &(0x7f0000001b40)=""/191, 0xbf}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001c00)=""/153, 0x99}, {&(0x7f0000001cc0)=""/235, 0xeb}, {&(0x7f0000001dc0)=""/241, 0xf1}, {&(0x7f0000001ec0)=""/107, 0x6b}], 0x4}, 0x7}, {{&(0x7f0000001f80)=@caif=@dbg, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/149, 0x95}, {&(0x7f00000020c0)=""/202, 0xca}, {&(0x7f00000021c0)=""/14, 0xe}], 0x3}, 0x80000001}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000004380)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/121, 0x79}, {&(0x7f0000003340)=""/29, 0x1d}, {&(0x7f0000003380)=""/4096, 0x1000}], 0x4, &(0x7f00000043c0)=""/185, 0xb9}, 0x72}, {{&(0x7f0000004480)=@vsock, 0x80, &(0x7f00000058c0)=[{&(0x7f0000004500)=""/232, 0xe8}, {&(0x7f0000004600)=""/139, 0x8b}, {&(0x7f00000046c0)=""/181, 0xb5}, {&(0x7f0000004780)=""/26, 0x1a}, {&(0x7f00000047c0)=""/222, 0xde}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x6, &(0x7f0000005940)=""/91, 0x5b}, 0x8}, {{&(0x7f00000059c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005a40)=""/210, 0xd2}], 0x1, &(0x7f0000005b80)=""/84, 0x54}, 0x5}], 0x7, 0x40, 0x0) 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], 0x0, 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x8, 0x0, 0x4, 0x2, 0x6, {}, {0x4, 0x0, 0x6, 0x0, 0x58, 0x0, "5635a544"}, 0x4, 0x4, @userptr=0x2, 0xa93}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x2008}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000180)) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x1, {0x0, 0xf0, 0x4}, {0x2, 0xff, 0x4}, 0xfd}], 0x20) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = socket(0xb, 0x2, 0x4) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000100), 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000200)={r4, r2, 0x7f}) 08:37:31 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x44540, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/145) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x80000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x20) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3517.245171][ T3626] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3517.252361][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3517.260098][T12454] ath9k_htc: Failed to initialize the device [ 3517.268599][ T3626] ath9k_htc: Failed to initialize the device [ 3517.276280][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3517.282939][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3517.655020][T11033] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3517.665196][ T9672] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 3518.185325][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3518.194523][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.203080][ T9672] usb 5-1: Product: syz [ 3518.208174][ T9672] usb 5-1: Manufacturer: syz [ 3518.212835][ T9672] usb 5-1: SerialNumber: syz [ 3518.225599][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3518.234669][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.244837][T11033] usb 3-1: Product: syz [ 3518.250170][T11033] usb 3-1: Manufacturer: syz [ 3518.254788][T11033] usb 3-1: SerialNumber: syz [ 3518.256700][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3518.296763][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3518.865142][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3518.985233][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:33 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3519.089362][ T3626] usb 5-1: USB disconnect, device number 79 08:37:33 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), 0x0) 08:37:33 executing program 5: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000001340)=@full={0xb, @remote, @remote, 0x0, [@null, @rose, @netrom, @remote, @remote, @null]}, &(0x7f0000001380)=0xffffffffffffff7b, 0x0) connect$rose(r0, &(0x7f00000013c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000080)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvfrom$rose(r0, &(0x7f0000000000)=""/47, 0x2f, 0x40000020, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x669) setsockopt$rose(r2, 0x104, 0x1, &(0x7f0000000100)=0x70a9, 0x4) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f00000001c0)=0x30c6) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000180)=0x6) 08:37:33 executing program 3: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) 08:37:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3519.202049][T21800] usb 3-1: USB disconnect, device number 48 08:37:33 executing program 3: clock_gettime(0x0, &(0x7f0000000400)) 08:37:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:33 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) 08:37:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3519.885032][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3519.892131][ T9672] ath9k_htc: Failed to initialize the device [ 3519.900401][ T3626] usb 5-1: ath9k_htc: USB layer deinitialized [ 3520.045184][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3520.052263][T11033] ath9k_htc: Failed to initialize the device [ 3520.061152][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3520.295182][ T3626] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3520.425125][T21800] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3520.845292][ T3626] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3520.854539][ T3626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3520.865101][ T3626] usb 5-1: Product: syz [ 3520.869349][ T3626] usb 5-1: Manufacturer: syz [ 3520.874041][ T3626] usb 5-1: SerialNumber: syz [ 3520.926214][ T3626] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3520.995424][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3521.011028][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3521.019986][T21800] usb 3-1: Product: syz [ 3521.024189][T21800] usb 3-1: Manufacturer: syz [ 3521.034505][T21800] usb 3-1: SerialNumber: syz [ 3521.098256][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3521.505123][ T3626] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:36 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3521.722232][T12454] usb 5-1: USB disconnect, device number 80 [ 3521.765229][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:36 executing program 5: r0 = epoll_create(0x490) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000180)=""/197) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x2, {0x0, 0x1, 0x3}, {0x1, 0xf0}, 0x0, 0x1}, {0x1, 0x1, {0x2}, {0x1, 0xf0, 0x3}, 0x1, 0xff}, {0x0, 0x2, {0x0, 0x0, 0x2}, {0x1, 0x1, 0x1}, 0xfd, 0xff}, {0x7, 0x1, {0x3, 0x1, 0x3}, {0x0, 0xc169c44e26f63a45}, 0xff, 0xfd}], 0x80) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/47) socketpair(0x4, 0x0, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0x5, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000000c0), 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @default, 0xffffffe2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 08:37:36 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000004500)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1, &(0x7f0000000100)=""/53, 0x35}, 0x20}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x6, &(0x7f00000024c0)=""/125, 0x7d}, 0x3}, {{&(0x7f0000002540)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000025c0)=""/229, 0xe5}, {&(0x7f00000026c0)=""/227, 0xe3}, {&(0x7f00000027c0)=""/100, 0x64}, {&(0x7f0000002840)=""/72, 0x48}, {&(0x7f00000028c0)=""/179, 0xb3}, {&(0x7f0000002980)=""/250, 0xfa}, {&(0x7f0000002a80)=""/133, 0x85}, {&(0x7f0000002b40)=""/186, 0xba}], 0x8, &(0x7f0000002c80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003c80)=@nfc_llcp, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d00)=""/178, 0xb2}, {&(0x7f0000003dc0)=""/115, 0x73}, {&(0x7f0000003e40)=""/45, 0x2d}, {&(0x7f0000003e80)=""/117, 0x75}, {&(0x7f0000003f00)=""/67, 0x43}], 0x5, &(0x7f0000004000)=""/45, 0x2d}, 0x4}, {{&(0x7f0000004040)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)=""/40, 0x28}, {&(0x7f0000004100)=""/244, 0xf4}, {&(0x7f0000004200)=""/242, 0xf2}, {&(0x7f0000004300)=""/194, 0xc2}], 0x4, &(0x7f0000004440)=""/132, 0x84}, 0x6}], 0x5, 0x40002000, &(0x7f0000004640)={0x0, 0x3938700}) 08:37:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3521.985275][T21800] usb 3-1: USB disconnect, device number 49 08:37:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000), 0x0) 08:37:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:36 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) recvmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/49, 0x31}, 0x6}, {{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/218, 0xda}], 0x3, &(0x7f0000000440)=""/237, 0xed}, 0x28d75c0}, {{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/156, 0x9c}, {&(0x7f0000000680)=""/80, 0x50}], 0x2, &(0x7f0000000700)=""/82, 0x52}, 0xfff}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/253, 0xfd}], 0x2, &(0x7f0000000980)}}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/170, 0xaa}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/104, 0x68}], 0x3, &(0x7f0000000c00)=""/51, 0x33}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/238, 0xee}], 0x1, &(0x7f0000000d80)=""/167, 0xa7}, 0x2}], 0x6, 0x2000, &(0x7f0000000fc0)={0x77359400}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0xfff, 0x0, 0x84800, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000980)={0x4000001b}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x18, 0x140e, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) 08:37:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3522.525238][ T3626] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3522.532266][ T3626] ath9k_htc: Failed to initialize the device [ 3522.541558][T12454] usb 5-1: ath9k_htc: USB layer deinitialized [ 3522.845130][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3522.852774][ T9672] ath9k_htc: Failed to initialize the device [ 3522.860667][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3522.905177][T12454] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 3523.445405][T12454] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3523.454465][T12454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3523.464618][T12454] usb 5-1: Product: syz [ 3523.469558][T12454] usb 5-1: Manufacturer: syz [ 3523.474154][T12454] usb 5-1: SerialNumber: syz [ 3523.516020][T12454] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3524.085141][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:38 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:38 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000010c0)={r1, &(0x7f00000000c0)=""/4096}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000040)) 08:37:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:38 executing program 3: clock_gettime(0x7, &(0x7f0000000400)) 08:37:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 3524.307978][T27697] usb 5-1: USB disconnect, device number 81 08:37:38 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:38 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x0) 08:37:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x3, @fd, 0x4}) [ 3524.569294][T21469] [ 3524.571664][T21469] ======================================================