Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   50.519933][ T2990] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   50.910028][ T2990] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[   51.079928][ T2990] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   51.089046][ T2990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.098204][ T2990] usb 1-1: Product: syz
[   51.102994][ T2990] usb 1-1: Manufacturer: syz
[   51.107573][ T2990] usb 1-1: SerialNumber: syz
[   51.155584][ T2990] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   51.789781][ T2990] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   52.010363][ T2990] ------------[ cut here ]------------
[   52.015830][ T2990] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[   52.023008][ T2990] WARNING: CPU: 1 PID: 2990 at drivers/usb/core/urb.c:494 usb_submit_urb+0xacd/0x1550
[   52.033297][ T2990] Modules linked in:
[   52.037211][ T2990] CPU: 1 PID: 2990 Comm: kworker/1:2 Not tainted 5.11.0-rc7-syzkaller #0
[   52.046574][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   52.057503][ T2990] Workqueue: events request_firmware_work_func
[   52.064544][ T2990] RIP: 0010:usb_submit_urb+0xacd/0x1550
[   52.070756][ T2990] Code: d8 48 c1 e8 03 42 8a 04 28 84 c0 0f 85 bd 07 00 00 44 8b 03 48 c7 c7 00 6b 5b 8a 4c 89 f6 4c 89 fa 89 e9 31 c0 e8 63 95 d5 fb <0f> 0b 4c 8b 74 24 30 45 89 f7 4c 89 ff 48 c7 c6 10 e6 08 8d e8 2a
[   52.091122][ T2990] RSP: 0018:ffffc900097ef858 EFLAGS: 00010246
[   52.097188][ T2990] RAX: 47659aa2ede5d900 RBX: ffffffff8a5b6928 RCX: ffff88801b5e9bc0
[   52.106067][ T2990] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   52.114703][ T2990] RBP: 0000000000000001 R08: ffffffff815fb522 R09: ffffed10173a60b8
[   52.123310][ T2990] R10: ffffed10173a60b8 R11: 0000000000000000 R12: ffff88802137db00
[   52.131992][ T2990] R13: dffffc0000000000 R14: ffffffff8a5c0b60 R15: ffff888012929410
[   52.140605][ T2990] FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[   52.150287][ T2990] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.156902][ T2990] CR2: 00007f3699403000 CR3: 000000001295b000 CR4: 00000000001506e0
[   52.165864][ T2990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.174540][ T2990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.183151][ T2990] Call Trace:
[   52.186439][ T2990]  ? lockdep_hardirqs_on+0x8d/0x130
[   52.192918][ T2990]  hif_usb_send+0x390/0xc60
[   52.197454][ T2990]  ? hif_usb_sta_drain+0x350/0x350
[   52.199708][ T3193] usb 1-1: USB disconnect, device number 2
[   52.207103][ T2990]  htc_connec