d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2a, 0x4, 0x1, 0x3, 0xa8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3206.691309][T30013] usb 4-1: USB disconnect, device number 69
[ 3206.709700][T30013] usb 4-1: ath9k_htc: USB layer deinitialized
07:41:37 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:41:37 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3206.792636][T17906] usb 3-1: USB disconnect, device number 47
[ 3206.810454][T17906] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3206.862835][    T5] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 3206.992775][T13485] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 3207.112863][T21295] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3207.121479][T21295] ath9k_htc: Failed to initialize the device
[ 3207.127553][T15167] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3207.292861][T19259] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 3207.305755][T30013] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 3207.443071][    T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3207.452290][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3207.466228][    T5] usb 5-1: Product: syz
[ 3207.470440][    T5] usb 5-1: Manufacturer: syz
[ 3207.480102][    T5] usb 5-1: SerialNumber: syz
[ 3207.482724][T15167] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 3207.512752][T13485] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3207.512842][T16965] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3207.524393][T13485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3207.528736][T16965] ath9k_htc: Failed to initialize the device
[ 3207.537012][T13485] usb 1-1: Product: syz
[ 3207.548867][    T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3207.550136][T13485] usb 1-1: Manufacturer: syz
[ 3207.561725][T13485] usb 1-1: SerialNumber: syz
[ 3207.612989][T13485] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3207.832762][T19259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3207.841986][T19259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3207.856350][T19259] usb 3-1: Product: syz
[ 3207.860491][T19259] usb 3-1: Manufacturer: syz
[ 3207.870876][T19259] usb 3-1: SerialNumber: syz
[ 3207.872785][T30013] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3207.885796][T30013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3207.894018][T30013] usb 4-1: Product: syz
[ 3207.898406][T30013] usb 4-1: Manufacturer: syz
[ 3207.903233][T30013] usb 4-1: SerialNumber: syz
[ 3207.926228][T19259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3207.944283][T30013] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3208.002705][T15167] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3208.011795][T15167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3208.025612][T15167] usb 6-1: Product: syz
[ 3208.029779][T15167] usb 6-1: Manufacturer: syz
07:41:38 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3208.049625][T15167] usb 6-1: SerialNumber: syz
[ 3208.061644][T32518] usb 2-1: USB disconnect, device number 34
[ 3208.077112][T32518] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3208.092841][T15167] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3208.142695][    T5] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3208.202928][T13485] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3208.502712][T19259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3208.602699][T30013] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3208.662760][T15167] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3208.672637][T16965] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 3208.709610][T11949] usb 3-1: USB disconnect, device number 48
[ 3208.867375][T32518] usb 6-1: USB disconnect, device number 118
07:41:39 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3209.202757][    T5] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3209.209805][    T5] ath9k_htc: Failed to initialize the device
[ 3209.262822][T16965] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3209.271921][T16965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3209.272602][T13485] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3209.280197][T16965] usb 2-1: Product: syz
[ 3209.293210][T16965] usb 2-1: Manufacturer: syz
[ 3209.297887][T16965] usb 2-1: SerialNumber: syz
[ 3209.303624][T13485] ath9k_htc: Failed to initialize the device
07:41:40 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3209.342943][T16965] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3209.512612][T19259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3209.519505][T19259] ath9k_htc: Failed to initialize the device
[ 3209.530744][T11949] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3209.672576][T15167] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3209.679459][T15167] ath9k_htc: Failed to initialize the device
[ 3209.682714][T30013] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3209.694978][T30013] ath9k_htc: Failed to initialize the device
[ 3209.696133][T32518] usb 6-1: ath9k_htc: USB layer deinitialized
07:41:40 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3209.720555][T21295] usb 5-1: USB disconnect, device number 33
[ 3209.734249][T21295] usb 5-1: ath9k_htc: USB layer deinitialized
07:41:40 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3209.769514][T17906] usb 1-1: USB disconnect, device number 77
[ 3209.788633][T17906] usb 1-1: ath9k_htc: USB layer deinitialized
07:41:40 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2a, 0x4, 0x1, 0x3, 0xa8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3209.825508][T20788] usb 4-1: USB disconnect, device number 70
[ 3209.843123][T20788] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3209.892575][T11949] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 3209.942569][T16965] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3210.062547][T32518] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 3210.322765][T13485] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 3210.372525][ T9691] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 3210.422638][T11949] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3210.431806][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3210.432521][T21295] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 3210.448588][T11949] usb 3-1: Product: syz
[ 3210.455321][T11949] usb 3-1: Manufacturer: syz
[ 3210.459949][T11949] usb 3-1: SerialNumber: syz
[ 3210.512817][T11949] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3210.582550][T32518] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3210.591595][T32518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3210.600669][T32518] usb 6-1: Product: syz
[ 3210.606130][T32518] usb 6-1: Manufacturer: syz
[ 3210.611789][T32518] usb 6-1: SerialNumber: syz
[ 3210.652890][T32518] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3210.842539][T13485] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3210.853320][T13485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3210.861282][T13485] usb 5-1: Product: syz
[ 3210.866156][T13485] usb 5-1: Manufacturer: syz
[ 3210.871137][T13485] usb 5-1: SerialNumber: syz
[ 3210.893470][ T9691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3210.903137][ T9691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3210.911110][ T9691] usb 1-1: Product: syz
[ 3210.916504][T13485] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3210.926690][ T9691] usb 1-1: Manufacturer: syz
[ 3210.932315][ T9691] usb 1-1: SerialNumber: syz
[ 3210.954732][T16965] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3210.962604][T16965] ath9k_htc: Failed to initialize the device
[ 3210.966502][T21295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3210.980257][ T9691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3210.993681][T21295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3211.001660][T21295] usb 4-1: Product: syz
[ 3211.007694][T21295] usb 4-1: Manufacturer: syz
[ 3211.013281][T21295] usb 4-1: SerialNumber: syz
[ 3211.052751][T21295] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3211.172560][T11949] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3211.222532][T32518] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3211.435009][T19259] usb 6-1: USB disconnect, device number 119
07:41:42 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3211.502480][T13485] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3211.521959][T15167] usb 2-1: USB disconnect, device number 35
[ 3211.535036][T15167] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3211.572517][ T9691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3211.623067][T21295] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:41:42 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3212.122443][T15167] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 3212.232417][T11949] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3212.239355][T11949] ath9k_htc: Failed to initialize the device
[ 3212.312516][T32518] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3212.319646][T32518] ath9k_htc: Failed to initialize the device
[ 3212.327346][T19259] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3212.552507][T13485] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3212.559613][T13485] ath9k_htc: Failed to initialize the device
[ 3212.632548][ T9691] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3212.639675][ T9691] ath9k_htc: Failed to initialize the device
[ 3212.647497][T15167] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3212.659176][T15167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3212.668576][T15167] usb 2-1: Product: syz
[ 3212.673002][T15167] usb 2-1: Manufacturer: syz
[ 3212.677590][T15167] usb 2-1: SerialNumber: syz
[ 3212.682412][T19259] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 3212.712547][T21295] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3212.719555][T21295] ath9k_htc: Failed to initialize the device
07:41:43 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3212.726030][T15167] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3212.746376][T25325] usb 3-1: USB disconnect, device number 49
[ 3212.773857][T25325] usb 3-1: ath9k_htc: USB layer deinitialized
07:41:43 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2a, 0x4, 0x1, 0x3, 0xa8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3212.866099][T16965] usb 4-1: USB disconnect, device number 71
[ 3212.883696][T16965] usb 4-1: ath9k_htc: USB layer deinitialized
07:41:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3213.070663][T30013] usb 5-1: USB disconnect, device number 34
[ 3213.077738][T30013] usb 5-1: ath9k_htc: USB layer deinitialized
07:41:43 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3213.139482][T16965] usb 1-1: USB disconnect, device number 78
[ 3213.159107][T16965] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3213.222467][T19259] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3213.231641][T19259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3213.246316][T19259] usb 6-1: Product: syz
[ 3213.250585][T19259] usb 6-1: Manufacturer: syz
[ 3213.255454][T19259] usb 6-1: SerialNumber: syz
[ 3213.302372][T15167] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3213.311576][T19259] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3213.322372][T25325] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 3213.482344][T20788] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 3213.702310][T16965] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 3213.752316][T30013] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 3213.842388][T25325] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3213.851633][T25325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3213.861069][T25325] usb 3-1: Product: syz
[ 3213.867995][T25325] usb 3-1: Manufacturer: syz
[ 3213.874147][T25325] usb 3-1: SerialNumber: syz
[ 3213.882387][T19259] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3213.912569][T25325] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3214.033111][T20788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3214.042346][T20788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3214.050300][T20788] usb 4-1: Product: syz
[ 3214.054665][T20788] usb 4-1: Manufacturer: syz
[ 3214.061066][T20788] usb 4-1: SerialNumber: syz
[ 3214.086801][T13485] usb 6-1: USB disconnect, device number 120
[ 3214.102555][T20788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3214.252454][T16965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3214.261526][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3214.270738][T16965] usb 5-1: Product: syz
[ 3214.275877][T16965] usb 5-1: Manufacturer: syz
[ 3214.280452][T16965] usb 5-1: SerialNumber: syz
[ 3214.312360][T30013] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3214.321394][T30013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3214.330777][T30013] usb 1-1: Product: syz
[ 3214.336504][T16965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3214.345944][T30013] usb 1-1: Manufacturer: syz
[ 3214.351922][T30013] usb 1-1: SerialNumber: syz
[ 3214.392271][T15167] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3214.399177][T15167] ath9k_htc: Failed to initialize the device
[ 3214.414143][T30013] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3214.472269][T25325] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:41:45 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3214.680691][T32518] usb 3-1: USB disconnect, device number 50
[ 3214.722267][T20788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:41:45 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, 0x0, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001000)="271b30c833fa1cb69170f2d2133f56a34feef1af912420ceb87194843c18d1d9f4c8c90bdd8726fe26108038fbfc0d5e65fb61c59d54b0adca394e3063deabd6b437e9aec00b3e07a57c531e98716808f6f47938a75c7d6d6260caee247d8df70113f25096a9f9c96a53fa4d0a933f90b96023a275a9aa143d05669c85")

[ 3214.877625][T21295] usb 2-1: USB disconnect, device number 36
[ 3214.884530][T21295] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3214.952313][T19259] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3214.959228][T19259] ath9k_htc: Failed to initialize the device
[ 3214.966564][T13485] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3214.983759][T16965] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3215.042323][T30013] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:41:45 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3215.322267][T13485] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 3215.472363][T11949] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 3215.512168][T25325] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3215.519058][T25325] ath9k_htc: Failed to initialize the device
[ 3215.525068][T32518] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3215.752157][T20788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3215.759114][T20788] ath9k_htc: Failed to initialize the device
[ 3215.842159][T13485] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3215.851399][T13485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3215.860764][T13485] usb 6-1: Product: syz
[ 3215.868309][T13485] usb 6-1: Manufacturer: syz
[ 3215.872966][T13485] usb 6-1: SerialNumber: syz
[ 3215.883405][T32518] usb 3-1: new high-speed USB device number 51 using dummy_hcd
07:41:46 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@broadcast, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3215.912447][T13485] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3215.937176][T17906] usb 4-1: USB disconnect, device number 72
[ 3215.953796][T17906] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3216.072239][T30013] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3216.079111][T16965] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3216.085979][T11949] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3216.095071][T30013] ath9k_htc: Failed to initialize the device
[ 3216.101054][T16965] ath9k_htc: Failed to initialize the device
[ 3216.107057][T11949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3216.115809][T11949] usb 2-1: Product: syz
[ 3216.119970][T11949] usb 2-1: Manufacturer: syz
[ 3216.125583][T11949] usb 2-1: SerialNumber: syz
[ 3216.174487][T11949] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3216.402118][T32518] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3216.411274][T32518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3216.420830][T32518] usb 3-1: Product: syz
[ 3216.427077][T32518] usb 3-1: Manufacturer: syz
[ 3216.434051][T32518] usb 3-1: SerialNumber: syz
[ 3216.472159][T13485] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3216.481356][T32518] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:41:47 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3216.550916][T17906] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 3216.558884][T20788] usb 5-1: USB disconnect, device number 35
[ 3216.566810][T20788] usb 5-1: ath9k_htc: USB layer deinitialized
07:41:47 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3216.619111][    T5] usb 1-1: USB disconnect, device number 79
[ 3216.629019][    T5] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3216.676208][ T5391] usb 6-1: USB disconnect, device number 121
[ 3216.802109][T11949] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3217.052209][T32518] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3217.112116][T17906] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3217.122673][T17906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3217.130622][T17906] usb 4-1: Product: syz
[ 3217.136853][T17906] usb 4-1: Manufacturer: syz
[ 3217.141976][T17906] usb 4-1: SerialNumber: syz
[ 3217.152097][T25325] usb 1-1: new high-speed USB device number 80 using dummy_hcd
07:41:47 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3217.163430][    T5] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 3217.189119][T17906] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3217.259468][T15167] usb 3-1: USB disconnect, device number 51
[ 3217.512058][T13485] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3217.519068][T13485] ath9k_htc: Failed to initialize the device
[ 3217.530364][ T5391] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3217.672044][T25325] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3217.684278][T25325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3217.693787][T25325] usb 1-1: Product: syz
[ 3217.699463][T25325] usb 1-1: Manufacturer: syz
[ 3217.707177][T25325] usb 1-1: SerialNumber: syz
07:41:48 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3217.732895][    T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3217.741952][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3217.752300][T25325] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3217.777207][    T5] usb 5-1: Product: syz
[ 3217.788668][    T5] usb 5-1: Manufacturer: syz
[ 3217.796358][    T5] usb 5-1: SerialNumber: syz
[ 3217.812069][T17906] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3217.833923][T11949] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3217.840767][T11949] ath9k_htc: Failed to initialize the device
[ 3217.863787][    T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3217.922234][ T5391] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 3218.072010][T32518] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3218.078899][T32518] ath9k_htc: Failed to initialize the device
[ 3218.084932][T15167] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3218.322087][T19259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:41:49 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3218.371963][T30013] usb 2-1: USB disconnect, device number 37
[ 3218.385053][T30013] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3218.442010][T15167] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 3218.512075][ T5391] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3218.521150][ T5391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3218.535454][ T5391] usb 6-1: Product: syz
[ 3218.541045][ T5391] usb 6-1: Manufacturer: syz
[ 3218.545776][    T5] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3218.555016][ T5391] usb 6-1: SerialNumber: syz
[ 3218.595447][ T5391] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3218.882035][T17906] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3218.889156][T17906] ath9k_htc: Failed to initialize the device
[ 3218.962040][T15167] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3218.971089][T15167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3218.984329][T13485] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 3218.992662][T15167] usb 3-1: Product: syz
[ 3218.996793][T15167] usb 3-1: Manufacturer: syz
[ 3219.001467][T15167] usb 3-1: SerialNumber: syz
07:41:49 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@broadcast, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3219.033397][T30013] usb 4-1: USB disconnect, device number 73
[ 3219.043607][T15167] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3219.051008][T30013] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3219.231993][ T5391] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3219.351914][T19259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3219.358934][T19259] ath9k_htc: Failed to initialize the device
[ 3219.435029][T30013] usb 6-1: USB disconnect, device number 122
[ 3219.531926][T13485] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3219.541374][T13485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3219.555900][T13485] usb 2-1: Product: syz
[ 3219.560059][T13485] usb 2-1: Manufacturer: syz
[ 3219.569581][T13485] usb 2-1: SerialNumber: syz
[ 3219.602085][    T5] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3219.609111][    T5] ath9k_htc: Failed to initialize the device
[ 3219.611922][T15167] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3219.625195][T13485] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3219.653325][T32518] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 3219.819600][T17906] usb 3-1: USB disconnect, device number 52
07:41:50 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000f80)=0x3ff)

07:41:50 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3219.908211][ T9691] usb 1-1: USB disconnect, device number 80
[ 3219.915405][ T9691] usb 1-1: ath9k_htc: USB layer deinitialized
07:41:50 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x10001}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

[ 3220.113243][T21295] usb 5-1: USB disconnect, device number 36
[ 3220.128253][T21295] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3220.172171][T32518] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3220.181573][T32518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3220.192494][T13485] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3220.202494][T32518] usb 4-1: Product: syz
[ 3220.207380][T32518] usb 4-1: Manufacturer: syz
[ 3220.213528][T32518] usb 4-1: SerialNumber: syz
[ 3220.252164][T32518] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:41:51 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3220.311855][ T5391] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3220.318990][ T5391] ath9k_htc: Failed to initialize the device
[ 3220.340337][T30013] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3220.511841][    T7] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 3220.701824][T21295] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 3220.713024][T15167] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3220.717646][T30013] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 3220.720922][T15167] ath9k_htc: Failed to initialize the device
[ 3220.736459][T17906] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3220.831952][T32518] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3221.112051][T17906] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 3221.131946][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3221.141173][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3221.150844][    T7] usb 1-1: Product: syz
[ 3221.156327][    T7] usb 1-1: Manufacturer: syz
[ 3221.162063][    T7] usb 1-1: SerialNumber: syz
[ 3221.212101][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3221.221779][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3221.231462][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3221.240765][T21295] usb 5-1: Product: syz
[ 3221.244951][T21295] usb 5-1: Manufacturer: syz
[ 3221.249709][T21295] usb 5-1: SerialNumber: syz
[ 3221.271849][T13485] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3221.278870][T13485] ath9k_htc: Failed to initialize the device
[ 3221.292367][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3221.361844][T30013] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3221.370973][T30013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3221.381977][T30013] usb 6-1: Product: syz
[ 3221.386267][T30013] usb 6-1: Manufacturer: syz
[ 3221.391228][T30013] usb 6-1: SerialNumber: syz
[ 3221.432485][T30013] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3221.691777][T17906] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3221.701333][T17906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3221.710552][T17906] usb 3-1: Product: syz
[ 3221.716073][T17906] usb 3-1: Manufacturer: syz
[ 3221.721810][T17906] usb 3-1: SerialNumber: syz
07:41:52 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3221.761862][T19259] usb 2-1: USB disconnect, device number 38
[ 3221.773565][T17906] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3221.782191][T19259] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3221.861753][T25325] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3221.882797][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3221.911804][T32518] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3221.918704][T32518] ath9k_htc: Failed to initialize the device
07:41:52 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@broadcast, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3222.079676][T13485] usb 4-1: USB disconnect, device number 74
[ 3222.096075][T13485] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3222.113258][ T5391] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3222.316339][T19259] usb 6-1: USB disconnect, device number 123
[ 3222.381801][T30013] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 3222.421964][T24739] udc-core: couldn't find an available UDC or it's busy
[ 3222.428958][T24739] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3222.442659][T17906] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3222.644268][T21295] usb 3-1: USB disconnect, device number 53
[ 3222.691814][T13485] usb 4-1: new high-speed USB device number 75 using dummy_hcd
07:41:53 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3222.871722][T25325] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3222.880713][T25325] ath9k_htc: Failed to initialize the device
[ 3222.941749][T30013] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3222.950969][T30013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3222.963669][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3222.970500][    T7] ath9k_htc: Failed to initialize the device
[ 3222.976931][T30013] usb 2-1: Product: syz
[ 3222.981124][T30013] usb 2-1: Manufacturer: syz
[ 3222.987325][T30013] usb 2-1: SerialNumber: syz
[ 3223.031980][T30013] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:41:53 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3223.191644][ T5391] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3223.198616][ T5391] ath9k_htc: Failed to initialize the device
[ 3223.211014][T19259] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3223.217111][T13485] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3223.227494][T13485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3223.237134][T13485] usb 4-1: Product: syz
[ 3223.242490][T13485] usb 4-1: Manufacturer: syz
[ 3223.247107][T13485] usb 4-1: SerialNumber: syz
[ 3223.291919][T13485] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:41:54 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000f80)=0x3ff)

07:41:54 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3223.461168][T15167] usb 1-1: USB disconnect, device number 81
[ 3223.474675][T15167] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3223.497178][    T5] usb 5-1: USB disconnect, device number 37
[ 3223.514607][    T5] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3223.524713][T17906] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3223.531551][T17906] ath9k_htc: Failed to initialize the device
[ 3223.539372][T21295] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3223.571758][T19259] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 3223.681624][T30013] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3223.871829][T13485] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3223.891906][T21295] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 3224.081583][    T7] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 3224.091625][T19259] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3224.100686][T19259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3224.110112][T19259] usb 6-1: Product: syz
[ 3224.114759][T19259] usb 6-1: Manufacturer: syz
[ 3224.119385][T19259] usb 6-1: SerialNumber: syz
[ 3224.151828][    T5] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 3224.162101][T19259] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3224.411808][T21295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3224.420974][T21295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3224.435456][T21295] usb 3-1: Product: syz
[ 3224.439723][T21295] usb 3-1: Manufacturer: syz
[ 3224.450002][T21295] usb 3-1: SerialNumber: syz
[ 3224.491870][T21295] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3224.651591][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3224.662383][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3224.670413][    T7] usb 1-1: Product: syz
[ 3224.675337][    T7] usb 1-1: Manufacturer: syz
[ 3224.680937][    T7] usb 1-1: SerialNumber: syz
[ 3224.721637][T30013] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3224.728480][T30013] ath9k_htc: Failed to initialize the device
[ 3224.731602][T19259] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3224.735950][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3224.752214][    T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3224.761223][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3224.778887][    T5] usb 5-1: Product: syz
[ 3224.784583][    T5] usb 5-1: Manufacturer: syz
[ 3224.790454][    T5] usb 5-1: SerialNumber: syz
[ 3224.832178][    T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3224.937311][T25325] usb 6-1: USB disconnect, device number 124
[ 3224.951866][T13485] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3224.959090][T13485] ath9k_htc: Failed to initialize the device
[ 3225.061506][T21295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:41:55 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3225.120393][T32518] usb 4-1: USB disconnect, device number 75
[ 3225.138585][T32518] usb 4-1: ath9k_htc: USB layer deinitialized
07:41:56 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3225.251252][ T5391] usb 2-1: USB disconnect, device number 39
[ 3225.258479][ T5391] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3225.272999][    T5] usb 3-1: USB disconnect, device number 54
07:41:56 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0)
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3225.461491][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3225.501569][T17906] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3225.721566][T32518] usb 4-1: new high-speed USB device number 76 using dummy_hcd
07:41:56 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3225.831495][T19259] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3225.838383][T19259] ath9k_htc: Failed to initialize the device
[ 3225.849967][T25325] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3225.881581][ T5391] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 3226.071532][T21295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3226.078664][T21295] ath9k_htc: Failed to initialize the device
[ 3226.090119][    T5] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3226.211422][T25325] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 3226.241441][T32518] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3226.250529][T32518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3226.264224][T32518] usb 4-1: Product: syz
[ 3226.268468][T32518] usb 4-1: Manufacturer: syz
[ 3226.278693][T32518] usb 4-1: SerialNumber: syz
[ 3226.321896][T32518] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3226.431519][ T5391] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3226.440634][ T5391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3226.448700][ T5391] usb 2-1: Product: syz
[ 3226.454766][ T5391] usb 2-1: Manufacturer: syz
[ 3226.460678][ T5391] usb 2-1: SerialNumber: syz
[ 3226.465378][    T5] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 3226.473038][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3226.479979][    T7] ath9k_htc: Failed to initialize the device
[ 3226.521860][ T5391] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3226.551401][T17906] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3226.558292][T17906] ath9k_htc: Failed to initialize the device
[ 3226.741641][T25325] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3226.750662][T25325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3226.765809][T25325] usb 6-1: Product: syz
[ 3226.769961][T25325] usb 6-1: Manufacturer: syz
[ 3226.780367][T25325] usb 6-1: SerialNumber: syz
[ 3226.822062][T25325] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3226.901438][T32518] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:41:57 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3227.034193][T30013] usb 1-1: USB disconnect, device number 82
[ 3227.052605][T30013] usb 1-1: ath9k_htc: USB layer deinitialized
07:41:57 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3227.074742][T19259] usb 5-1: USB disconnect, device number 38
[ 3227.091721][    T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3227.103019][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3227.107668][T19259] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3227.123427][    T5] usb 3-1: Product: syz
[ 3227.127887][    T5] usb 3-1: Manufacturer: syz
[ 3227.138135][    T5] usb 3-1: SerialNumber: syz
[ 3227.181413][ T5391] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3227.190679][    T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3227.391385][T25325] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3227.594400][T30013] usb 6-1: USB disconnect, device number 125
[ 3227.651391][T19259] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 3227.701336][T15167] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 3227.871411][    T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3227.991388][T32518] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3227.998470][T32518] ath9k_htc: Failed to initialize the device
07:41:58 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0)
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3228.073361][T11949] usb 3-1: USB disconnect, device number 55
07:41:58 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3228.146374][T13485] usb 4-1: USB disconnect, device number 76
[ 3228.158151][T13485] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3228.172210][T19259] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3228.185438][T19259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3228.196506][T19259] usb 1-1: Product: syz
[ 3228.200656][T19259] usb 1-1: Manufacturer: syz
[ 3228.208290][T19259] usb 1-1: SerialNumber: syz
[ 3228.222790][T15167] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3228.232742][T15167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3228.240731][T15167] usb 5-1: Product: syz
[ 3228.241277][ T5391] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3228.244925][T15167] usb 5-1: Manufacturer: syz
[ 3228.257860][T19259] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3228.266695][ T5391] ath9k_htc: Failed to initialize the device
[ 3228.266699][T15167] usb 5-1: SerialNumber: syz
[ 3228.322522][T15167] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3228.471288][T25325] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3228.471379][T25325] ath9k_htc: Failed to initialize the device
[ 3228.484405][T30013] usb 6-1: ath9k_htc: USB layer deinitialized
07:41:59 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:41:59 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3228.747202][T17906] usb 2-1: USB disconnect, device number 40
[ 3228.754567][T17906] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3228.770543][T13485] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 3228.831244][T30013] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 3228.844150][T19259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3228.891312][T15167] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3228.951330][    T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3228.958331][    T5] ath9k_htc: Failed to initialize the device
[ 3228.967275][T11949] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3229.291305][T13485] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3229.300561][T13485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3229.309907][T13485] usb 4-1: Product: syz
[ 3229.315400][T13485] usb 4-1: Manufacturer: syz
[ 3229.321331][T13485] usb 4-1: SerialNumber: syz
[ 3229.332006][T11949] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 3229.361219][T32518] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 3229.369076][T13485] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3229.401839][T30013] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3229.410860][T30013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3229.420007][T30013] usb 6-1: Product: syz
[ 3229.425543][T30013] usb 6-1: Manufacturer: syz
[ 3229.432230][T30013] usb 6-1: SerialNumber: syz
[ 3229.471470][T30013] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3229.881199][T32518] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3229.890257][T32518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3229.904276][T32518] usb 2-1: Product: syz
[ 3229.908489][T32518] usb 2-1: Manufacturer: syz
[ 3229.918988][T15167] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3229.921248][T11949] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3229.925839][T19259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3229.936425][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3229.941935][T13485] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3229.949873][T11949] usb 3-1: Product: syz
[ 3229.962162][T32518] usb 2-1: SerialNumber: syz
[ 3229.964521][T11949] usb 3-1: Manufacturer: syz
[ 3229.967727][T15167] ath9k_htc: Failed to initialize the device
[ 3229.972612][T11949] usb 3-1: SerialNumber: syz
[ 3229.991280][T19259] ath9k_htc: Failed to initialize the device
[ 3230.021568][T32518] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3230.031713][T11949] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3230.141181][T30013] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3230.353160][    T5] usb 6-1: USB disconnect, device number 126
07:42:01 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)

[ 3230.408747][T17906] usb 1-1: USB disconnect, device number 83
[ 3230.416821][T17906] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:01 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@broadcast, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3230.466962][T25325] usb 5-1: USB disconnect, device number 39
[ 3230.475337][T25325] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3230.581202][T32518] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3230.691194][T11949] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:01 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0)
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3230.900691][T15167] usb 3-1: USB disconnect, device number 56
[ 3231.021122][T17906] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 3231.032418][T13485] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3231.039305][T13485] ath9k_htc: Failed to initialize the device
[ 3231.101132][    T7] usb 5-1: new high-speed USB device number 40 using dummy_hcd
07:42:01 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3231.179540][ T9691] usb 4-1: USB disconnect, device number 77
[ 3231.191996][ T9691] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3231.199221][T30013] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3231.208362][T30013] ath9k_htc: Failed to initialize the device
[ 3231.214969][    T5] usb 6-1: ath9k_htc: USB layer deinitialized
07:42:02 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3231.591053][T32518] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3231.598074][T32518] ath9k_htc: Failed to initialize the device
[ 3231.611525][    T5] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 3231.631452][T17906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3231.640466][T17906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3231.648505][T17906] usb 1-1: Product: syz
[ 3231.652752][T17906] usb 1-1: Manufacturer: syz
[ 3231.658003][T17906] usb 1-1: SerialNumber: syz
[ 3231.681056][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3231.690092][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3231.700290][    T7] usb 5-1: Product: syz
[ 3231.705553][    T7] usb 5-1: Manufacturer: syz
[ 3231.710842][    T7] usb 5-1: SerialNumber: syz
[ 3231.716168][T17906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3231.751068][T11949] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3231.758070][T11949] ath9k_htc: Failed to initialize the device
[ 3231.764391][    T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3231.775052][T15167] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3231.811292][T16965] usb 4-1: new high-speed USB device number 78 using dummy_hcd
07:42:02 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001000)="271b30c833fa1cb69170f2d2133f56a34feef1af912420ceb87194843c18d1d9f4c8c90bdd8726fe26108038fbfc0d5e65fb61c59d54b0adca394e3063deabd6b437e9aec00b3e07a57c531e98716808f6f47938a75c7d6d6260caee247d8df70113f25096a9f9c96a53fa4d0a933f90b96023a275a9aa143d05669c85")

[ 3232.131019][T15167] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 3232.149051][T13485] usb 2-1: USB disconnect, device number 41
[ 3232.162486][T13485] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3232.201307][    T5] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3232.210405][    T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3232.224117][    T5] usb 6-1: Product: syz
[ 3232.228384][    T5] usb 6-1: Manufacturer: syz
[ 3232.237707][    T5] usb 6-1: SerialNumber: syz
[ 3232.281210][    T5] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3232.401303][T17906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3232.410335][T16965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3232.419860][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3232.429178][T16965] usb 4-1: Product: syz
[ 3232.434469][T16965] usb 4-1: Manufacturer: syz
[ 3232.439060][T16965] usb 4-1: SerialNumber: syz
[ 3232.461030][    T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3232.501367][T16965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3232.660989][T15167] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3232.675708][T15167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3232.688634][T15167] usb 3-1: Product: syz
[ 3232.695773][T15167] usb 3-1: Manufacturer: syz
[ 3232.700343][T15167] usb 3-1: SerialNumber: syz
[ 3232.741234][T15167] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3232.761010][T30013] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 3232.951106][    T5] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3233.153901][T20788] usb 6-1: USB disconnect, device number 127
[ 3233.161549][T16965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3233.300984][T15167] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3233.351054][T30013] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3233.360118][T30013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3233.368173][T30013] usb 2-1: Product: syz
[ 3233.372696][T30013] usb 2-1: Manufacturer: syz
[ 3233.377366][T30013] usb 2-1: SerialNumber: syz
[ 3233.431060][T17906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3233.438328][T30013] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3233.446451][T17906] ath9k_htc: Failed to initialize the device
[ 3233.504303][T32518] usb 3-1: USB disconnect, device number 57
[ 3233.512319][    T7] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3233.520411][    T7] ath9k_htc: Failed to initialize the device
07:42:04 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:04 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@broadcast, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3233.693775][T11949] usb 5-1: USB disconnect, device number 40
[ 3233.711952][T11949] usb 5-1: ath9k_htc: USB layer deinitialized
07:42:04 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)

07:42:04 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3233.972982][T11949] usb 1-1: USB disconnect, device number 84
[ 3233.991251][    T5] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3233.998345][T11949] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3234.004448][    T5] ath9k_htc: Failed to initialize the device
[ 3234.010722][T20788] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3234.071001][ T5391] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3234.230943][T16965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3234.238133][T16965] ath9k_htc: Failed to initialize the device
[ 3234.300869][    T7] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 3234.310872][T15167] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3234.318004][T15167] ath9k_htc: Failed to initialize the device
[ 3234.324091][T32518] usb 3-1: ath9k_htc: USB layer deinitialized
07:42:05 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3234.380983][T11949] usb 4-1: USB disconnect, device number 78
[ 3234.393813][T20788] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 3234.401351][T11949] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3234.640970][T17906] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 3234.680867][T32518] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 3234.840896][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3234.849957][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3234.858127][    T7] usb 5-1: Product: syz
[ 3234.863963][    T7] usb 5-1: Manufacturer: syz
[ 3234.868938][    T7] usb 5-1: SerialNumber: syz
[ 3234.910964][    T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3234.941250][T20788] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3234.950513][T20788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3234.958744][T20788] usb 6-1: Product: syz
[ 3234.963602][T20788] usb 6-1: Manufacturer: syz
[ 3234.968459][T20788] usb 6-1: SerialNumber: syz
[ 3234.992091][T13485] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 3235.011059][T20788] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3235.110816][ T5391] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3235.117708][ T5391] ath9k_htc: Failed to initialize the device
[ 3235.200893][T32518] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3235.209939][T32518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3235.219359][T32518] usb 3-1: Product: syz
[ 3235.224559][T32518] usb 3-1: Manufacturer: syz
[ 3235.230984][T32518] usb 3-1: SerialNumber: syz
[ 3235.253002][T17906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3235.262027][T17906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3235.269997][T17906] usb 1-1: Product: syz
[ 3235.272482][T32518] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3235.276480][T17906] usb 1-1: Manufacturer: syz
[ 3235.286922][T17906] usb 1-1: SerialNumber: syz
[ 3235.353062][T17906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3235.511225][T13485] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3235.520361][T13485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3235.528502][T13485] usb 4-1: Product: syz
[ 3235.534871][T13485] usb 4-1: Manufacturer: syz
[ 3235.539477][T13485] usb 4-1: SerialNumber: syz
[ 3235.581282][T13485] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3235.596735][    T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:06 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3235.637634][T11949] usb 2-1: USB disconnect, device number 42
[ 3235.644720][T11949] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3235.691020][T20788] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3235.860771][T32518] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3235.894146][T11949] usb 6-1: USB disconnect, device number 2
[ 3235.990863][T17906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3236.062660][    T5] usb 3-1: USB disconnect, device number 58
[ 3236.140736][T13485] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3236.240897][T15167] usb 2-1: new high-speed USB device number 43 using dummy_hcd
07:42:07 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:07 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3236.640799][    T7] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3236.647859][    T7] ath9k_htc: Failed to initialize the device
[ 3236.710733][T20788] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3236.717854][T20788] ath9k_htc: Failed to initialize the device
[ 3236.727192][T11949] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3236.760794][T15167] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3236.769932][T15167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3236.779510][T15167] usb 2-1: Product: syz
[ 3236.787676][T15167] usb 2-1: Manufacturer: syz
[ 3236.800596][T15167] usb 2-1: SerialNumber: syz
07:42:07 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@broadcast, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3236.819920][T16965] usb 5-1: USB disconnect, device number 41
[ 3236.836657][T16965] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3236.840999][T15167] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3236.870692][T32518] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3236.877639][T32518] ath9k_htc: Failed to initialize the device
[ 3236.883835][    T5] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3237.030692][T17906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3237.038036][T17906] ath9k_htc: Failed to initialize the device
[ 3237.090761][T11949] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 3237.190690][T13485] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3237.197583][T13485] ath9k_htc: Failed to initialize the device
[ 3237.270729][    T5] usb 3-1: new high-speed USB device number 59 using dummy_hcd
07:42:08 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3237.410763][T15167] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3237.430227][    T7] usb 4-1: USB disconnect, device number 79
[ 3237.431297][ T9691] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 3237.448140][    T7] usb 4-1: ath9k_htc: USB layer deinitialized
07:42:08 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)

[ 3237.554502][T19259] usb 1-1: USB disconnect, device number 85
[ 3237.571284][T19259] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3237.700655][T11949] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3237.710224][T11949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3237.718213][T11949] usb 6-1: Product: syz
[ 3237.723122][T11949] usb 6-1: Manufacturer: syz
[ 3237.728483][T11949] usb 6-1: SerialNumber: syz
[ 3237.770928][T11949] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3237.870657][    T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3237.879857][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3237.894568][    T5] usb 3-1: Product: syz
[ 3237.898765][    T5] usb 3-1: Manufacturer: syz
[ 3237.909486][    T5] usb 3-1: SerialNumber: syz
[ 3237.961132][    T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3237.980630][ T9691] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3237.989703][ T9691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3237.997887][ T9691] usb 5-1: Product: syz
[ 3238.003267][ T9691] usb 5-1: Manufacturer: syz
[ 3238.009894][ T9691] usb 5-1: SerialNumber: syz
[ 3238.050952][ T9691] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3238.064710][T20788] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 3238.160629][T19259] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 3238.450605][T11949] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3238.470621][T15167] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3238.477575][T15167] ath9k_htc: Failed to initialize the device
[ 3238.620580][ T9691] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3238.631096][    T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3238.662587][    T7] usb 6-1: USB disconnect, device number 3
[ 3238.678995][T17906] usb 2-1: USB disconnect, device number 43
[ 3238.685513][T20788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3238.691497][T19259] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3238.695197][T17906] usb 2-1: ath9k_htc: USB layer deinitialized
07:42:09 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3238.710018][T20788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3238.717321][T19259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3238.724830][T20788] usb 4-1: Product: syz
[ 3238.730969][T20788] usb 4-1: Manufacturer: syz
[ 3238.736998][T20788] usb 4-1: SerialNumber: syz
[ 3238.750930][T19259] usb 1-1: Product: syz
[ 3238.755072][T19259] usb 1-1: Manufacturer: syz
[ 3238.759641][T19259] usb 1-1: SerialNumber: syz
[ 3238.801258][T20788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3238.811129][T19259] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3238.842632][T13485] usb 3-1: USB disconnect, device number 59
07:42:09 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:10 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3239.350542][T16965] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 3239.380779][T19259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3239.500591][T20788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3239.510512][T11949] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3239.517388][T11949] ath9k_htc: Failed to initialize the device
[ 3239.524399][    T7] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3239.670531][ T9691] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3239.677554][ T9691] ath9k_htc: Failed to initialize the device
[ 3239.680491][    T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3239.690375][    T5] ath9k_htc: Failed to initialize the device
[ 3239.698644][T13485] usb 3-1: ath9k_htc: USB layer deinitialized
07:42:10 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)

07:42:10 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3239.866054][T32518] usb 5-1: USB disconnect, device number 42
[ 3239.881561][T32518] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3239.970527][T16965] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3239.979755][T16965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3239.990851][T16965] usb 2-1: Product: syz
[ 3239.995546][T16965] usb 2-1: Manufacturer: syz
[ 3240.000971][T16965] usb 2-1: SerialNumber: syz
[ 3240.050481][T13485] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 3240.050731][T16965] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3240.390561][T19259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3240.398764][T19259] ath9k_htc: Failed to initialize the device
[ 3240.490475][    T7] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 3240.550520][T20788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3240.557568][T20788] ath9k_htc: Failed to initialize the device
[ 3240.570844][T13485] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3240.579855][T13485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3240.588058][T13485] usb 3-1: Product: syz
[ 3240.593936][T13485] usb 3-1: Manufacturer: syz
07:42:11 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3240.598502][T13485] usb 3-1: SerialNumber: syz
[ 3240.641017][T13485] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3240.670549][T16965] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:11 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3240.722620][T32518] usb 4-1: USB disconnect, device number 80
[ 3240.740710][T32518] usb 4-1: ath9k_htc: USB layer deinitialized
07:42:11 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3240.946021][T32518] usb 1-1: USB disconnect, device number 86
[ 3240.960668][T32518] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3241.100491][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3241.109535][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3241.123059][    T7] usb 5-1: Product: syz
[ 3241.127318][    T7] usb 5-1: Manufacturer: syz
[ 3241.137384][    T7] usb 5-1: SerialNumber: syz
[ 3241.180614][    T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3241.211978][T13485] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:12 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3241.330382][T15167] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 3241.412007][T19259] usb 3-1: USB disconnect, device number 60
[ 3241.550400][T20788] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 3241.750351][T16965] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3241.757302][T16965] ath9k_htc: Failed to initialize the device
[ 3241.780428][    T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3241.830479][ T9006] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 3241.850780][T15167] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3241.859920][T15167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3241.874428][T15167] usb 4-1: Product: syz
07:42:12 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:12 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3241.878585][T15167] usb 4-1: Manufacturer: syz
[ 3241.889089][T15167] usb 4-1: SerialNumber: syz
[ 3241.893810][T11949] usb 2-1: USB disconnect, device number 44
[ 3241.902184][T11949] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3241.940765][T15167] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3242.090394][T20788] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3242.099464][T20788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3242.107477][T20788] usb 1-1: Product: syz
[ 3242.112997][T20788] usb 1-1: Manufacturer: syz
[ 3242.118912][T20788] usb 1-1: SerialNumber: syz
[ 3242.171361][T20788] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3242.230344][T13485] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3242.237240][T13485] ath9k_htc: Failed to initialize the device
[ 3242.246538][T19259] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3242.450356][ T9006] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3242.459701][ T9006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3242.473368][ T9006] usb 6-1: Product: syz
[ 3242.477509][ T9006] usb 6-1: Manufacturer: syz
[ 3242.487001][ T9006] usb 6-1: SerialNumber: syz
[ 3242.510416][T15167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3242.541574][ T9006] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:13 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:13 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3242.790354][    T7] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3242.797369][    T7] ath9k_htc: Failed to initialize the device
[ 3242.860451][T20788] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3243.150392][ T9006] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:14 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:14 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:14 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3243.347873][T19259] usb 5-1: USB disconnect, device number 43
[ 3243.358872][T13485] usb 6-1: USB disconnect, device number 4
[ 3243.366309][T19259] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3243.590313][T15167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3243.597217][T15167] ath9k_htc: Failed to initialize the device
07:42:14 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3243.747693][T19259] usb 4-1: USB disconnect, device number 81
[ 3243.754700][T19259] usb 4-1: ath9k_htc: USB layer deinitialized
07:42:14 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3243.910963][T20788] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3243.917826][T20788] ath9k_htc: Failed to initialize the device
[ 3243.980208][ T9691] usb 5-1: new high-speed USB device number 44 using dummy_hcd
07:42:14 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)

[ 3244.230311][ T9006] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3244.237297][ T9006] ath9k_htc: Failed to initialize the device
[ 3244.248456][T13485] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3244.360222][T11949] usb 4-1: new high-speed USB device number 82 using dummy_hcd
07:42:15 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:15 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:15 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:15 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3244.422927][T19259] usb 1-1: USB disconnect, device number 87
[ 3244.440677][T19259] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:15 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:15 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3244.501635][ T9691] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3244.510865][ T9691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3244.519229][ T9691] usb 5-1: Product: syz
[ 3244.526294][ T9691] usb 5-1: Manufacturer: syz
[ 3244.531018][ T9691] usb 5-1: SerialNumber: syz
[ 3244.570523][ T9691] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3244.600160][T13485] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 3244.950154][T11949] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3244.959303][T11949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3244.968672][T11949] usb 4-1: Product: syz
[ 3244.973651][T11949] usb 4-1: Manufacturer: syz
[ 3244.978672][T11949] usb 4-1: SerialNumber: syz
[ 3245.020402][T11949] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3245.033531][T15167] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 3245.120641][T13485] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3245.129758][T13485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3245.139019][ T9691] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3245.149529][T13485] usb 6-1: Product: syz
[ 3245.154270][T13485] usb 6-1: Manufacturer: syz
[ 3245.158859][T13485] usb 6-1: SerialNumber: syz
[ 3245.200396][T13485] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3245.560187][T15167] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3245.569256][T15167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3245.577618][T15167] usb 1-1: Product: syz
[ 3245.585277][T15167] usb 1-1: Manufacturer: syz
[ 3245.591944][T15167] usb 1-1: SerialNumber: syz
[ 3245.630416][T15167] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3245.690103][T11949] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3245.760138][T13485] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3245.963780][T19259] usb 6-1: USB disconnect, device number 5
[ 3246.190070][T15167] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3246.230070][ T9691] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3246.237419][ T9691] ath9k_htc: Failed to initialize the device
07:42:17 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:17 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:17 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})

[ 3246.406801][T25325] usb 5-1: USB disconnect, device number 44
[ 3246.428885][T25325] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3246.710056][T11949] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3246.716937][T11949] ath9k_htc: Failed to initialize the device
[ 3246.790038][T13485] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3246.796912][T13485] ath9k_htc: Failed to initialize the device
[ 3246.805646][T19259] usb 6-1: ath9k_htc: USB layer deinitialized
07:42:17 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:17 executing program 2:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:17 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3246.904650][T20788] usb 4-1: USB disconnect, device number 82
[ 3246.931651][T20788] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3247.010018][T25325] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 3247.270153][T15167] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3247.277260][T15167] ath9k_htc: Failed to initialize the device
[ 3247.410093][T13485] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 3247.519970][T20788] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 3247.531481][T25325] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3247.541966][T25325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3247.550094][T25325] usb 5-1: Product: syz
[ 3247.554268][T25325] usb 5-1: Manufacturer: syz
[ 3247.559335][T25325] usb 5-1: SerialNumber: syz
[ 3247.600130][T25325] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:18 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:18 executing program 2:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:18 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})

07:42:18 executing program 2:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:18 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0)

[ 3247.753401][T32518] usb 1-1: USB disconnect, device number 88
[ 3247.773790][T32518] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:18 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3247.939996][T13485] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3247.949076][T13485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3247.959458][T13485] usb 6-1: Product: syz
[ 3247.964244][T13485] usb 6-1: Manufacturer: syz
[ 3247.971337][T13485] usb 6-1: SerialNumber: syz
[ 3248.010186][T13485] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3248.100165][T20788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3248.109207][T20788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3248.124467][T20788] usb 4-1: Product: syz
[ 3248.128624][T20788] usb 4-1: Manufacturer: syz
[ 3248.138858][T20788] usb 4-1: SerialNumber: syz
[ 3248.160311][T25325] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3248.190110][T20788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3248.309906][T19259] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 3248.369944][    T7] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 3248.580140][T13485] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3248.782597][T11949] usb 6-1: USB disconnect, device number 6
[ 3248.819903][T20788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3248.829919][T19259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3248.842319][T19259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3248.850400][T19259] usb 3-1: Product: syz
[ 3248.854582][T19259] usb 3-1: Manufacturer: syz
[ 3248.859269][T19259] usb 3-1: SerialNumber: syz
[ 3248.901476][T19259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3248.950810][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3248.959843][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3248.967877][    T7] usb 1-1: Product: syz
[ 3248.975216][    T7] usb 1-1: Manufacturer: syz
[ 3248.980904][    T7] usb 1-1: SerialNumber: syz
[ 3249.040189][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3249.189850][T25325] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3249.196801][T25325] ath9k_htc: Failed to initialize the device
07:42:20 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:20 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)

07:42:20 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000b80))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3249.442805][T15167] usb 5-1: USB disconnect, device number 45
[ 3249.465713][T15167] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3249.471913][T19259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3249.589830][T13485] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3249.596724][T13485] ath9k_htc: Failed to initialize the device
[ 3249.608299][T11949] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3249.677303][ T9691] usb 3-1: USB disconnect, device number 61
[ 3249.729852][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3249.829920][T20788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3249.836943][T20788] ath9k_htc: Failed to initialize the device
07:42:20 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3250.032257][T25325] usb 4-1: USB disconnect, device number 83
[ 3250.044217][T25325] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3250.059770][T16965] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 3250.090022][T11949] usb 6-1: new high-speed USB device number 7 using dummy_hcd
07:42:20 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})

07:42:20 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[ 3250.549754][T19259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3250.556766][T19259] ath9k_htc: Failed to initialize the device
[ 3250.568196][ T9691] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3250.639789][T25325] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 3250.649961][T16965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3250.661547][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3250.669650][T16965] usb 5-1: Product: syz
[ 3250.675363][T11949] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3250.685740][T16965] usb 5-1: Manufacturer: syz
[ 3250.690393][T16965] usb 5-1: SerialNumber: syz
[ 3250.690554][T11949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3250.704959][T11949] usb 6-1: Product: syz
[ 3250.712208][T11949] usb 6-1: Manufacturer: syz
[ 3250.718101][T11949] usb 6-1: SerialNumber: syz
[ 3250.741875][T16965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3250.762891][T11949] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3250.789835][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3250.796688][    T7] ath9k_htc: Failed to initialize the device
[ 3251.159716][T25325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3251.168903][T25325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3251.176958][T25325] usb 4-1: Product: syz
[ 3251.181945][T25325] usb 4-1: Manufacturer: syz
[ 3251.188027][T25325] usb 4-1: SerialNumber: syz
[ 3251.229969][T25325] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:22 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:22 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

07:42:22 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

[ 3251.293301][T13485] usb 1-1: USB disconnect, device number 89
[ 3251.305819][T13485] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3251.389719][T16965] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3251.398710][T11949] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3251.602492][    T7] usb 6-1: USB disconnect, device number 7
[ 3251.789710][T25325] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3251.804915][T13485] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 3251.909695][T20788] usb 1-1: new high-speed USB device number 90 using dummy_hcd
07:42:22 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

07:42:22 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000b80))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3252.329785][T13485] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3252.338961][T13485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3252.347077][T13485] usb 3-1: Product: syz
[ 3252.353092][T13485] usb 3-1: Manufacturer: syz
[ 3252.360198][T13485] usb 3-1: SerialNumber: syz
[ 3252.399982][T13485] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3252.479658][T16965] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3252.486691][T11949] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3252.493769][T11949] ath9k_htc: Failed to initialize the device
[ 3252.499951][T16965] ath9k_htc: Failed to initialize the device
[ 3252.507986][    T7] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3252.540361][T20788] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3252.549438][T20788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3252.557530][T20788] usb 1-1: Product: syz
[ 3252.561920][T20788] usb 1-1: Manufacturer: syz
[ 3252.566586][T20788] usb 1-1: SerialNumber: syz
07:42:23 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3252.607904][T19259] usb 5-1: USB disconnect, device number 46
[ 3252.620220][T20788] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3252.628737][T19259] usb 5-1: ath9k_htc: USB layer deinitialized
07:42:23 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[ 3252.869678][T25325] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3252.876617][T25325] ath9k_htc: Failed to initialize the device
[ 3252.879656][    T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 3252.969667][T13485] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:23 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3253.077323][T16965] usb 4-1: USB disconnect, device number 84
[ 3253.097592][T16965] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3253.179575][T19259] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 3253.209630][T20788] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:24 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[ 3253.470374][    T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3253.479395][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3253.498546][    T7] usb 6-1: Product: syz
[ 3253.502939][    T7] usb 6-1: Manufacturer: syz
[ 3253.508190][    T7] usb 6-1: SerialNumber: syz
[ 3253.526164][T25800] udc-core: couldn't find an available UDC or it's busy
[ 3253.533368][T25800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3253.559806][    T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3253.669631][T15167] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 3253.699566][T19259] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3253.708791][T19259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3253.723629][T19259] usb 5-1: Product: syz
[ 3253.727765][T19259] usb 5-1: Manufacturer: syz
[ 3253.738100][T19259] usb 5-1: SerialNumber: syz
[ 3253.779852][T19259] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3253.989542][T13485] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3253.996596][T13485] ath9k_htc: Failed to initialize the device
07:42:24 executing program 1:
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[ 3254.209625][T15167] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3254.209805][    T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3254.218926][T15167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3254.243710][T20788] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3254.253082][T15167] usb 4-1: Product: syz
07:42:25 executing program 1:
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000b80))

[ 3254.253901][T20788] ath9k_htc: Failed to initialize the device
[ 3254.260840][T15167] usb 4-1: Manufacturer: syz
[ 3254.268369][T15167] usb 4-1: SerialNumber: syz
07:42:25 executing program 1:
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)

[ 3254.310079][T15167] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3254.359516][T19259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3254.421567][ T9006] usb 6-1: USB disconnect, device number 8
[ 3254.552439][T11949] usb 3-1: USB disconnect, device number 62
[ 3254.571325][T11949] usb 3-1: ath9k_htc: USB layer deinitialized
07:42:25 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:42:25 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

07:42:25 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

[ 3254.771322][T16965] usb 1-1: USB disconnect, device number 90
[ 3254.799728][T16965] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:25 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000b80))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3254.879499][T15167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3255.269412][    T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3255.269434][T13485] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 3255.276457][    T7] ath9k_htc: Failed to initialize the device
[ 3255.292532][ T9006] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3255.319642][ T9691] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 3255.369416][T25325] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 3255.429423][T19259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3255.436562][T19259] ath9k_htc: Failed to initialize the device
[ 3255.659513][ T9006] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 3255.799518][T13485] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3255.808645][T13485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3255.816993][T13485] usb 3-1: Product: syz
[ 3255.822925][T13485] usb 3-1: Manufacturer: syz
[ 3255.828726][T13485] usb 3-1: SerialNumber: syz
[ 3255.850130][ T9691] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3255.859211][ T9691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3255.868660][ T9691] usb 2-1: Product: syz
[ 3255.874418][T13485] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3255.884825][ T9691] usb 2-1: Manufacturer: syz
[ 3255.890966][ T9691] usb 2-1: SerialNumber: syz
[ 3255.899487][T25325] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3255.908511][T25325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3255.917945][T15167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3255.926345][T15167] ath9k_htc: Failed to initialize the device
[ 3255.933000][ T9691] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:26 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3255.952441][T25325] usb 1-1: Product: syz
[ 3255.956606][T25325] usb 1-1: Manufacturer: syz
[ 3255.962678][T25325] usb 1-1: SerialNumber: syz
[ 3255.972236][T21295] usb 5-1: USB disconnect, device number 47
[ 3255.981356][T21295] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3256.009713][T25325] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:26 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, 0x0)

[ 3256.106717][T20788] usb 4-1: USB disconnect, device number 85
[ 3256.125465][T20788] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3256.280833][ T9006] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3256.290344][ T9006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3256.298317][ T9006] usb 6-1: Product: syz
[ 3256.311004][ T9006] usb 6-1: Manufacturer: syz
[ 3256.319807][ T9006] usb 6-1: SerialNumber: syz
[ 3256.369558][ T9006] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3256.450506][T13485] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3256.519483][ T9691] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3256.569328][T25325] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3256.579409][T19273] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 3256.699419][T21295] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 3257.008027][T25914] udc-core: couldn't find an available UDC or it's busy
[ 3257.015097][T25914] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3257.029300][ T9006] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3257.109469][T19273] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3257.118508][T19273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3257.131822][T19273] usb 5-1: Product: syz
[ 3257.136009][T19273] usb 5-1: Manufacturer: syz
[ 3257.145667][T19273] usb 5-1: SerialNumber: syz
[ 3257.189895][T19273] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3257.229351][T21295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3257.238673][T21295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3257.241501][    T7] usb 6-1: USB disconnect, device number 9
[ 3257.255838][T21295] usb 4-1: Product: syz
[ 3257.268113][T21295] usb 4-1: Manufacturer: syz
[ 3257.274049][T21295] usb 4-1: SerialNumber: syz
[ 3257.320958][T21295] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3257.509417][T13485] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3257.516512][T13485] ath9k_htc: Failed to initialize the device
[ 3257.589317][T25325] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3257.596328][ T9691] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3257.603325][T25325] ath9k_htc: Failed to initialize the device
[ 3257.609349][ T9691] ath9k_htc: Failed to initialize the device
07:42:28 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3257.759420][T15167] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3257.889364][T21295] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:28 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

[ 3258.051268][T20788] usb 3-1: USB disconnect, device number 63
[ 3258.067781][T20788] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3258.074197][ T9006] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3258.081357][ T9006] ath9k_htc: Failed to initialize the device
[ 3258.088084][    T7] usb 6-1: ath9k_htc: USB layer deinitialized
07:42:28 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001000)="271b30c833fa1cb69170f2d2133f56a34feef1af912420ceb87194843c18d1d9f4c8c90bdd8726fe26108038fbfc0d5e65fb61c59d54b0adca394e3063deabd6b437e9aec00b3e07a57c531e98716808f6f47938a75c7d6d6260caee247d8df70113f25096a9f9c96a53fa4d0a933f90b96023a275a9aa143d05669c85")

[ 3258.110237][T19259] usb 2-1: USB disconnect, device number 45
[ 3258.120846][T19259] usb 2-1: ath9k_htc: USB layer deinitialized
07:42:28 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3258.157771][T19273] usb 1-1: USB disconnect, device number 91
[ 3258.173056][T19273] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3258.479212][    T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 3258.689312][T20788] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 3258.729225][T25325] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 3258.759230][T11949] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 3258.789250][T15167] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3258.796278][T15167] ath9k_htc: Failed to initialize the device
[ 3258.949203][T21295] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3258.956233][T21295] ath9k_htc: Failed to initialize the device
[ 3259.059185][    T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3259.068374][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3259.076523][    T7] usb 6-1: Product: syz
[ 3259.080896][    T7] usb 6-1: Manufacturer: syz
[ 3259.085972][    T7] usb 6-1: SerialNumber: syz
07:42:29 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, 0x0)

[ 3259.129398][    T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3259.136051][T19259] usb 4-1: USB disconnect, device number 86
[ 3259.149595][T19259] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3259.249177][T25325] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3259.258529][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3259.267876][T25325] usb 2-1: Product: syz
[ 3259.269221][T20788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3259.273333][T25325] usb 2-1: Manufacturer: syz
[ 3259.287640][T25325] usb 2-1: SerialNumber: syz
[ 3259.293590][T20788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3259.293606][T20788] usb 3-1: Product: syz
[ 3259.293616][T20788] usb 3-1: Manufacturer: syz
[ 3259.293627][T20788] usb 3-1: SerialNumber: syz
[ 3259.329399][T11949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3259.338504][T11949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
07:42:30 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3259.339507][T25325] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3259.348830][T11949] usb 1-1: Product: syz
[ 3259.365004][T11949] usb 1-1: Manufacturer: syz
[ 3259.379423][T20788] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3259.380823][T19259] usb 5-1: USB disconnect, device number 48
[ 3259.397310][T11949] usb 1-1: SerialNumber: syz
[ 3259.407858][T19259] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3259.449441][T11949] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3259.759116][T21295] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 3259.760274][    T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3259.929108][T25325] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3259.970896][T15167] usb 6-1: USB disconnect, device number 10
[ 3260.019151][T16965] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3260.028096][ T9006] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 3260.079147][T11949] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3260.279075][T21295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3260.289558][T21295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3260.297540][T21295] usb 4-1: Product: syz
[ 3260.301702][T21295] usb 4-1: Manufacturer: syz
[ 3260.307818][T21295] usb 4-1: SerialNumber: syz
[ 3260.349327][T21295] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:31 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3260.586730][T26034] udc-core: couldn't find an available UDC or it's busy
[ 3260.593869][T26034] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3260.619342][ T9006] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3260.629648][ T9006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3260.637602][ T9006] usb 5-1: Product: syz
[ 3260.644926][ T9006] usb 5-1: Manufacturer: syz
[ 3260.651216][ T9006] usb 5-1: SerialNumber: syz
[ 3260.709416][ T9006] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3260.789051][    T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3260.795947][    T7] ath9k_htc: Failed to initialize the device
[ 3260.807430][T15167] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3260.919082][T21295] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3260.949079][T25325] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3260.956016][T25325] ath9k_htc: Failed to initialize the device
[ 3261.119005][T11949] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3261.125881][T16965] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3261.132836][T11949] ath9k_htc: Failed to initialize the device
[ 3261.138803][T16965] ath9k_htc: Failed to initialize the device
[ 3261.159236][T15167] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 3261.369199][ T9006] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:32 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001000)="271b30c833fa1cb69170f2d2133f56a34feef1af912420ceb87194843c18d1d9f4c8c90bdd8726fe26108038fbfc0d5e65fb61c59d54b0adca394e3063deabd6b437e9aec00b3e07a57c531e98716808f6f47938a75c7d6d6260caee247d8df70113f25096a9f9c96a53fa4d0a933f90b96023a275a9aa143d05669c85")

[ 3261.500919][T13485] usb 2-1: USB disconnect, device number 46
[ 3261.509371][T13485] usb 2-1: ath9k_htc: USB layer deinitialized
07:42:32 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

07:42:32 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3261.617418][T20788] usb 3-1: USB disconnect, device number 64
[ 3261.640768][T20788] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3261.661362][T19273] usb 1-1: USB disconnect, device number 92
[ 3261.679297][T15167] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3261.688488][T19273] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3261.694629][T15167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3261.706384][T15167] usb 6-1: Product: syz
[ 3261.714423][T15167] usb 6-1: Manufacturer: syz
[ 3261.722675][T15167] usb 6-1: SerialNumber: syz
[ 3261.759851][T15167] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3261.989194][T21295] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3261.996059][T21295] ath9k_htc: Failed to initialize the device
[ 3262.108954][T25325] usb 2-1: new high-speed USB device number 47 using dummy_hcd
07:42:32 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, 0x0)

[ 3262.180917][T13485] usb 4-1: USB disconnect, device number 87
[ 3262.199166][T13485] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3262.219015][T20788] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 3262.259025][T11949] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 3262.328948][T15167] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3262.399051][ T9006] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3262.406010][ T9006] ath9k_htc: Failed to initialize the device
[ 3262.533177][    T7] usb 6-1: USB disconnect, device number 11
[ 3262.629025][T25325] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3262.638066][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3262.646112][T25325] usb 2-1: Product: syz
[ 3262.650436][T25325] usb 2-1: Manufacturer: syz
[ 3262.655190][T25325] usb 2-1: SerialNumber: syz
[ 3262.699281][T25325] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3262.769079][T20788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3262.778218][T20788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3262.787546][T20788] usb 3-1: Product: syz
[ 3262.792447][T20788] usb 3-1: Manufacturer: syz
[ 3262.797390][T20788] usb 3-1: SerialNumber: syz
[ 3262.809041][T11949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3262.810140][T21295] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 3262.818268][T11949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3262.838666][T11949] usb 1-1: Product: syz
[ 3262.846040][T20788] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3262.858883][T11949] usb 1-1: Manufacturer: syz
[ 3262.863547][T11949] usb 1-1: SerialNumber: syz
07:42:33 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3262.909221][T11949] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3262.937261][T16965] usb 5-1: USB disconnect, device number 49
[ 3262.951047][T16965] usb 5-1: ath9k_htc: USB layer deinitialized
07:42:33 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3263.258874][T25325] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3263.348910][T15167] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3263.355926][T15167] ath9k_htc: Failed to initialize the device
[ 3263.363308][T21295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3263.373922][T21295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3263.373935][    T7] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3263.381988][T21295] usb 4-1: Product: syz
[ 3263.392606][T21295] usb 4-1: Manufacturer: syz
[ 3263.397632][T21295] usb 4-1: SerialNumber: syz
[ 3263.439466][T21295] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3263.498936][T20788] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3263.538890][T11949] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3263.548919][    T5] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 3263.768953][    T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 3264.008862][T21295] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3264.055805][T26155] udc-core: couldn't find an available UDC or it's busy
[ 3264.063863][T26155] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3264.118929][    T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3264.127993][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3264.141198][    T5] usb 5-1: Product: syz
[ 3264.145361][    T5] usb 5-1: Manufacturer: syz
[ 3264.155417][    T5] usb 5-1: SerialNumber: syz
[ 3264.200355][    T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3264.308904][T25325] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3264.315812][T25325] ath9k_htc: Failed to initialize the device
[ 3264.358888][    T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3264.369394][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3264.377481][    T7] usb 6-1: Product: syz
[ 3264.390312][    T7] usb 6-1: Manufacturer: syz
[ 3264.394903][    T7] usb 6-1: SerialNumber: syz
[ 3264.449257][    T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3264.548775][T11949] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3264.555744][T20788] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3264.562909][T11949] ath9k_htc: Failed to initialize the device
[ 3264.579137][T20788] ath9k_htc: Failed to initialize the device
07:42:35 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3264.826176][ T9006] usb 2-1: USB disconnect, device number 47
[ 3264.833143][ T9006] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3264.868971][    T5] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3265.028791][T21295] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3265.028808][T21295] ath9k_htc: Failed to initialize the device
07:42:35 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)

07:42:35 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3265.089456][ T9006] usb 3-1: USB disconnect, device number 65
[ 3265.105119][T17906] usb 1-1: USB disconnect, device number 93
[ 3265.119124][    T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3265.128116][ T9006] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3265.135122][T17906] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:35 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80))

[ 3265.223980][T15167] usb 4-1: USB disconnect, device number 88
[ 3265.232639][T15167] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3265.320429][T13485] usb 6-1: USB disconnect, device number 12
[ 3265.338720][T16965] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 3265.738789][ T9006] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 3265.746349][T17906] usb 1-1: new high-speed USB device number 94 using dummy_hcd
07:42:36 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3265.818690][T15167] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 3265.908732][    T5] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3265.915607][T16965] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3265.924649][    T5] ath9k_htc: Failed to initialize the device
[ 3265.930675][T16965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3265.940061][T16965] usb 2-1: Product: syz
[ 3265.944198][T16965] usb 2-1: Manufacturer: syz
[ 3265.949072][T16965] usb 2-1: SerialNumber: syz
[ 3265.998982][T16965] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3266.238752][    T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3266.246017][    T7] ath9k_htc: Failed to initialize the device
[ 3266.258300][T13485] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3266.328780][ T9006] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3266.338064][T17906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3266.338661][T15167] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3266.347244][T17906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3266.367517][ T9006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3266.373155][T15167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3266.376856][ T9006] usb 3-1: Product: syz
[ 3266.389384][T17906] usb 1-1: Product: syz
[ 3266.394359][ T9006] usb 3-1: Manufacturer: syz
[ 3266.399190][T17906] usb 1-1: Manufacturer: syz
[ 3266.402009][T15167] usb 4-1: Product: syz
[ 3266.403825][ T9006] usb 3-1: SerialNumber: syz
[ 3266.411111][T15167] usb 4-1: Manufacturer: syz
[ 3266.413049][T17906] usb 1-1: SerialNumber: syz
[ 3266.420538][T15167] usb 4-1: SerialNumber: syz
07:42:37 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3266.444134][T16965] usb 5-1: USB disconnect, device number 50
[ 3266.469135][ T9006] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3266.469198][T15167] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3266.477540][T17906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3266.494036][T16965] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3266.618641][T13485] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 3266.688693][T30013] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3266.895870][T25325] usb 2-1: USB disconnect, device number 48
[ 3266.968628][T15167] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 3267.078724][T21295] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3267.138647][T13485] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3267.147943][T13485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3267.162384][T13485] usb 6-1: Product: syz
[ 3267.166518][T13485] usb 6-1: Manufacturer: syz
[ 3267.176637][T13485] usb 6-1: SerialNumber: syz
[ 3267.188631][ T9006] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3267.197694][T17906] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3267.220338][T13485] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:38 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3267.498727][T15167] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3267.507797][T15167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3267.517645][T15167] usb 5-1: Product: syz
[ 3267.523752][T15167] usb 5-1: Manufacturer: syz
[ 3267.529184][T15167] usb 5-1: SerialNumber: syz
[ 3267.569057][T15167] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3267.748699][T30013] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3267.755656][T30013] ath9k_htc: Failed to initialize the device
[ 3267.756157][T26282] udc-core: couldn't find an available UDC or it's busy
[ 3267.770429][T25325] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3267.779007][T26282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3267.794502][T13485] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3267.997409][T19273] usb 6-1: USB disconnect, device number 13
[ 3268.128535][T25325] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 3268.138670][T15167] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3268.148582][T21295] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3268.157203][T21295] ath9k_htc: Failed to initialize the device
[ 3268.238629][ T9006] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3268.245513][T17906] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3268.252445][ T9006] ath9k_htc: Failed to initialize the device
[ 3268.258401][T17906] ath9k_htc: Failed to initialize the device
07:42:39 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80))

[ 3268.292378][ T9691] usb 4-1: USB disconnect, device number 89
[ 3268.302785][ T9691] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3268.345133][T16965] usb 5-1: USB disconnect, device number 51
07:42:39 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3268.649894][T25325] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3268.658949][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3268.666907][T25325] usb 2-1: Product: syz
[ 3268.674258][T25325] usb 2-1: Manufacturer: syz
[ 3268.679699][T25325] usb 2-1: SerialNumber: syz
07:42:39 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3268.728723][T25325] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3268.756404][T30013] usb 1-1: USB disconnect, device number 94
[ 3268.763545][T30013] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:39 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)

[ 3268.800438][T21295] usb 3-1: USB disconnect, device number 66
[ 3268.816336][T21295] usb 3-1: ath9k_htc: USB layer deinitialized
07:42:39 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)

[ 3268.868504][T13485] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3268.875584][T13485] ath9k_htc: Failed to initialize the device
[ 3268.887921][T19273] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3268.894130][ T9691] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 3269.188465][T15167] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3269.195383][T15167] ath9k_htc: Failed to initialize the device
[ 3269.206806][T16965] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3269.248489][T19273] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 3269.298621][T25325] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3269.358512][ T9346] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 3269.378686][T21295] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 3269.418523][ T9691] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3269.427653][ T9691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3269.441912][ T9691] usb 4-1: Product: syz
[ 3269.446045][ T9691] usb 4-1: Manufacturer: syz
[ 3269.456638][ T9691] usb 4-1: SerialNumber: syz
[ 3269.498742][ T9691] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3269.588433][T16965] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 3269.768450][T19273] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3269.777545][T19273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3269.791391][T19273] usb 6-1: Product: syz
[ 3269.795586][T19273] usb 6-1: Manufacturer: syz
[ 3269.806149][T19273] usb 6-1: SerialNumber: syz
[ 3269.848744][T19273] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3269.878580][ T9346] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3269.887745][ T9346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3269.901287][ T9346] usb 1-1: Product: syz
[ 3269.905428][ T9346] usb 1-1: Manufacturer: syz
[ 3269.915495][ T9346] usb 1-1: SerialNumber: syz
[ 3269.922404][T21295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3269.931744][T21295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3269.945373][T21295] usb 3-1: Product: syz
[ 3269.952401][T21295] usb 3-1: Manufacturer: syz
[ 3269.956977][T21295] usb 3-1: SerialNumber: syz
[ 3269.978861][ T9346] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3270.009145][T21295] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3270.068668][ T9691] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3270.188404][T16965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3270.197517][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3270.208706][T16965] usb 5-1: Product: syz
[ 3270.213300][T16965] usb 5-1: Manufacturer: syz
[ 3270.218118][T16965] usb 5-1: SerialNumber: syz
[ 3270.269706][T16965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3270.308891][T25325] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3270.315792][T25325] ath9k_htc: Failed to initialize the device
[ 3270.418482][T19273] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3270.538465][ T9346] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3270.568825][T21295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3270.622665][T13485] usb 6-1: USB disconnect, device number 14
07:42:41 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3270.875528][T17906] usb 2-1: USB disconnect, device number 49
[ 3270.882333][T17906] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3270.978348][T16965] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:41 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3271.108467][ T9691] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3271.115435][ T9691] ath9k_htc: Failed to initialize the device
[ 3271.126705][T26399] udc-core: couldn't find an available UDC or it's busy
[ 3271.134816][T26399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:42:42 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x2, {0x2, 0x7}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0x0, 0x0})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000d80)={0x0, 0x9, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x9, "913e928bcac45f"}, {0x0, 0xd, "16c31610ae31018d6e5011"}, {0x0, 0x2}, {0x6, 0x2}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @generic={0x83, 0x10, "a242bf0684d79757c5a738297b5f"}]}}}}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000f80))

[ 3271.326227][T30013] usb 4-1: USB disconnect, device number 90
[ 3271.332812][T30013] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3271.408353][T17906] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 3271.428402][T19273] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3271.435440][T19273] ath9k_htc: Failed to initialize the device
[ 3271.446932][T13485] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3271.537587][T26418] udc-core: couldn't find an available UDC or it's busy
[ 3271.545799][T26418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3271.588391][T21295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3271.595276][ T9346] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3271.602135][T21295] ath9k_htc: Failed to initialize the device
[ 3271.608121][ T9346] ath9k_htc: Failed to initialize the device
[ 3271.808423][T13485] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 3271.938272][T15167] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 3271.978514][T17906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3271.987665][T17906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3271.997046][T16965] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3272.005579][T17906] usb 2-1: Product: syz
[ 3272.009871][T16965] ath9k_htc: Failed to initialize the device
[ 3272.016312][T17906] usb 2-1: Manufacturer: syz
[ 3272.021110][T17906] usb 2-1: SerialNumber: syz
[ 3272.058726][T17906] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:42 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3272.100742][T30013] usb 1-1: USB disconnect, device number 95
[ 3272.118374][T30013] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:42 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3272.152455][    T7] usb 3-1: USB disconnect, device number 67
[ 3272.174410][    T7] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3272.328272][T13485] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3272.339379][T13485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3272.347374][T13485] usb 6-1: Product: syz
[ 3272.360240][T13485] usb 6-1: Manufacturer: syz
[ 3272.364825][T13485] usb 6-1: SerialNumber: syz
[ 3272.408756][T13485] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3272.458467][T15167] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3272.467691][T15167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3272.481425][T15167] usb 4-1: Product: syz
[ 3272.485653][T15167] usb 4-1: Manufacturer: syz
[ 3272.495231][T15167] usb 4-1: SerialNumber: syz
07:42:43 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)

[ 3272.538511][T15167] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3272.569869][T30013] usb 5-1: USB disconnect, device number 52
[ 3272.589148][T30013] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3272.668252][T17906] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3272.718257][ T9006] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 3272.748368][    T7] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 3272.875637][    T5] usb 2-1: USB disconnect, device number 50
[ 3272.968194][T13485] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3273.098340][T15167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3273.170803][T19273] usb 6-1: USB disconnect, device number 15
[ 3273.188469][T30013] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 3273.278200][ T9006] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3273.288519][ T9006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3273.296479][ T9006] usb 1-1: Product: syz
[ 3273.301919][ T9006] usb 1-1: Manufacturer: syz
[ 3273.307947][ T9006] usb 1-1: SerialNumber: syz
07:42:44 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)

[ 3273.348816][ T9006] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3273.357893][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3273.367010][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3273.375930][    T7] usb 3-1: Product: syz
[ 3273.380098][    T7] usb 3-1: Manufacturer: syz
[ 3273.385423][    T7] usb 3-1: SerialNumber: syz
[ 3273.448674][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:44 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3273.748196][T17906] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3273.755173][T17906] ath9k_htc: Failed to initialize the device
[ 3273.761189][    T5] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3273.768238][T30013] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3273.777834][T30013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3273.786189][T30013] usb 5-1: Product: syz
[ 3273.790810][T30013] usb 5-1: Manufacturer: syz
[ 3273.795487][T30013] usb 5-1: SerialNumber: syz
[ 3273.848384][T30013] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3273.988136][T13485] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3273.995218][T13485] ath9k_htc: Failed to initialize the device
[ 3274.006277][T19273] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3274.018168][ T9006] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3274.058331][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3274.128289][    T5] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 3274.148151][T15167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3274.155186][T15167] ath9k_htc: Failed to initialize the device
07:42:45 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa8, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d7452"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3274.363532][T21295] usb 4-1: USB disconnect, device number 91
[ 3274.379416][T19273] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 3274.388404][T21295] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3274.488421][T11949] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3274.611924][T26526] udc-core: couldn't find an available UDC or it's busy
[ 3274.618988][T26526] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3274.668500][    T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3274.677536][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3274.685541][    T5] usb 2-1: Product: syz
[ 3274.691400][    T5] usb 2-1: Manufacturer: syz
[ 3274.696000][    T5] usb 2-1: SerialNumber: syz
[ 3274.748543][    T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3274.908237][T19273] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3274.917664][T19273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3274.931332][T19273] usb 6-1: Product: syz
[ 3274.935606][T19273] usb 6-1: Manufacturer: syz
[ 3274.945660][T19273] usb 6-1: SerialNumber: syz
[ 3274.978317][T16965] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 3274.988359][T19273] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3275.055093][T26543] udc-core: couldn't find an available UDC or it's busy
[ 3275.062793][T26543] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3275.108189][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3275.115096][ T9006] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3275.122112][    T7] ath9k_htc: Failed to initialize the device
[ 3275.138040][ T9006] ath9k_htc: Failed to initialize the device
[ 3275.418240][    T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3275.518232][T11949] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3275.525642][T11949] ath9k_htc: Failed to initialize the device
[ 3275.558044][T19273] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:46 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3275.578305][T16965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3275.582525][T21295] usb 1-1: USB disconnect, device number 96
[ 3275.587619][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3275.611780][T21295] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3275.613337][T16965] usb 4-1: Product: syz
[ 3275.622250][T16965] usb 4-1: Manufacturer: syz
[ 3275.627415][T16965] usb 4-1: SerialNumber: syz
07:42:46 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})

[ 3275.650877][T30013] usb 3-1: USB disconnect, device number 68
[ 3275.660708][T30013] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3275.678749][T16965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3275.760944][T17906] usb 6-1: USB disconnect, device number 16
[ 3275.989571][T26572] udc-core: couldn't find an available UDC or it's busy
[ 3275.996778][T26572] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:42:46 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)

[ 3276.091683][T13485] usb 5-1: USB disconnect, device number 53
[ 3276.108526][T13485] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3276.167983][T21295] usb 3-1: new high-speed USB device number 69 using dummy_hcd
07:42:47 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3276.248032][ T9006] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 3276.338047][T16965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3276.468033][    T5] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3276.475089][    T5] ath9k_htc: Failed to initialize the device
[ 3276.587961][T13485] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 3276.627987][T19273] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3276.634977][T19273] ath9k_htc: Failed to initialize the device
[ 3276.646374][T17906] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3276.687968][T21295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3276.697106][T21295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3276.710796][T21295] usb 3-1: Product: syz
[ 3276.714980][T21295] usb 3-1: Manufacturer: syz
[ 3276.724978][T21295] usb 3-1: SerialNumber: syz
[ 3276.768159][T21295] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3276.818296][ T9006] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3276.827537][ T9006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3276.835811][ T9006] usb 1-1: Product: syz
[ 3276.842506][ T9006] usb 1-1: Manufacturer: syz
[ 3276.848658][ T9006] usb 1-1: SerialNumber: syz
[ 3276.899494][ T9006] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:47 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)

[ 3277.008039][T17906] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 3277.023925][T21295] usb 2-1: USB disconnect, device number 51
[ 3277.040073][T21295] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3277.117997][T13485] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3277.127130][T13485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3277.135217][T13485] usb 5-1: Product: syz
[ 3277.139441][T13485] usb 5-1: Manufacturer: syz
[ 3277.144486][T13485] usb 5-1: SerialNumber: syz
[ 3277.188167][T13485] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3277.327937][ T9691] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3277.347932][T16965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3277.354948][T16965] ath9k_htc: Failed to initialize the device
[ 3277.517928][T21295] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 3277.597969][ T9006] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3277.618006][T17906] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3277.627066][T17906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3277.636486][T17906] usb 6-1: Product: syz
[ 3277.643123][T17906] usb 6-1: Manufacturer: syz
[ 3277.649025][T17906] usb 6-1: SerialNumber: syz
[ 3277.698209][T17906] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3277.747895][T13485] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:48 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3277.888789][T26631] udc-core: couldn't find an available UDC or it's busy
[ 3277.895729][T26631] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3277.922888][T11949] usb 4-1: USB disconnect, device number 92
[ 3277.938516][T11949] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3278.037895][T21295] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3278.048629][T21295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3278.056638][T21295] usb 2-1: Product: syz
[ 3278.062812][T21295] usb 2-1: Manufacturer: syz
[ 3278.070506][T21295] usb 2-1: SerialNumber: syz
[ 3278.118236][T21295] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3278.306569][T26651] udc-core: couldn't find an available UDC or it's busy
[ 3278.307888][T17906] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3278.313751][T26651] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3278.388201][ T9691] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3278.395145][ T9691] ath9k_htc: Failed to initialize the device
[ 3278.428043][ T9346] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 3278.516619][T19273] usb 6-1: USB disconnect, device number 17
[ 3278.627855][ T9006] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3278.635309][ T9006] ath9k_htc: Failed to initialize the device
[ 3278.688381][T21295] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3278.787954][T13485] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3278.795122][T13485] ath9k_htc: Failed to initialize the device
07:42:49 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[ 3278.921657][T11949] usb 3-1: USB disconnect, device number 69
[ 3278.933883][T11949] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3278.950419][ T9346] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3278.959618][ T9346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3278.967572][ T9346] usb 4-1: Product: syz
[ 3278.978836][ T9346] usb 4-1: Manufacturer: syz
[ 3278.984519][ T9346] usb 4-1: SerialNumber: syz
07:42:49 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', 0x0})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3279.029519][ T9346] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:49 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3279.170674][T25325] usb 1-1: USB disconnect, device number 97
[ 3279.199376][T25325] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3279.245731][T26682] udc-core: couldn't find an available UDC or it's busy
[ 3279.252921][T26682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:42:50 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)

[ 3279.347761][T17906] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3279.355001][T17906] ath9k_htc: Failed to initialize the device
[ 3279.355130][T32518] usb 5-1: USB disconnect, device number 54
[ 3279.374343][T19273] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3279.383615][T32518] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3279.527748][T11949] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 3279.607858][ T9346] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3279.737780][T19273] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 3279.747878][T21295] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3279.754838][T21295] ath9k_htc: Failed to initialize the device
[ 3279.767748][ T9006] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 3279.867908][T32518] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 3280.107855][T11949] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3280.116898][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3280.124956][T11949] usb 3-1: Product: syz
[ 3280.129555][T11949] usb 3-1: Manufacturer: syz
[ 3280.135002][T11949] usb 3-1: SerialNumber: syz
[ 3280.169062][T26707] udc-core: couldn't find an available UDC or it's busy
[ 3280.176015][T26707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3280.184107][T11949] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3280.257748][T19273] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3280.277311][T19273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3280.286963][T19273] usb 6-1: Product: syz
[ 3280.291818][T19273] usb 6-1: Manufacturer: syz
[ 3280.297876][T19273] usb 6-1: SerialNumber: syz
07:42:51 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x3, 0x1004, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)

[ 3280.303014][ T9691] usb 2-1: USB disconnect, device number 52
[ 3280.310303][ T9691] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3280.339167][ T9006] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3280.348254][T19273] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3280.348396][ T9006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3280.377101][ T9006] usb 1-1: Product: syz
[ 3280.384335][ T9006] usb 1-1: Manufacturer: syz
[ 3280.387797][T32518] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3280.394724][ T9006] usb 1-1: SerialNumber: syz
[ 3280.398304][T32518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3280.411440][T32518] usb 5-1: Product: syz
[ 3280.417520][T32518] usb 5-1: Manufacturer: syz
[ 3280.431531][T32518] usb 5-1: SerialNumber: syz
[ 3280.458374][ T9006] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3280.471034][T32518] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3280.627677][ T9346] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3280.634760][ T9346] ath9k_htc: Failed to initialize the device
[ 3280.797764][ T9691] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 3280.837686][T11949] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3280.917759][T19273] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3281.037737][T32518] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3281.107682][ T9006] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3281.129649][T13485] usb 6-1: USB disconnect, device number 18
07:42:51 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3281.206343][T25325] usb 4-1: USB disconnect, device number 93
[ 3281.218166][T25325] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3281.317695][ T9691] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3281.326842][ T9691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3281.335151][ T9691] usb 2-1: Product: syz
[ 3281.341370][ T9691] usb 2-1: Manufacturer: syz
[ 3281.346592][ T9691] usb 2-1: SerialNumber: syz
[ 3281.388014][ T9691] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3281.400855][T26758] udc-core: couldn't find an available UDC or it's busy
[ 3281.407983][T26758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:42:52 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', 0x0})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3281.590565][T26761] udc-core: couldn't find an available UDC or it's busy
[ 3281.597626][T26761] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3281.727643][T16965] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 3281.907648][T11949] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3281.914563][T11949] ath9k_htc: Failed to initialize the device
[ 3281.947596][ T9691] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3281.987627][T19273] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3281.994918][T19273] ath9k_htc: Failed to initialize the device
[ 3282.002507][T13485] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3282.067606][T32518] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3282.074603][T32518] ath9k_htc: Failed to initialize the device
[ 3282.147748][ T9006] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3282.154708][ T9006] ath9k_htc: Failed to initialize the device
[ 3282.317811][T16965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3282.326918][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3282.340542][T16965] usb 4-1: Product: syz
[ 3282.344791][T16965] usb 4-1: Manufacturer: syz
[ 3282.354998][T16965] usb 4-1: SerialNumber: syz
[ 3282.357637][T13485] usb 6-1: new high-speed USB device number 19 using dummy_hcd
07:42:53 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})

[ 3282.408783][T16965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3282.427859][T17906] usb 3-1: USB disconnect, device number 70
[ 3282.457894][T17906] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3282.517311][T26787] udc-core: couldn't find an available UDC or it's busy
[ 3282.526533][T26787] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:42:53 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3282.614591][T30013] usb 5-1: USB disconnect, device number 55
[ 3282.621060][T30013] usb 5-1: ath9k_htc: USB layer deinitialized
07:42:53 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3282.673382][    T5] usb 1-1: USB disconnect, device number 98
[ 3282.688135][    T5] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3282.887570][T13485] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3282.896707][T13485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3282.906329][T13485] usb 6-1: Product: syz
[ 3282.913994][T13485] usb 6-1: Manufacturer: syz
[ 3282.918713][T13485] usb 6-1: SerialNumber: syz
[ 3282.958083][T13485] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3283.027525][T17906] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 3283.027559][ T9691] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3283.027574][ T9691] ath9k_htc: Failed to initialize the device
[ 3283.049518][T16965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3283.117497][T32518] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 3283.267586][T19273] usb 1-1: new high-speed USB device number 99 using dummy_hcd
07:42:54 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3283.527679][T13485] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3283.550518][ T9006] usb 2-1: USB disconnect, device number 53
[ 3283.567875][ T9006] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3283.591582][T26830] udc-core: couldn't find an available UDC or it's busy
[ 3283.598761][T26830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3283.638232][T17906] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3283.638709][T32518] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3283.647256][T17906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3283.656720][T32518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3283.674143][T32518] usb 5-1: Product: syz
[ 3283.678346][T32518] usb 5-1: Manufacturer: syz
[ 3283.682954][T32518] usb 5-1: SerialNumber: syz
[ 3283.685506][T17906] usb 3-1: Product: syz
[ 3283.694018][T17906] usb 3-1: Manufacturer: syz
[ 3283.698800][T17906] usb 3-1: SerialNumber: syz
[ 3283.728610][T32518] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3283.737992][T17906] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3283.749678][T25325] usb 6-1: USB disconnect, device number 19
[ 3283.787482][T19273] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3283.797124][T19273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3283.806262][T19273] usb 1-1: Product: syz
[ 3283.817578][T19273] usb 1-1: Manufacturer: syz
[ 3283.822737][T19273] usb 1-1: SerialNumber: syz
[ 3283.867674][T19273] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3284.067530][T16965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3284.074834][T16965] ath9k_htc: Failed to initialize the device
07:42:54 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', 0x0})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3284.207708][ T9006] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 3284.317439][T32518] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3284.367545][T17906] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3284.427474][T19273] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3284.547516][T13485] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3284.554410][T13485] ath9k_htc: Failed to initialize the device
[ 3284.560432][T25325] usb 6-1: ath9k_htc: USB layer deinitialized
07:42:55 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3284.625926][ T9346] usb 4-1: USB disconnect, device number 94
[ 3284.640127][ T9346] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3284.777449][ T9006] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3284.786546][ T9006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3284.796298][ T9006] usb 2-1: Product: syz
[ 3284.801619][ T9006] usb 2-1: Manufacturer: syz
[ 3284.807629][ T9006] usb 2-1: SerialNumber: syz
[ 3284.847704][ T9006] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3284.880337][T26878] udc-core: couldn't find an available UDC or it's busy
[ 3284.887469][T26878] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3284.917439][T25325] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 3284.925479][T26879] udc-core: couldn't find an available UDC or it's busy
[ 3284.932614][T26879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3285.127594][ T9691] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 3285.347433][T32518] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3285.354338][T32518] ath9k_htc: Failed to initialize the device
[ 3285.427345][T17906] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3285.434554][T17906] ath9k_htc: Failed to initialize the device
[ 3285.447504][T25325] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3285.457797][T25325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3285.465897][T25325] usb 6-1: Product: syz
[ 3285.471731][T25325] usb 6-1: Manufacturer: syz
[ 3285.478069][T25325] usb 6-1: SerialNumber: syz
[ 3285.479648][ T9006] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3285.507506][T19273] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3285.515971][T19273] ath9k_htc: Failed to initialize the device
[ 3285.523257][T25325] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3285.657395][ T9691] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3285.666711][ T9691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3285.676434][ T9691] usb 4-1: Product: syz
[ 3285.681369][ T9691] usb 4-1: Manufacturer: syz
[ 3285.686239][ T9691] usb 4-1: SerialNumber: syz
[ 3285.727914][ T9691] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:42:56 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})

[ 3285.905660][T11949] usb 5-1: USB disconnect, device number 56
[ 3285.914743][T11949] usb 5-1: ath9k_htc: USB layer deinitialized
07:42:56 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:42:56 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3285.954731][ T9346] usb 3-1: USB disconnect, device number 71
[ 3285.961406][ T9346] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3285.990488][T16965] usb 1-1: USB disconnect, device number 99
[ 3286.007563][T16965] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3286.034259][T26919] udc-core: couldn't find an available UDC or it's busy
[ 3286.041252][T26919] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3286.097328][T25325] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3286.297331][ T9691] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3286.300311][T16965] usb 6-1: USB disconnect, device number 20
[ 3286.407317][T32518] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 3286.457356][T19273] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 3286.547341][ T9006] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3286.554324][ T9006] ath9k_htc: Failed to initialize the device
[ 3286.587348][T17906] usb 1-1: new high-speed USB device number 100 using dummy_hcd
07:42:57 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3286.858520][T26932] udc-core: couldn't find an available UDC or it's busy
[ 3286.865446][T26932] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3286.927334][T32518] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3286.936477][T32518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3286.950284][T32518] usb 5-1: Product: syz
[ 3286.954455][T32518] usb 5-1: Manufacturer: syz
[ 3286.964279][T32518] usb 5-1: SerialNumber: syz
[ 3286.987480][T19273] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3286.996512][T19273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3287.010594][T32518] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3287.020070][T19273] usb 3-1: Product: syz
[ 3287.024232][T19273] usb 3-1: Manufacturer: syz
[ 3287.037278][T19273] usb 3-1: SerialNumber: syz
07:42:57 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})

[ 3287.071666][T13485] usb 2-1: USB disconnect, device number 54
[ 3287.087550][T19273] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3287.097677][T13485] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3287.107299][T25325] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3287.114224][T25325] ath9k_htc: Failed to initialize the device
[ 3287.129096][T16965] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3287.177245][T17906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3287.187339][T17906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3287.195392][T17906] usb 1-1: Product: syz
[ 3287.202510][T17906] usb 1-1: Manufacturer: syz
[ 3287.209167][T17906] usb 1-1: SerialNumber: syz
[ 3287.257556][T17906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3287.347282][ T9691] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3287.356519][ T9691] ath9k_htc: Failed to initialize the device
[ 3287.497200][T16965] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 3287.587227][ T9006] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 3287.607260][T32518] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3287.647377][ T9346] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:42:58 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})

[ 3287.867217][T17906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3287.890140][T21295] usb 4-1: USB disconnect, device number 95
[ 3287.909865][T21295] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3288.067386][T16965] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3288.076479][T16965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3288.086256][T16965] usb 6-1: Product: syz
[ 3288.092294][T16965] usb 6-1: Manufacturer: syz
[ 3288.098384][T16965] usb 6-1: SerialNumber: syz
[ 3288.147854][T16965] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3288.160873][T26986] udc-core: couldn't find an available UDC or it's busy
[ 3288.168555][ T9006] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3288.169391][T26986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3288.177659][ T9006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3288.194058][ T9006] usb 2-1: Product: syz
[ 3288.199996][ T9006] usb 2-1: Manufacturer: syz
[ 3288.206591][ T9006] usb 2-1: SerialNumber: syz
[ 3288.212519][T26987] udc-core: couldn't find an available UDC or it's busy
[ 3288.222865][T26987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3288.267398][ T9006] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3288.467253][T21295] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 3288.627246][T32518] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3288.634360][T32518] ath9k_htc: Failed to initialize the device
[ 3288.707220][ T9346] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3288.715508][ T9346] ath9k_htc: Failed to initialize the device
[ 3288.777197][T11949] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3288.907206][ T9006] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3288.947209][T17906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3288.955485][T17906] ath9k_htc: Failed to initialize the device
[ 3288.981002][T25325] usb 6-1: USB disconnect, device number 21
[ 3288.987313][T21295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3288.996469][T21295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3289.004665][T21295] usb 4-1: Product: syz
[ 3289.009109][T21295] usb 4-1: Manufacturer: syz
[ 3289.014155][T21295] usb 4-1: SerialNumber: syz
07:42:59 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3289.057371][T21295] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3289.081769][T16965] usb 1-1: USB disconnect, device number 100
[ 3289.107437][T16965] usb 1-1: ath9k_htc: USB layer deinitialized
07:42:59 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

07:43:00 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
socket$packet(0x11, 0x2, 0x300)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3289.221467][ T9691] usb 5-1: USB disconnect, device number 57
[ 3289.230307][ T9691] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3289.258023][    T5] usb 3-1: USB disconnect, device number 72
[ 3289.269663][    T5] usb 3-1: ath9k_htc: USB layer deinitialized
07:43:00 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3289.469183][T27033] udc-core: couldn't find an available UDC or it's busy
[ 3289.476348][T27033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3289.617170][T21295] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3289.727067][T16965] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 3289.827048][T11949] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3289.833973][T11949] ath9k_htc: Failed to initialize the device
[ 3289.841323][T25325] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3289.857193][    T5] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 3289.987184][ T9006] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3289.995064][ T9006] ath9k_htc: Failed to initialize the device
[ 3290.171282][T27045] udc-core: couldn't find an available UDC or it's busy
[ 3290.178388][T27045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3290.197064][T25325] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 3290.307159][T16965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3290.316335][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3290.329975][T16965] usb 5-1: Product: syz
[ 3290.334122][T16965] usb 5-1: Manufacturer: syz
[ 3290.343956][T16965] usb 5-1: SerialNumber: syz
[ 3290.397354][T16965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3290.437097][    T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
07:43:01 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3290.446145][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3290.460966][    T5] usb 3-1: Product: syz
[ 3290.465242][    T5] usb 3-1: Manufacturer: syz
[ 3290.476088][    T5] usb 3-1: SerialNumber: syz
07:43:01 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[ 3290.507125][T20788] usb 2-1: USB disconnect, device number 55
[ 3290.523909][    T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3290.532210][T20788] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3290.627010][T21295] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3290.635547][T21295] ath9k_htc: Failed to initialize the device
[ 3290.717123][T25325] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3290.717151][T25325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3290.741430][T25325] usb 6-1: Product: syz
[ 3290.746434][T25325] usb 6-1: Manufacturer: syz
[ 3290.759497][T25325] usb 6-1: SerialNumber: syz
[ 3290.797295][T25325] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3291.026997][T16965] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3291.117875][T20788] usb 2-1: new high-speed USB device number 56 using dummy_hcd
07:43:01 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[ 3291.167004][    T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3291.199175][ T9691] usb 4-1: USB disconnect, device number 96
[ 3291.217145][ T9691] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3291.367020][T25325] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3291.570788][ T9691] usb 6-1: USB disconnect, device number 22
[ 3291.584997][T27091] udc-core: couldn't find an available UDC or it's busy
[ 3291.592259][T27091] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3291.696905][T11949] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 3291.707163][T20788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3291.718058][T20788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3291.726064][T20788] usb 2-1: Product: syz
[ 3291.731658][T20788] usb 2-1: Manufacturer: syz
[ 3291.738175][T27092] udc-core: couldn't find an available UDC or it's busy
[ 3291.745939][T27092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3291.753918][T20788] usb 2-1: SerialNumber: syz
07:43:02 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3291.797163][T20788] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:02 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3292.066949][T16965] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3292.073874][T16965] ath9k_htc: Failed to initialize the device
[ 3292.227012][    T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3292.234029][    T5] ath9k_htc: Failed to initialize the device
[ 3292.257079][T11949] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3292.266235][T11949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3292.275765][T11949] usb 4-1: Product: syz
[ 3292.280358][T11949] usb 4-1: Manufacturer: syz
[ 3292.286791][T11949] usb 4-1: SerialNumber: syz
[ 3292.327316][T11949] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3292.386866][T25325] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3292.393813][T25325] ath9k_htc: Failed to initialize the device
[ 3292.404902][ T9691] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3292.447321][T20788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:03 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})

[ 3292.619303][T32518] usb 5-1: USB disconnect, device number 58
[ 3292.639049][T32518] usb 5-1: ath9k_htc: USB layer deinitialized
07:43:03 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3292.766850][ T9691] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 3292.774897][T17906] usb 3-1: USB disconnect, device number 73
[ 3292.789878][T17906] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3292.956881][T11949] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3293.000916][T27138] udc-core: couldn't find an available UDC or it's busy
[ 3293.007917][T27138] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:03 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3293.136899][T16965] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 3293.286817][ T9691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3293.297856][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3293.306150][ T9691] usb 6-1: Product: syz
[ 3293.310748][ T9691] usb 6-1: Manufacturer: syz
[ 3293.316755][ T9691] usb 6-1: SerialNumber: syz
[ 3293.357015][ T9691] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3293.386906][T17906] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 3293.506912][T20788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3293.513941][T20788] ath9k_htc: Failed to initialize the device
[ 3293.519228][T27150] udc-core: couldn't find an available UDC or it's busy
[ 3293.528220][T27150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3293.697236][T16965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3293.706347][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3293.719981][T16965] usb 5-1: Product: syz
[ 3293.724129][T16965] usb 5-1: Manufacturer: syz
[ 3293.734748][T16965] usb 5-1: SerialNumber: syz
[ 3293.777098][T16965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3293.916780][ T9691] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3293.946921][T17906] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3293.957576][T17906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3293.965952][T17906] usb 3-1: Product: syz
[ 3293.970530][T17906] usb 3-1: Manufacturer: syz
[ 3293.975640][T17906] usb 3-1: SerialNumber: syz
[ 3293.996977][T11949] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3294.005795][T11949] ath9k_htc: Failed to initialize the device
07:43:04 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})

[ 3294.026535][T21295] usb 2-1: USB disconnect, device number 56
[ 3294.028038][T17906] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3294.041903][T21295] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3294.128749][    T5] usb 6-1: USB disconnect, device number 23
[ 3294.456857][T16965] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:05 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:05 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})

[ 3294.536727][T21295] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 3294.553883][T25325] usb 4-1: USB disconnect, device number 97
[ 3294.572578][T25325] usb 4-1: ath9k_htc: USB layer deinitialized
07:43:05 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3294.726788][T17906] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3294.946709][ T9691] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3294.953637][ T9691] ath9k_htc: Failed to initialize the device
[ 3294.965291][    T5] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3295.018660][T27198] udc-core: couldn't find an available UDC or it's busy
[ 3295.025627][T27198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3295.076715][T21295] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3295.086055][T21295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3295.101036][T21295] usb 2-1: Product: syz
[ 3295.105182][T21295] usb 2-1: Manufacturer: syz
[ 3295.115935][T21295] usb 2-1: SerialNumber: syz
[ 3295.136972][T25325] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 3295.156959][T21295] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:06 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3295.279637][T27207] udc-core: couldn't find an available UDC or it's busy
[ 3295.286835][T27207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3295.346787][    T5] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 3295.506660][T16965] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3295.513611][T16965] ath9k_htc: Failed to initialize the device
[ 3295.656683][T25325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3295.665772][T25325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3295.680087][T25325] usb 4-1: Product: syz
[ 3295.684328][T25325] usb 4-1: Manufacturer: syz
[ 3295.694362][T25325] usb 4-1: SerialNumber: syz
[ 3295.716926][T21295] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3295.737023][T25325] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3295.756754][T17906] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3295.763810][T17906] ath9k_htc: Failed to initialize the device
07:43:06 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:06 executing program 0:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3295.946778][    T5] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3295.956021][    T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3295.969939][    T5] usb 6-1: Product: syz
[ 3295.974087][    T5] usb 6-1: Manufacturer: syz
[ 3295.984390][    T5] usb 6-1: SerialNumber: syz
07:43:06 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3296.026928][    T5] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3296.053956][    T5] usb 5-1: USB disconnect, device number 59
07:43:06 executing program 0:
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:06 executing program 0:
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3296.076954][    T5] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3296.271332][T27237] udc-core: couldn't find an available UDC or it's busy
[ 3296.278393][T27237] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3296.296703][T25325] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:07 executing program 0:
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:07 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3296.316876][T16965] usb 3-1: USB disconnect, device number 74
[ 3296.330767][T16965] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3296.676581][T11949] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3296.685601][    T5] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 3296.786572][T21295] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3296.794037][T21295] ath9k_htc: Failed to initialize the device
[ 3296.836675][T32518] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 3296.862897][T27253] udc-core: couldn't find an available UDC or it's busy
[ 3296.869848][T27253] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3296.881821][ T9691] usb 6-1: USB disconnect, device number 24
[ 3297.236552][    T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3297.247158][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3297.255313][    T5] usb 5-1: Product: syz
[ 3297.267439][    T5] usb 5-1: Manufacturer: syz
[ 3297.272831][    T5] usb 5-1: SerialNumber: syz
07:43:08 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:43:08 executing program 0:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3297.316475][T16965] usb 2-1: USB disconnect, device number 57
[ 3297.323005][T16965] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3297.331945][    T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3297.350256][T25325] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3297.360882][T25325] ath9k_htc: Failed to initialize the device
[ 3297.367125][T32518] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3297.383436][T32518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3297.404607][T32518] usb 3-1: Product: syz
[ 3297.411344][T32518] usb 3-1: Manufacturer: syz
[ 3297.415940][T32518] usb 3-1: SerialNumber: syz
[ 3297.456967][T32518] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3297.746506][T11949] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3297.753525][T11949] ath9k_htc: Failed to initialize the device
[ 3297.761051][ T9691] usb 6-1: ath9k_htc: USB layer deinitialized
07:43:08 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:43:08 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:08 executing program 0:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:08 executing program 0:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0)

[ 3297.904118][T17906] usb 4-1: USB disconnect, device number 98
[ 3297.910270][T20788] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 3297.920143][T17906] usb 4-1: ath9k_htc: USB layer deinitialized
07:43:08 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3298.026479][T32518] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3298.046497][    T5] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3298.406515][ T9691] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 3298.466556][T30013] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 3298.516501][T17906] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 3298.536491][T20788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3298.545575][T20788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3298.558679][T20788] usb 2-1: Product: syz
[ 3298.563158][T20788] usb 2-1: Manufacturer: syz
[ 3298.573024][T20788] usb 2-1: SerialNumber: syz
[ 3298.579306][T27308] udc-core: couldn't find an available UDC or it's busy
[ 3298.586961][T27308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3298.603454][T27311] udc-core: couldn't find an available UDC or it's busy
[ 3298.610562][T27311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3298.646698][T20788] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3298.926484][ T9691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3298.935848][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3298.945184][ T9691] usb 6-1: Product: syz
[ 3298.949972][ T9691] usb 6-1: Manufacturer: syz
[ 3298.954670][ T9691] usb 6-1: SerialNumber: syz
[ 3298.996628][ T9691] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3299.027111][T30013] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3299.036169][T30013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3299.045757][T30013] usb 1-1: Product: syz
[ 3299.053890][T30013] usb 1-1: Manufacturer: syz
[ 3299.058564][T30013] usb 1-1: SerialNumber: syz
[ 3299.096526][T17906] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3299.106030][T30013] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3299.107257][T32518] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3299.114184][    T5] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3299.127739][T32518] ath9k_htc: Failed to initialize the device
[ 3299.128007][T17906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3299.145326][    T5] ath9k_htc: Failed to initialize the device
[ 3299.152476][T17906] usb 4-1: Product: syz
[ 3299.158811][T17906] usb 4-1: Manufacturer: syz
[ 3299.164568][T17906] usb 4-1: SerialNumber: syz
[ 3299.216720][T17906] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3299.276520][T20788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3299.566472][ T9691] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3299.604961][T11949] usb 3-1: USB disconnect, device number 75
[ 3299.614604][T11949] usb 3-1: ath9k_htc: USB layer deinitialized
07:43:10 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
socket$packet(0x11, 0x2, 0x300)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:43:10 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3299.640296][T16965] usb 5-1: USB disconnect, device number 60
[ 3299.663567][T16965] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3299.768950][T25325] usb 6-1: USB disconnect, device number 25
[ 3299.806431][T30013] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3299.829326][T27353] udc-core: couldn't find an available UDC or it's busy
[ 3299.836283][T27353] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3299.877967][T17906] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3300.136498][T11949] usb 3-1: new high-speed USB device number 76 using dummy_hcd
07:43:11 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3300.246322][T16965] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 3300.306325][T20788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3300.313339][T20788] ath9k_htc: Failed to initialize the device
[ 3300.362938][T27360] udc-core: couldn't find an available UDC or it's busy
[ 3300.370282][T27360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3300.431768][T27361] udc-core: couldn't find an available UDC or it's busy
[ 3300.439048][T27361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3300.626320][ T9691] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3300.633194][ T9691] ath9k_htc: Failed to initialize the device
[ 3300.641937][T25325] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3300.706559][T11949] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3300.715633][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3300.730225][T11949] usb 3-1: Product: syz
[ 3300.734503][T11949] usb 3-1: Manufacturer: syz
[ 3300.743976][T11949] usb 3-1: SerialNumber: syz
[ 3300.786454][T16965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3300.795731][T11949] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3300.815025][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3300.825982][T16965] usb 5-1: Product: syz
07:43:11 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
socket$packet(0x11, 0x2, 0x300)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3300.832648][T16965] usb 5-1: Manufacturer: syz
[ 3300.839698][T16965] usb 5-1: SerialNumber: syz
[ 3300.861198][    T7] usb 2-1: USB disconnect, device number 58
[ 3300.867688][T30013] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3300.875215][    T7] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3300.896994][T16965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3300.906405][T30013] ath9k_htc: Failed to initialize the device
[ 3300.946299][T17906] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3300.953269][T17906] ath9k_htc: Failed to initialize the device
[ 3300.996275][T25325] usb 6-1: new high-speed USB device number 26 using dummy_hcd
07:43:12 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3301.395862][    T5] usb 1-1: USB disconnect, device number 101
[ 3301.414107][    T5] usb 1-1: ath9k_htc: USB layer deinitialized
07:43:12 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3301.464893][ T9006] usb 4-1: USB disconnect, device number 99
[ 3301.474676][ T9006] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3301.486318][    T7] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 3301.495154][T11949] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3301.516683][T25325] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3301.525862][T25325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3301.539532][T25325] usb 6-1: Product: syz
[ 3301.543679][T25325] usb 6-1: Manufacturer: syz
[ 3301.548381][T25325] usb 6-1: SerialNumber: syz
[ 3301.557727][T16965] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3301.586752][T25325] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3302.036369][    T5] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 3302.056461][    T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3302.065605][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3302.075116][    T7] usb 2-1: Product: syz
[ 3302.079825][    T7] usb 2-1: Manufacturer: syz
[ 3302.087157][    T7] usb 2-1: SerialNumber: syz
[ 3302.106307][ T9006] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 3302.114751][T27423] udc-core: couldn't find an available UDC or it's busy
[ 3302.121697][T27423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3302.131387][    T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3302.146209][T25325] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3302.348933][T20788] usb 6-1: USB disconnect, device number 26
[ 3302.556520][T11949] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3302.563543][T11949] ath9k_htc: Failed to initialize the device
[ 3302.596334][    T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3302.605418][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3302.614772][    T5] usb 1-1: Product: syz
[ 3302.621402][    T5] usb 1-1: Manufacturer: syz
[ 3302.626594][    T5] usb 1-1: SerialNumber: syz
[ 3302.636366][T16965] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3302.643206][T16965] ath9k_htc: Failed to initialize the device
[ 3302.649236][ T9006] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3302.665194][ T9006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3302.674925][    T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3302.691872][ T9006] usb 4-1: Product: syz
[ 3302.697675][ T9006] usb 4-1: Manufacturer: syz
[ 3302.703340][ T9006] usb 4-1: SerialNumber: syz
[ 3302.746555][ T9006] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3302.755624][    T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:13 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:13 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3303.053844][ T9764] usb 3-1: USB disconnect, device number 76
[ 3303.062549][ T9764] usb 3-1: ath9k_htc: USB layer deinitialized
07:43:13 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3303.153208][T17906] usb 5-1: USB disconnect, device number 61
[ 3303.176813][T17906] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3303.188693][T25325] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3303.197663][T25325] ath9k_htc: Failed to initialize the device
[ 3303.203677][T20788] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3303.300423][T27472] udc-core: couldn't find an available UDC or it's busy
[ 3303.307553][T27472] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3303.356219][    T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3303.406246][ T9006] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3303.556426][ T9764] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 3303.566123][T20788] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 3303.756169][T17906] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 3303.826275][    T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3303.833166][    T7] ath9k_htc: Failed to initialize the device
[ 3303.914852][T27475] udc-core: couldn't find an available UDC or it's busy
[ 3303.921846][T27475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3303.960436][T27476] udc-core: couldn't find an available UDC or it's busy
[ 3303.967830][T27476] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3304.146260][ T9764] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3304.155331][T20788] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3304.164621][ T9764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3304.174339][T20788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3304.182883][T20788] usb 6-1: Product: syz
[ 3304.187234][ T9764] usb 3-1: Product: syz
[ 3304.191376][ T9764] usb 3-1: Manufacturer: syz
[ 3304.196384][T20788] usb 6-1: Manufacturer: syz
[ 3304.201154][T20788] usb 6-1: SerialNumber: syz
[ 3304.205981][ T9764] usb 3-1: SerialNumber: syz
[ 3304.256451][T20788] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3304.264764][ T9764] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:15 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3304.328260][T25325] usb 2-1: USB disconnect, device number 59
[ 3304.336545][T17906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3304.348820][T17906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3304.351279][T25325] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3304.357073][T17906] usb 5-1: Product: syz
[ 3304.372467][T17906] usb 5-1: Manufacturer: syz
[ 3304.382099][T17906] usb 5-1: SerialNumber: syz
[ 3304.386886][    T5] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3304.395509][    T5] ath9k_htc: Failed to initialize the device
[ 3304.446488][T17906] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3304.466214][ T9006] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3304.473155][ T9006] ath9k_htc: Failed to initialize the device
[ 3304.846028][T25325] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 3304.876205][T20788] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3304.885165][ T9764] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:15 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3304.944414][ T9691] usb 1-1: USB disconnect, device number 102
[ 3304.961847][ T9691] usb 1-1: ath9k_htc: USB layer deinitialized
07:43:15 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
socket$packet(0x11, 0x2, 0x300)

[ 3304.985934][T21295] usb 4-1: USB disconnect, device number 100
[ 3305.007542][T21295] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3305.056112][T17906] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3305.079659][    T7] usb 6-1: USB disconnect, device number 27
[ 3305.365996][T25325] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3305.375327][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3305.388873][T25325] usb 2-1: Product: syz
[ 3305.393073][T25325] usb 2-1: Manufacturer: syz
[ 3305.402663][T25325] usb 2-1: SerialNumber: syz
[ 3305.447225][T25325] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3305.486045][T16965] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 3305.515980][ T9691] usb 1-1: new high-speed USB device number 103 using dummy_hcd
07:43:16 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x42, 0x4, 0x1, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3305.610102][T27537] udc-core: couldn't find an available UDC or it's busy
[ 3305.617186][T27537] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3305.906083][ T9764] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3305.913081][T20788] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3305.920059][T20788] ath9k_htc: Failed to initialize the device
[ 3305.937046][ T9764] ath9k_htc: Failed to initialize the device
[ 3305.943762][    T7] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3306.015987][T25325] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3306.036092][ T9691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3306.045339][ T9691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3306.059876][ T9691] usb 1-1: Product: syz
[ 3306.064049][ T9691] usb 1-1: Manufacturer: syz
[ 3306.074707][ T9691] usb 1-1: SerialNumber: syz
[ 3306.075933][T17906] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3306.086453][T16965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3306.096770][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3306.105050][T17906] ath9k_htc: Failed to initialize the device
[ 3306.112414][T16965] usb 4-1: Product: syz
[ 3306.118222][T16965] usb 4-1: Manufacturer: syz
[ 3306.122926][T16965] usb 4-1: SerialNumber: syz
[ 3306.136361][ T9691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3306.177216][T16965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3306.316071][    T7] usb 6-1: new high-speed USB device number 28 using dummy_hcd
07:43:17 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3306.438240][    T5] usb 3-1: USB disconnect, device number 77
[ 3306.456338][    T5] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3306.568771][T27568] udc-core: couldn't find an available UDC or it's busy
[ 3306.575715][T27568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:17 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3306.634834][T30013] usb 5-1: USB disconnect, device number 62
[ 3306.641717][T30013] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3306.705924][T32518] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3306.825926][T16965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3306.906001][    T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3306.915244][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3306.926690][    T7] usb 6-1: Product: syz
[ 3306.930954][    T7] usb 6-1: Manufacturer: syz
[ 3306.937146][    T7] usb 6-1: SerialNumber: syz
[ 3306.976231][    T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3307.025911][T25325] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3307.034284][T25325] ath9k_htc: Failed to initialize the device
[ 3307.045952][    T5] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 3307.135910][ T9691] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 3307.267078][T27588] udc-core: couldn't find an available UDC or it's busy
[ 3307.274155][T27588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3307.386679][T27589] udc-core: couldn't find an available UDC or it's busy
[ 3307.393681][T27589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:18 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3307.587093][    T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3307.605441][T30013] usb 2-1: USB disconnect, device number 60
[ 3307.613232][    T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3307.625500][T30013] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3307.634153][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3307.645244][    T5] usb 3-1: Product: syz
[ 3307.652471][    T5] usb 3-1: Manufacturer: syz
[ 3307.657107][ T9691] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3307.658023][    T5] usb 3-1: SerialNumber: syz
[ 3307.673803][ T9691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3307.682928][ T9691] usb 5-1: Product: syz
[ 3307.688814][ T9691] usb 5-1: Manufacturer: syz
[ 3307.699129][ T9691] usb 5-1: SerialNumber: syz
[ 3307.707409][    T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3307.737762][ T9691] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3307.747219][T32518] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3307.754206][T32518] ath9k_htc: Failed to initialize the device
[ 3307.788718][ T9691] usb 6-1: USB disconnect, device number 28
[ 3307.905875][T16965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3307.912909][T16965] ath9k_htc: Failed to initialize the device
[ 3308.226774][T30013] usb 2-1: new high-speed USB device number 61 using dummy_hcd
07:43:19 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x0, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:19 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3308.299068][ T9764] usb 1-1: USB disconnect, device number 103
[ 3308.311641][ T9764] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3308.320971][T19273] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:19 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})

[ 3308.405870][    T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3308.419553][T21295] usb 4-1: USB disconnect, device number 101
[ 3308.434234][T21295] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3308.608934][T20788] usb 3-1: USB disconnect, device number 78
[ 3308.626006][    T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3308.632878][    T7] ath9k_htc: Failed to initialize the device
[ 3308.639931][ T9691] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3308.825784][T32518] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 3308.838794][T30013] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3308.847809][T30013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3308.861716][T30013] usb 2-1: Product: syz
[ 3308.868895][T30013] usb 2-1: Manufacturer: syz
[ 3308.873643][T30013] usb 2-1: SerialNumber: syz
[ 3308.879039][T27647] udc-core: couldn't find an available UDC or it's busy
[ 3308.887049][T27647] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3308.926156][T30013] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3308.934263][T16965] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 3308.995732][ T9691] usb 6-1: new high-speed USB device number 29 using dummy_hcd
07:43:19 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3309.345758][T19273] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3309.352636][T32518] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3309.361744][T19273] ath9k_htc: Failed to initialize the device
[ 3309.376565][T32518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3309.384610][T32518] usb 1-1: Product: syz
[ 3309.388837][T32518] usb 1-1: Manufacturer: syz
[ 3309.394646][T32518] usb 1-1: SerialNumber: syz
[ 3309.425717][    T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3309.432654][    T5] ath9k_htc: Failed to initialize the device
[ 3309.436342][T32518] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3309.448777][T20788] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3309.505770][T16965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3309.514877][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3309.515939][ T9691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3309.529405][T16965] usb 4-1: Product: syz
[ 3309.534201][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3309.544302][ T9691] usb 6-1: Product: syz
[ 3309.544336][T16965] usb 4-1: Manufacturer: syz
[ 3309.550494][ T9691] usb 6-1: Manufacturer: syz
[ 3309.556622][T16965] usb 4-1: SerialNumber: syz
[ 3309.557756][ T9691] usb 6-1: SerialNumber: syz
[ 3309.566521][T30013] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3309.616181][ T9691] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3309.616190][T16965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:20 executing program 2:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:43:20 executing program 2:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:43:20 executing program 2:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:43:20 executing program 2:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:43:20 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:43:20 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3309.907223][T21295] usb 5-1: USB disconnect, device number 63
[ 3309.926824][T21295] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3310.005922][T32518] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3310.119606][T27698] udc-core: couldn't find an available UDC or it's busy
[ 3310.127400][T27698] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3310.205684][ T9691] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3310.295696][ T9764] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3310.409288][T19273] usb 6-1: USB disconnect, device number 29
[ 3310.417218][T21295] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 3310.435755][    T7] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 3310.565364][T27705] udc-core: couldn't find an available UDC or it's busy
[ 3310.572378][T27705] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3310.625714][T30013] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3310.632694][T30013] ath9k_htc: Failed to initialize the device
[ 3310.859959][T27706] udc-core: couldn't find an available UDC or it's busy
[ 3310.867044][T27706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:21 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x0, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3310.945707][T21295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3310.954826][T21295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3310.964975][T21295] usb 3-1: Product: syz
[ 3310.970720][T21295] usb 3-1: Manufacturer: syz
[ 3310.976476][T21295] usb 3-1: SerialNumber: syz
[ 3311.015808][T21295] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3311.025667][T32518] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3311.034290][T32518] ath9k_htc: Failed to initialize the device
[ 3311.045739][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3311.054829][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3311.062913][    T7] usb 5-1: Product: syz
[ 3311.067937][    T7] usb 5-1: Manufacturer: syz
[ 3311.072884][    T7] usb 5-1: SerialNumber: syz
07:43:21 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3311.115790][    T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3311.146928][ T9346] usb 2-1: USB disconnect, device number 61
[ 3311.160082][ T9346] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3311.265757][ T9691] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3311.272965][ T9691] ath9k_htc: Failed to initialize the device
[ 3311.279086][T19273] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3311.345643][ T9764] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3311.352579][ T9764] ath9k_htc: Failed to initialize the device
07:43:22 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3311.585722][T21295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3311.607980][ T9346] usb 1-1: USB disconnect, device number 104
[ 3311.625830][ T9346] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3311.639905][T19273] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 3311.655660][T30013] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 3311.705645][    T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:22 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3311.885422][T20788] usb 4-1: USB disconnect, device number 102
[ 3311.892431][T20788] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3312.115631][    T5] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 3312.141123][T27760] udc-core: couldn't find an available UDC or it's busy
[ 3312.148249][T27760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3312.165895][T19273] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3312.175027][T19273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3312.184245][T19273] usb 6-1: Product: syz
[ 3312.190159][T19273] usb 6-1: Manufacturer: syz
[ 3312.197818][T19273] usb 6-1: SerialNumber: syz
[ 3312.235715][T19273] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3312.276593][T30013] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3312.285715][T30013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3312.293779][T30013] usb 2-1: Product: syz
[ 3312.298151][T30013] usb 2-1: Manufacturer: syz
[ 3312.303833][T30013] usb 2-1: SerialNumber: syz
[ 3312.345730][T30013] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3312.485484][T20788] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 3312.625542][T21295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3312.632616][T21295] ath9k_htc: Failed to initialize the device
[ 3312.665791][    T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3312.674932][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3312.689688][    T5] usb 1-1: Product: syz
[ 3312.693838][    T5] usb 1-1: Manufacturer: syz
[ 3312.704212][    T5] usb 1-1: SerialNumber: syz
[ 3312.767030][    T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3312.792599][    T7] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3312.799479][    T7] ath9k_htc: Failed to initialize the device
[ 3312.805583][T19273] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3312.975566][T30013] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3313.020328][ T9346] usb 6-1: USB disconnect, device number 30
[ 3313.055596][T20788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3313.064921][T20788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3313.078861][T20788] usb 4-1: Product: syz
[ 3313.083142][T20788] usb 4-1: Manufacturer: syz
[ 3313.093284][T20788] usb 4-1: SerialNumber: syz
07:43:23 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})

[ 3313.145865][T20788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3313.172066][T32518] usb 3-1: USB disconnect, device number 79
[ 3313.187468][T32518] usb 3-1: ath9k_htc: USB layer deinitialized
07:43:24 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3313.270965][ T9764] usb 5-1: USB disconnect, device number 64
[ 3313.295740][ T9764] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3313.407193][    T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:24 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x0, 0x3, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3313.665399][T32518] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 3313.825432][T19273] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3313.825512][T20788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3313.833985][T19273] ath9k_htc: Failed to initialize the device
[ 3313.849076][ T9346] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3313.905630][ T9764] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 3313.959228][T27820] udc-core: couldn't find an available UDC or it's busy
[ 3313.966252][T27820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3313.985540][T30013] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3313.992557][T30013] ath9k_htc: Failed to initialize the device
[ 3314.185397][T32518] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3314.194592][T32518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3314.202631][T32518] usb 3-1: Product: syz
[ 3314.208033][ T9346] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 3314.216483][T32518] usb 3-1: Manufacturer: syz
[ 3314.221159][T32518] usb 3-1: SerialNumber: syz
[ 3314.265635][T32518] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3314.396495][T27827] udc-core: couldn't find an available UDC or it's busy
[ 3314.403447][T27827] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3314.475537][    T5] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3314.483023][    T5] ath9k_htc: Failed to initialize the device
07:43:25 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3314.525546][ T9764] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3314.534700][ T9764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3314.545992][T21295] usb 2-1: USB disconnect, device number 62
[ 3314.563023][ T9764] usb 5-1: Product: syz
[ 3314.568857][T21295] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3314.577701][ T9764] usb 5-1: Manufacturer: syz
[ 3314.587391][ T9764] usb 5-1: SerialNumber: syz
[ 3314.645824][ T9764] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3314.735370][ T9346] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3314.745967][ T9346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3314.754263][ T9346] usb 6-1: Product: syz
[ 3314.758762][ T9346] usb 6-1: Manufacturer: syz
[ 3314.763603][ T9346] usb 6-1: SerialNumber: syz
[ 3314.805546][ T9346] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3314.835348][T32518] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3314.865574][T20788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3314.872555][T20788] ath9k_htc: Failed to initialize the device
07:43:25 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3314.983746][T19273] usb 1-1: USB disconnect, device number 105
[ 3315.001186][T19273] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3315.125308][T21295] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 3315.305384][ T9764] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3315.375349][ T9346] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3315.392006][T27861] udc-core: couldn't find an available UDC or it's busy
[ 3315.398981][T27861] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:26 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3315.428536][T25325] usb 4-1: USB disconnect, device number 103
[ 3315.452078][T25325] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3315.565295][T19273] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 3315.578831][ T9691] usb 6-1: USB disconnect, device number 31
[ 3315.645277][T21295] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3315.655620][T21295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3315.663590][T21295] usb 2-1: Product: syz
[ 3315.675762][T21295] usb 2-1: Manufacturer: syz
[ 3315.680475][T21295] usb 2-1: SerialNumber: syz
[ 3315.725492][T21295] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3315.905297][T32518] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3315.912214][T32518] ath9k_htc: Failed to initialize the device
[ 3316.005321][T25325] usb 4-1: new high-speed USB device number 104 using dummy_hcd
07:43:26 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3316.085287][T19273] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3316.102799][T19273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3316.116146][T19273] usb 1-1: Product: syz
[ 3316.120330][T19273] usb 1-1: Manufacturer: syz
[ 3316.124906][T19273] usb 1-1: SerialNumber: syz
[ 3316.175533][T19273] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3316.295335][T21295] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:27 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})

[ 3316.385231][ T9764] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3316.385372][ T9346] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3316.392758][ T9764] ath9k_htc: Failed to initialize the device
[ 3316.408093][ T9346] ath9k_htc: Failed to initialize the device
[ 3316.424112][ T9691] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3316.430839][T15167] usb 3-1: USB disconnect, device number 80
[ 3316.438237][T15167] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3316.535267][T25325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3316.544403][T25325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3316.553946][T25325] usb 4-1: Product: syz
[ 3316.559587][T25325] usb 4-1: Manufacturer: syz
[ 3316.564877][T25325] usb 4-1: SerialNumber: syz
[ 3316.605503][T25325] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3316.765247][T19273] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3316.785255][ T9691] usb 6-1: new high-speed USB device number 32 using dummy_hcd
07:43:27 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3316.868336][T32518] usb 5-1: USB disconnect, device number 65
[ 3316.881285][T32518] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3316.925328][T15167] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 3317.165339][T25325] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3317.305259][ T9691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3317.314642][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3317.324418][ T9691] usb 6-1: Product: syz
[ 3317.331130][T27925] udc-core: couldn't find an available UDC or it's busy
[ 3317.339166][ T9691] usb 6-1: Manufacturer: syz
[ 3317.341962][T27925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3317.343764][ T9691] usb 6-1: SerialNumber: syz
[ 3317.357242][T21295] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3317.365986][T32518] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 3317.376266][T21295] ath9k_htc: Failed to initialize the device
[ 3317.415686][ T9691] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3317.465234][T15167] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3317.475630][T15167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3317.483598][T15167] usb 3-1: Product: syz
[ 3317.495367][T15167] usb 3-1: Manufacturer: syz
[ 3317.499942][T15167] usb 3-1: SerialNumber: syz
[ 3317.556427][T15167] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3317.731277][T27938] udc-core: couldn't find an available UDC or it's busy
[ 3317.738219][T27938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:28 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3317.825244][T19273] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3317.832134][T19273] ath9k_htc: Failed to initialize the device
[ 3317.857687][ T9346] usb 2-1: USB disconnect, device number 63
[ 3317.876946][ T9346] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3317.896408][T32518] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3317.906017][T32518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3317.913998][T32518] usb 5-1: Product: syz
[ 3317.919383][T32518] usb 5-1: Manufacturer: syz
[ 3317.926309][T32518] usb 5-1: SerialNumber: syz
[ 3317.965602][T32518] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3318.005315][ T9691] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3318.125264][T15167] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3318.208592][T20788] usb 6-1: USB disconnect, device number 32
[ 3318.225517][T25325] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3318.232742][T25325] ath9k_htc: Failed to initialize the device
07:43:29 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3318.355121][ T9764] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 3318.392289][    T5] usb 1-1: USB disconnect, device number 106
[ 3318.408295][    T5] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3318.525214][T32518] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3318.681871][T27969] udc-core: couldn't find an available UDC or it's busy
[ 3318.688981][T27969] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:29 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:29 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3318.728153][T17906] usb 5-1: USB disconnect, device number 66
[ 3318.761351][T21295] usb 4-1: USB disconnect, device number 104
[ 3318.769547][T21295] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3318.955156][ T9764] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3318.964215][ T9764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3318.973565][ T9764] usb 2-1: Product: syz
[ 3318.979297][ T9764] usb 2-1: Manufacturer: syz
[ 3318.987667][ T9764] usb 2-1: SerialNumber: syz
[ 3319.016249][    T5] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 3319.025105][ T9691] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3319.032582][ T9691] ath9k_htc: Failed to initialize the device
[ 3319.041163][T20788] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3319.049165][ T9764] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:29 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3319.185264][T15167] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3319.192272][T15167] ath9k_htc: Failed to initialize the device
[ 3319.255031][    T7] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 3319.435264][T20788] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 3319.585111][T32518] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3319.592057][T32518] ath9k_htc: Failed to initialize the device
[ 3319.601025][T17906] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3319.626404][    T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3319.635431][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3319.643441][    T5] usb 1-1: Product: syz
[ 3319.648789][    T5] usb 1-1: Manufacturer: syz
[ 3319.653642][    T5] usb 1-1: SerialNumber: syz
07:43:30 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})

[ 3319.695247][    T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3319.709738][ T9764] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3319.716061][T21295] usb 3-1: USB disconnect, device number 81
[ 3319.729994][T21295] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3319.865163][    T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3319.874276][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3319.888082][    T7] usb 4-1: Product: syz
[ 3319.892221][    T7] usb 4-1: Manufacturer: syz
[ 3319.897628][T32518] usb 2-1: USB disconnect, device number 64
[ 3319.906809][    T7] usb 4-1: SerialNumber: syz
07:43:30 executing program 4:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:43:30 executing program 4:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:43:30 executing program 4:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

[ 3319.955764][    T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:30 executing program 4:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:43:30 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3320.036411][T20788] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3320.045541][T20788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3320.061689][T20788] usb 6-1: Product: syz
[ 3320.066098][T20788] usb 6-1: Manufacturer: syz
[ 3320.071871][T20788] usb 6-1: SerialNumber: syz
[ 3320.115195][T20788] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3320.255135][    T7] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 3320.334996][T30013] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:31 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3320.544952][ T9691] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 3320.605007][T17906] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3320.765079][T20788] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3320.785055][ T9764] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3320.792084][ T9764] ath9k_htc: Failed to initialize the device
[ 3320.803393][T32518] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3320.812763][T27977] udc-core: couldn't find an available UDC or it's busy
[ 3320.824921][T27977] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3320.833813][T21295] usb 4-1: USB disconnect, device number 105
[ 3320.845438][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3320.857479][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3320.865744][    T7] usb 3-1: Product: syz
[ 3320.869886][    T7] usb 3-1: Manufacturer: syz
[ 3320.874505][    T7] usb 3-1: SerialNumber: syz
[ 3320.894727][T28061] udc-core: couldn't find an available UDC or it's busy
[ 3320.902949][T28061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3320.915464][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3320.967789][T16965] usb 6-1: USB disconnect, device number 33
07:43:31 executing program 1:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3321.064933][ T9691] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3321.073996][ T9691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3321.087379][ T9691] usb 5-1: Product: syz
[ 3321.091517][ T9691] usb 5-1: Manufacturer: syz
[ 3321.101120][ T9691] usb 5-1: SerialNumber: syz
[ 3321.145151][ T9691] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3321.354968][T30013] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3321.361906][T30013] ath9k_htc: Failed to initialize the device
[ 3321.534948][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3321.664975][T17906] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3321.671905][T17906] ath9k_htc: Failed to initialize the device
[ 3321.683656][T21295] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3321.724878][ T9691] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3321.834955][T20788] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3321.842072][T20788] ath9k_htc: Failed to initialize the device
[ 3321.849223][T16965] usb 6-1: ath9k_htc: USB layer deinitialized
07:43:32 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

07:43:32 executing program 1:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:43:32 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:32 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x0, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3321.920937][T17906] usb 1-1: USB disconnect, device number 107
[ 3321.929196][T17906] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3321.956397][    T5] usb 5-1: USB disconnect, device number 67
[ 3322.092596][T28103] udc-core: couldn't find an available UDC or it's busy
[ 3322.099697][T28103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3322.444953][T20788] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 3322.452750][ T9764] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 3322.554917][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3322.561826][T17906] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 3322.569455][    T7] ath9k_htc: Failed to initialize the device
[ 3322.784813][ T9691] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3322.791687][ T9691] ath9k_htc: Failed to initialize the device
[ 3322.800367][    T5] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3323.044853][T20788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3323.053966][ T9764] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3323.062986][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3323.071064][T20788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3323.081541][ T9764] usb 6-1: Product: syz
[ 3323.085784][T20788] usb 4-1: Product: syz
[ 3323.090175][T20788] usb 4-1: Manufacturer: syz
07:43:33 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:33 executing program 1:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:43:33 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3323.094892][ T9764] usb 6-1: Manufacturer: syz
[ 3323.100079][ T9764] usb 6-1: SerialNumber: syz
[ 3323.104870][T20788] usb 4-1: SerialNumber: syz
[ 3323.131637][ T9691] usb 3-1: USB disconnect, device number 82
07:43:33 executing program 1:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

[ 3323.152842][T17906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3323.152884][ T9691] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3323.162187][ T9764] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3323.178302][T20788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:33 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3323.205686][T17906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3323.213729][T17906] usb 1-1: Product: syz
[ 3323.234784][T17906] usb 1-1: Manufacturer: syz
[ 3323.239367][T17906] usb 1-1: SerialNumber: syz
[ 3323.295017][T17906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3323.674786][    T7] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 3323.674800][T19273] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 3323.735092][T30013] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 3323.854732][ T9764] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3323.864157][T20788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3323.934905][T17906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3324.057309][ T9691] usb 4-1: USB disconnect, device number 106
[ 3324.079633][T21295] usb 6-1: USB disconnect, device number 34
[ 3324.194762][T19273] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3324.203782][T19273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3324.211865][T19273] usb 3-1: Product: syz
[ 3324.216585][T19273] usb 3-1: Manufacturer: syz
[ 3324.222538][T19273] usb 3-1: SerialNumber: syz
[ 3324.265015][T19273] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3324.286291][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3324.295330][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3324.303303][    T7] usb 5-1: Product: syz
[ 3324.315548][    T7] usb 5-1: Manufacturer: syz
[ 3324.320137][    T7] usb 5-1: SerialNumber: syz
[ 3324.330426][T30013] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3324.339627][T30013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3324.354475][T30013] usb 2-1: Product: syz
[ 3324.361319][T30013] usb 2-1: Manufacturer: syz
[ 3324.368450][T30013] usb 2-1: SerialNumber: syz
[ 3324.385098][    T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3324.434953][T30013] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3324.487429][T28175] udc-core: couldn't find an available UDC or it's busy
[ 3324.494509][T28175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:35 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:35 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x0, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3324.824655][T19273] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3324.864864][ T9764] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3324.871821][ T9764] ath9k_htc: Failed to initialize the device
[ 3324.883422][T21295] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3324.944721][T17906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3324.951696][T20788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3324.958565][T20788] ath9k_htc: Failed to initialize the device
[ 3324.964557][T17906] ath9k_htc: Failed to initialize the device
[ 3324.964571][ T9691] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3325.054740][    T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3325.094756][T30013] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3325.234626][T21295] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 3325.300924][T28142] udc-core: couldn't find an available UDC or it's busy
[ 3325.307952][T28142] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3325.318585][    T5] usb 2-1: USB disconnect, device number 65
[ 3325.324650][ T9691] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 3325.378356][T28196] udc-core: couldn't find an available UDC or it's busy
[ 3325.385470][T28196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:36 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3325.514163][T32518] usb 1-1: USB disconnect, device number 108
[ 3325.530681][T32518] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3325.612355][T28206] udc-core: couldn't find an available UDC or it's busy
[ 3325.620081][T28206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3325.754730][T21295] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3325.763799][T21295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3325.778041][T21295] usb 6-1: Product: syz
[ 3325.782416][T21295] usb 6-1: Manufacturer: syz
[ 3325.788169][T21295] usb 6-1: SerialNumber: syz
07:43:36 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3325.834870][T21295] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3325.856346][ T9691] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3325.866098][ T9691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3325.874110][ T9691] usb 4-1: Product: syz
[ 3325.882240][ T9691] usb 4-1: Manufacturer: syz
[ 3325.887744][ T9691] usb 4-1: SerialNumber: syz
[ 3325.904638][T19273] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3325.911664][T19273] ath9k_htc: Failed to initialize the device
[ 3325.924980][ T9691] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3326.034649][T25325] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 3326.074631][    T7] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3326.087609][    T7] ath9k_htc: Failed to initialize the device
[ 3326.154730][T30013] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3326.161597][T30013] ath9k_htc: Failed to initialize the device
[ 3326.173136][    T5] usb 2-1: ath9k_htc: USB layer deinitialized
07:43:37 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3326.403266][ T9764] usb 3-1: USB disconnect, device number 83
[ 3326.409257][T21295] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3326.410983][ T9764] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3326.494549][ T9691] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3326.544625][    T5] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 3326.554684][T25325] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3326.563783][T25325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3326.571806][T25325] usb 1-1: Product: syz
[ 3326.577007][T25325] usb 1-1: Manufacturer: syz
[ 3326.581736][T25325] usb 1-1: SerialNumber: syz
07:43:37 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3326.611908][T20788] usb 6-1: USB disconnect, device number 35
[ 3326.626642][T25325] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3326.650400][T17906] usb 5-1: USB disconnect, device number 68
[ 3326.666024][T17906] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3326.698909][T32518] usb 4-1: USB disconnect, device number 107
[ 3327.015346][ T9764] usb 3-1: new high-speed USB device number 84 using dummy_hcd
07:43:37 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x0, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3327.124664][    T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3327.133747][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3327.143195][    T5] usb 2-1: Product: syz
[ 3327.149171][    T5] usb 2-1: Manufacturer: syz
[ 3327.153926][    T5] usb 2-1: SerialNumber: syz
07:43:37 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3327.194494][T25325] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3327.194742][    T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3327.244627][T17906] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 3327.504538][ T9691] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3327.511490][T21295] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3327.518343][T21295] ath9k_htc: Failed to initialize the device
[ 3327.524308][ T9691] ath9k_htc: Failed to initialize the device
[ 3327.524317][T20788] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3327.530661][T32518] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3327.594543][ T9764] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3327.603555][ T9764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3327.611622][ T9764] usb 3-1: Product: syz
[ 3327.617430][ T9764] usb 3-1: Manufacturer: syz
[ 3327.622068][ T9764] usb 3-1: SerialNumber: syz
[ 3327.664740][ T9764] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3327.756242][T28292] udc-core: couldn't find an available UDC or it's busy
[ 3327.763242][T28292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3327.824642][T17906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3327.833694][T17906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3327.847194][T17906] usb 5-1: Product: syz
[ 3327.851361][T17906] usb 5-1: Manufacturer: syz
[ 3327.861221][T17906] usb 5-1: SerialNumber: syz
[ 3327.865974][    T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3327.906959][T32518] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 3327.924584][T20788] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 3327.933549][T17906] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3328.079164][T28216] udc-core: couldn't find an available UDC or it's busy
[ 3328.086168][T28216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3328.098053][    T7] usb 2-1: USB disconnect, device number 66
[ 3328.224468][T25325] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3328.231451][T25325] ath9k_htc: Failed to initialize the device
[ 3328.294483][ T9764] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3328.444486][T32518] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3328.453582][T32518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3328.463305][T32518] usb 4-1: Product: syz
[ 3328.470283][T32518] usb 4-1: Manufacturer: syz
[ 3328.474955][T32518] usb 4-1: SerialNumber: syz
[ 3328.484756][T20788] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3328.501850][T20788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3328.512728][T20788] usb 6-1: Product: syz
[ 3328.514711][T32518] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3328.527607][T20788] usb 6-1: Manufacturer: syz
[ 3328.537684][T20788] usb 6-1: SerialNumber: syz
07:43:39 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3328.554484][T17906] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3328.574650][T20788] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:39 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3328.790430][T30013] usb 1-1: USB disconnect, device number 109
[ 3328.812212][T30013] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3328.851017][T28326] udc-core: couldn't find an available UDC or it's busy
[ 3328.858049][T28326] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3328.944695][    T5] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3328.951557][    T5] ath9k_htc: Failed to initialize the device
[ 3328.962795][    T7] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3329.084364][T32518] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3329.118580][T28334] udc-core: couldn't find an available UDC or it's busy
[ 3329.125927][T28334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3329.234445][T20788] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3329.289425][ T9691] usb 4-1: USB disconnect, device number 108
[ 3329.344673][    T7] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 3329.352231][ T9764] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3329.359131][ T9764] ath9k_htc: Failed to initialize the device
[ 3329.404566][T30013] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 3329.447061][T19273] usb 6-1: USB disconnect, device number 36
[ 3329.584312][T17906] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3329.591210][T17906] ath9k_htc: Failed to initialize the device
07:43:40 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:40 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3329.876357][ T9006] usb 3-1: USB disconnect, device number 84
[ 3329.897048][ T9006] usb 3-1: ath9k_htc: USB layer deinitialized
07:43:40 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3329.954463][    T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3329.969278][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3329.983569][T30013] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3329.992668][    T7] usb 2-1: Product: syz
[ 3330.002113][T30013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3330.013136][    T7] usb 2-1: Manufacturer: syz
[ 3330.020736][    T7] usb 2-1: SerialNumber: syz
[ 3330.028104][T30013] usb 1-1: Product: syz
[ 3330.032335][T30013] usb 1-1: Manufacturer: syz
[ 3330.042644][T30013] usb 1-1: SerialNumber: syz
[ 3330.084809][    T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3330.093170][T30013] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:40 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3330.142960][T25325] usb 5-1: USB disconnect, device number 69
[ 3330.148958][T32518] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3330.156680][T32518] ath9k_htc: Failed to initialize the device
[ 3330.162881][ T9691] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3330.168976][T25325] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3330.314384][T20788] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3330.321565][T20788] ath9k_htc: Failed to initialize the device
[ 3330.330640][T19273] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3330.514449][ T9006] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 3330.524269][ T9691] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 3330.654369][T15167] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 3330.684249][T19273] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 3330.764265][    T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3330.773266][T30013] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3330.972319][T28314] udc-core: couldn't find an available UDC or it's busy
[ 3330.979414][T28314] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3330.988293][T21295] usb 2-1: USB disconnect, device number 67
[ 3331.044290][ T9691] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3331.053387][ T9691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3331.064298][ T9691] usb 4-1: Product: syz
[ 3331.069405][ T9691] usb 4-1: Manufacturer: syz
[ 3331.076634][ T9691] usb 4-1: SerialNumber: syz
[ 3331.084610][ T9006] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3331.097986][ T9006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3331.109908][ T9006] usb 3-1: Product: syz
[ 3331.114112][ T9006] usb 3-1: Manufacturer: syz
[ 3331.116183][ T9691] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3331.123380][ T9006] usb 3-1: SerialNumber: syz
[ 3331.175534][T15167] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3331.176028][ T9006] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3331.185332][T15167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3331.205186][T19273] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3331.216462][T19273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3331.224836][T15167] usb 5-1: Product: syz
[ 3331.229368][T15167] usb 5-1: Manufacturer: syz
[ 3331.234134][T19273] usb 6-1: Product: syz
[ 3331.238407][T19273] usb 6-1: Manufacturer: syz
[ 3331.243356][T19273] usb 6-1: SerialNumber: syz
[ 3331.248785][T15167] usb 5-1: SerialNumber: syz
[ 3331.294367][T15167] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3331.302820][T19273] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:42 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3331.704230][ T9691] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3331.824240][T30013] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3331.831111][    T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3331.838020][T30013] ath9k_htc: Failed to initialize the device
[ 3331.843994][    T7] ath9k_htc: Failed to initialize the device
[ 3331.854171][ T9006] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3331.854222][T21295] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3331.869729][T19273] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3331.880478][T15167] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3331.907851][T28340] udc-core: couldn't find an available UDC or it's busy
[ 3331.915659][T28340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3331.923461][T20788] usb 4-1: USB disconnect, device number 109
[ 3332.078061][ T9764] usb 6-1: USB disconnect, device number 37
[ 3332.234141][T21295] usb 2-1: new high-speed USB device number 68 using dummy_hcd
07:43:43 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3332.330056][T25325] usb 1-1: USB disconnect, device number 110
[ 3332.351002][T25325] usb 1-1: ath9k_htc: USB layer deinitialized
07:43:43 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3332.422783][T28439] udc-core: couldn't find an available UDC or it's busy
[ 3332.431279][T28439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3332.449196][T28441] udc-core: couldn't find an available UDC or it's busy
[ 3332.456358][T28441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:43 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3332.754200][T21295] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3332.763284][T21295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3332.774344][T21295] usb 2-1: Product: syz
[ 3332.778536][T21295] usb 2-1: Manufacturer: syz
[ 3332.783356][T21295] usb 2-1: SerialNumber: syz
[ 3332.788499][ T9691] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3332.797187][ T9691] ath9k_htc: Failed to initialize the device
[ 3332.805048][T20788] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3332.834451][T21295] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3332.864120][ T9006] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3332.871176][ T9006] ath9k_htc: Failed to initialize the device
[ 3332.904152][T25325] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 3332.944199][T19273] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3332.951150][T15167] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3332.958047][T15167] ath9k_htc: Failed to initialize the device
[ 3332.964024][T19273] ath9k_htc: Failed to initialize the device
[ 3332.970207][ T9764] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3333.174384][T20788] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 3333.334151][ T9764] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 3333.394055][T32518] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:44 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3333.434480][T25325] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3333.453698][T25325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3333.463628][T25325] usb 1-1: Product: syz
[ 3333.469449][T25325] usb 1-1: Manufacturer: syz
07:43:44 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})

[ 3333.485673][T25325] usb 1-1: SerialNumber: syz
[ 3333.492939][ T9346] usb 3-1: USB disconnect, device number 85
[ 3333.501763][T21295] usb 5-1: USB disconnect, device number 70
[ 3333.507978][ T9346] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3333.516085][T21295] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3333.534412][T25325] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3333.596458][T30013] usb 2-1: USB disconnect, device number 68
[ 3333.734247][T20788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3333.743283][T20788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3333.751454][T20788] usb 4-1: Product: syz
[ 3333.757273][T20788] usb 4-1: Manufacturer: syz
[ 3333.761911][T20788] usb 4-1: SerialNumber: syz
[ 3333.804301][T20788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3333.904084][ T9764] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3333.913673][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3333.921766][ T9764] usb 6-1: Product: syz
[ 3333.926445][ T9764] usb 6-1: Manufacturer: syz
[ 3333.931961][ T9764] usb 6-1: SerialNumber: syz
[ 3333.974272][ T9764] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:44 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3334.074070][ T9346] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 3334.084390][T21295] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 3334.104327][T25325] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3334.454001][T20788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3334.470110][T32518] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3334.477252][T32518] ath9k_htc: Failed to initialize the device
[ 3334.483327][T30013] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3334.594031][ T9346] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3334.603148][ T9346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3334.615311][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3334.629695][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3334.634029][ T9764] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3334.637689][T21295] usb 5-1: Product: syz
[ 3334.652878][ T9346] usb 3-1: Product: syz
[ 3334.659461][ T9346] usb 3-1: Manufacturer: syz
[ 3334.673678][ T9346] usb 3-1: SerialNumber: syz
[ 3334.678683][T21295] usb 5-1: Manufacturer: syz
[ 3334.687865][T21295] usb 5-1: SerialNumber: syz
[ 3334.693500][T19273] usb 4-1: USB disconnect, device number 110
[ 3334.724245][ T9346] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3334.740117][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3334.837303][T15167] usb 6-1: USB disconnect, device number 38
[ 3334.875373][T30013] usb 2-1: new high-speed USB device number 69 using dummy_hcd
07:43:45 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3335.183986][T25325] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3335.191184][T25325] ath9k_htc: Failed to initialize the device
07:43:46 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3335.284005][ T9346] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3335.304121][T21295] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3335.463940][T30013] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3335.472999][T30013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3335.481178][T30013] usb 2-1: Product: syz
[ 3335.488086][T30013] usb 2-1: Manufacturer: syz
[ 3335.493548][T30013] usb 2-1: SerialNumber: syz
[ 3335.503924][T20788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3335.513721][T20788] ath9k_htc: Failed to initialize the device
[ 3335.523569][T19273] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3335.534176][T30013] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:46 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3335.663920][ T9764] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3335.670909][ T9764] ath9k_htc: Failed to initialize the device
[ 3335.682515][T15167] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3335.694828][ T9006] usb 1-1: USB disconnect, device number 111
[ 3335.710161][ T9006] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3335.838753][T28567] udc-core: couldn't find an available UDC or it's busy
[ 3335.846110][T28567] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3335.864707][T28568] udc-core: couldn't find an available UDC or it's busy
[ 3335.871783][T28568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3335.883976][T19273] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 3336.033894][T15167] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 3336.153882][T30013] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3336.293892][ T9006] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 3336.303967][ T9346] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3336.304019][ T9346] ath9k_htc: Failed to initialize the device
[ 3336.356528][    T5] usb 2-1: USB disconnect, device number 69
[ 3336.384291][T21295] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3336.391182][T21295] ath9k_htc: Failed to initialize the device
[ 3336.404218][T19273] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3336.413571][T19273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3336.428465][T19273] usb 4-1: Product: syz
[ 3336.432625][T19273] usb 4-1: Manufacturer: syz
[ 3336.442430][T19273] usb 4-1: SerialNumber: syz
[ 3336.484278][T19273] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3336.563987][T15167] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3336.573195][T15167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3336.587097][T15167] usb 6-1: Product: syz
[ 3336.591337][T15167] usb 6-1: Manufacturer: syz
[ 3336.601152][T15167] usb 6-1: SerialNumber: syz
[ 3336.644213][T15167] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:47 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:47 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3336.866681][T19259] usb 3-1: USB disconnect, device number 86
[ 3336.885199][T19259] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3336.894034][ T9006] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3336.903050][ T9006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
07:43:47 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})

[ 3336.913351][ T9006] usb 1-1: Product: syz
[ 3336.917841][ T9006] usb 1-1: Manufacturer: syz
[ 3336.919228][ T9691] usb 5-1: USB disconnect, device number 71
[ 3336.924759][ T9006] usb 1-1: SerialNumber: syz
[ 3336.933502][ T9691] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3336.984488][ T9006] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3337.043835][T19273] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3337.193817][T30013] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3337.200814][T30013] ath9k_htc: Failed to initialize the device
[ 3337.203861][T15167] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3337.207104][    T5] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3337.246053][ T9346] usb 4-1: USB disconnect, device number 111
[ 3337.407541][T19259] usb 6-1: USB disconnect, device number 39
[ 3337.443799][ T9691] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 3337.451386][T21295] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 3337.563825][    T5] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 3337.603813][ T9006] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:48 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3337.807396][T32518] usb 1-1: USB disconnect, device number 112
07:43:48 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3337.973788][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3337.982934][ T9691] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3337.992130][ T9691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3338.000136][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3338.008605][ T9691] usb 3-1: Product: syz
[ 3338.014607][T21295] usb 5-1: Product: syz
[ 3338.019079][T21295] usb 5-1: Manufacturer: syz
[ 3338.023848][ T9691] usb 3-1: Manufacturer: syz
[ 3338.028509][ T9691] usb 3-1: SerialNumber: syz
[ 3338.033289][T21295] usb 5-1: SerialNumber: syz
[ 3338.063761][T19273] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3338.070689][T19273] ath9k_htc: Failed to initialize the device
[ 3338.076947][ T9691] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3338.086766][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3338.095138][ T9346] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3338.145040][    T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3338.155533][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3338.163494][    T5] usb 2-1: Product: syz
[ 3338.169108][    T5] usb 2-1: Manufacturer: syz
[ 3338.174948][    T5] usb 2-1: SerialNumber: syz
[ 3338.213970][    T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:49 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3338.303742][T15167] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3338.310673][T15167] ath9k_htc: Failed to initialize the device
[ 3338.323758][T19259] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3338.443758][ T9346] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 3338.623728][ T9006] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3338.630773][ T9006] ath9k_htc: Failed to initialize the device
[ 3338.642087][T32518] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3338.663727][T21295] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3338.672748][ T9691] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3338.681718][T19259] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 3338.843704][    T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3338.866394][T28604] udc-core: couldn't find an available UDC or it's busy
[ 3338.873369][T28604] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3338.882766][T32518] usb 3-1: USB disconnect, device number 87
[ 3338.963813][ T9346] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3338.972929][ T9346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3338.982225][ T9346] usb 4-1: Product: syz
[ 3338.990931][ T9346] usb 4-1: Manufacturer: syz
[ 3338.995538][ T9346] usb 4-1: SerialNumber: syz
07:43:49 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

07:43:49 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3339.033887][ T9346] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3339.049278][T20788] usb 2-1: USB disconnect, device number 70
07:43:49 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

07:43:49 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

07:43:49 executing program 0:
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

07:43:49 executing program 0:
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3339.203707][T19259] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3339.212956][T19259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3339.222895][T19259] usb 6-1: Product: syz
[ 3339.230303][T28693] udc-core: couldn't find an available UDC or it's busy
[ 3339.237855][T19259] usb 6-1: Manufacturer: syz
[ 3339.237876][T28693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3339.242432][T19259] usb 6-1: SerialNumber: syz
[ 3339.293955][T19259] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:50 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:50 executing program 0:
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3339.613650][ T9346] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3339.743730][T21295] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3339.750713][ T9691] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3339.757631][ T9691] ath9k_htc: Failed to initialize the device
[ 3339.774379][T21295] ath9k_htc: Failed to initialize the device
[ 3339.780409][T32518] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3339.817278][T14840] usb 4-1: USB disconnect, device number 112
[ 3339.853750][T19259] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3339.913640][    T5] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3339.920651][    T5] ath9k_htc: Failed to initialize the device
[ 3339.926764][T20788] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3340.057009][T32518] usb 6-1: USB disconnect, device number 40
07:43:51 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:51 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3340.265721][T30013] usb 5-1: USB disconnect, device number 72
[ 3340.284186][T30013] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3340.293622][T20788] usb 2-1: new high-speed USB device number 71 using dummy_hcd
07:43:51 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:51 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:51 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, 0x0, 0x0)

07:43:51 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, 0x0, 0x0)

07:43:51 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, 0x0, 0x0)

07:43:51 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f00000002c0), 0x14)

07:43:51 executing program 0:
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

07:43:51 executing program 0:
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3340.623579][ T9346] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3340.630934][ T9346] ath9k_htc: Failed to initialize the device
[ 3340.643200][T14840] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3340.773579][T30013] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 3340.863597][T19259] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3340.870486][T19259] ath9k_htc: Failed to initialize the device
[ 3340.879386][T32518] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3340.883739][T20788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3340.897629][T20788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3340.907023][T20788] usb 2-1: Product: syz
[ 3340.911182][T20788] usb 2-1: Manufacturer: syz
[ 3340.917218][T20788] usb 2-1: SerialNumber: syz
[ 3340.963866][T20788] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3341.003548][T14840] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 3341.063554][ T9006] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 3341.233527][T32518] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 3341.353708][T30013] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3341.362920][T30013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3341.371268][T30013] usb 5-1: Product: syz
[ 3341.377305][T30013] usb 5-1: Manufacturer: syz
[ 3341.384912][T30013] usb 5-1: SerialNumber: syz
[ 3341.443895][T30013] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3341.523529][T14840] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3341.532659][T14840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3341.546090][T14840] usb 4-1: Product: syz
[ 3341.550227][T14840] usb 4-1: Manufacturer: syz
[ 3341.560341][T14840] usb 4-1: SerialNumber: syz
[ 3341.593516][T20788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3341.609562][T14840] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3341.653594][ T9006] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3341.662778][ T9006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3341.672374][ T9006] usb 3-1: Product: syz
[ 3341.678445][ T9006] usb 3-1: Manufacturer: syz
[ 3341.684706][ T9006] usb 3-1: SerialNumber: syz
[ 3341.725127][ T9006] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3341.753767][T32518] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3341.762925][T32518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3341.772591][T32518] usb 6-1: Product: syz
[ 3341.779212][T32518] usb 6-1: Manufacturer: syz
[ 3341.784804][T32518] usb 6-1: SerialNumber: syz
[ 3341.796479][T28703] udc-core: couldn't find an available UDC or it's busy
[ 3341.803423][T28703] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3341.814190][T17906] usb 2-1: USB disconnect, device number 71
[ 3341.824539][T32518] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3342.133498][T30013] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3342.173566][T14840] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:53 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:53 executing program 0:
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3342.376036][ T9346] usb 4-1: USB disconnect, device number 113
[ 3342.393617][ T9006] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3342.393834][T32518] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3342.594927][    T5] usb 3-1: USB disconnect, device number 88
[ 3342.612924][ T9764] usb 6-1: USB disconnect, device number 41
[ 3342.623532][T20788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3342.632436][T20788] ath9k_htc: Failed to initialize the device
[ 3342.638968][T17906] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3342.686440][T28814] udc-core: couldn't find an available UDC or it's busy
[ 3342.693623][T28814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3343.013464][T17906] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 3343.183602][T14840] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3343.183669][T30013] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3343.191299][T14840] ath9k_htc: Failed to initialize the device
[ 3343.205370][ T9346] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3343.210781][T30013] ath9k_htc: Failed to initialize the device
[ 3343.423390][ T9006] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3343.423399][T32518] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3343.423415][T32518] ath9k_htc: Failed to initialize the device
[ 3343.430283][ T9006] ath9k_htc: Failed to initialize the device
[ 3343.450689][ T9764] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3343.462568][    T5] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3343.583517][T17906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3343.592599][T17906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3343.601865][T17906] usb 2-1: Product: syz
[ 3343.608282][T17906] usb 2-1: Manufacturer: syz
[ 3343.614278][T17906] usb 2-1: SerialNumber: syz
[ 3343.663672][T17906] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:54 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:54 executing program 0:
socket$packet(0x11, 0x2, 0x300)

07:43:54 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

07:43:54 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:54 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:54 executing program 0:
socket$packet(0x11, 0x0, 0x300)

[ 3343.710239][ T9764] usb 5-1: USB disconnect, device number 73
[ 3343.726207][ T9764] usb 5-1: ath9k_htc: USB layer deinitialized
07:43:54 executing program 0:
socket$packet(0x11, 0x0, 0x300)

07:43:54 executing program 0:
socket$packet(0x11, 0x0, 0x300)

07:43:54 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3344.013390][ T9006] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 3344.243369][    T5] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 3344.251110][T20788] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 3344.303479][ T9346] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 3344.303642][T17906] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3344.323764][ T9764] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 3344.505373][T11949] usb 2-1: USB disconnect, device number 72
[ 3344.583332][ T9006] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3344.592703][ T9006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3344.603796][ T9006] usb 4-1: Product: syz
[ 3344.609297][ T9006] usb 4-1: Manufacturer: syz
[ 3344.615292][ T9006] usb 4-1: SerialNumber: syz
[ 3344.664407][ T9006] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3344.823425][ T9346] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3344.823657][T20788] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3344.833090][ T9346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3344.841606][    T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3344.861260][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3344.866380][ T9346] usb 1-1: Product: syz
[ 3344.869819][T20788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3344.881092][ T9346] usb 1-1: Manufacturer: syz
[ 3344.883298][ T9764] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3344.892526][ T9346] usb 1-1: SerialNumber: syz
[ 3344.896926][T20788] usb 6-1: Product: syz
[ 3344.905437][    T5] usb 3-1: Product: syz
[ 3344.910882][ T9764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3344.923311][T20788] usb 6-1: Manufacturer: syz
[ 3344.927908][T20788] usb 6-1: SerialNumber: syz
[ 3344.932542][    T5] usb 3-1: Manufacturer: syz
[ 3344.938975][    T5] usb 3-1: SerialNumber: syz
[ 3344.944760][ T9764] usb 5-1: Product: syz
[ 3344.945046][ T9346] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3344.948977][ T9764] usb 5-1: Manufacturer: syz
[ 3344.964905][ T9764] usb 5-1: SerialNumber: syz
07:43:55 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3345.003793][    T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3345.012386][T20788] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3345.021129][ T9764] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3345.323369][ T9006] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3345.343383][T17906] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3345.350241][T17906] ath9k_htc: Failed to initialize the device
[ 3345.356575][T11949] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3345.523273][ T9346] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3345.534980][T30013] usb 4-1: USB disconnect, device number 114
[ 3345.643279][T20788] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3345.652257][    T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3345.661224][ T9764] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3345.733136][    T7] usb 1-1: USB disconnect, device number 113
[ 3345.739180][T11949] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 3345.845741][ T5391] usb 3-1: USB disconnect, device number 89
[ 3345.856665][T16965] usb 6-1: USB disconnect, device number 42
07:43:56 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3346.201115][T28923] udc-core: couldn't find an available UDC or it's busy
[ 3346.208288][T28923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:43:57 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3346.313298][T11949] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3346.322498][T11949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3346.330529][T11949] usb 2-1: Product: syz
[ 3346.335633][T11949] usb 2-1: Manufacturer: syz
[ 3346.340582][T11949] usb 2-1: SerialNumber: syz
[ 3346.393242][ T9006] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3346.400338][T11949] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3346.408514][ T9006] ath9k_htc: Failed to initialize the device
[ 3346.416365][T30013] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3346.543182][ T9346] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3346.550232][ T9346] ath9k_htc: Failed to initialize the device
[ 3346.561570][    T7] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3346.703219][ T9764] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3346.710214][ T9764] ath9k_htc: Failed to initialize the device
[ 3346.717247][    T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3346.724114][T20788] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3346.731840][T20788] ath9k_htc: Failed to initialize the device
[ 3346.738304][    T5] ath9k_htc: Failed to initialize the device
[ 3346.744321][ T5391] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3346.752173][T16965] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3346.803182][T30013] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 3346.943305][    T7] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 3347.103324][T11949] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:57 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:57 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:43:57 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3347.229127][T16965] usb 5-1: USB disconnect, device number 74
[ 3347.237338][T16965] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3347.304855][T32518] usb 2-1: USB disconnect, device number 73
[ 3347.373160][T30013] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3347.382421][T30013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3347.390481][T30013] usb 4-1: Product: syz
[ 3347.395058][T30013] usb 4-1: Manufacturer: syz
[ 3347.400057][T30013] usb 4-1: SerialNumber: syz
[ 3347.443411][T30013] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3347.543146][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3347.552332][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3347.564579][    T7] usb 1-1: Product: syz
[ 3347.570537][    T7] usb 1-1: Manufacturer: syz
[ 3347.575160][    T7] usb 1-1: SerialNumber: syz
[ 3347.623627][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3347.723101][T14840] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 3347.733175][T19259] usb 3-1: new high-speed USB device number 90 using dummy_hcd
07:43:58 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3347.883186][T16965] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 3348.103155][T30013] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3348.153163][T11949] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3348.160267][T11949] ath9k_htc: Failed to initialize the device
[ 3348.171732][T32518] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3348.243085][T14840] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3348.243165][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3348.252485][T14840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3348.270506][T19259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3348.279591][T19259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3348.289261][T14840] usb 6-1: Product: syz
[ 3348.293561][T14840] usb 6-1: Manufacturer: syz
[ 3348.298418][T14840] usb 6-1: SerialNumber: syz
[ 3348.305454][T19259] usb 3-1: Product: syz
[ 3348.308857][T20788] usb 4-1: USB disconnect, device number 115
[ 3348.309677][T19259] usb 3-1: Manufacturer: syz
[ 3348.331158][T19259] usb 3-1: SerialNumber: syz
[ 3348.373356][T14840] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3348.385704][T19259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3348.443103][T16965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3348.452191][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3348.461893][T19259] usb 1-1: USB disconnect, device number 114
[ 3348.467278][T16965] usb 5-1: Product: syz
[ 3348.480043][T16965] usb 5-1: Manufacturer: syz
[ 3348.484704][T16965] usb 5-1: SerialNumber: syz
[ 3348.523135][T32518] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 3348.543345][T16965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:43:59 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:43:59 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

07:43:59 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

[ 3348.933030][T14840] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3348.953075][ T9691] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:43:59 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
bind$packet(r0, &(0x7f00000002c0)={0x11, 0x16}, 0x14)

07:43:59 executing program 0:
socket$packet(0x11, 0x0, 0x300)

07:43:59 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})

[ 3349.043259][T32518] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3349.052552][T32518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3349.069060][T32518] usb 2-1: Product: syz
[ 3349.083019][T32518] usb 2-1: Manufacturer: syz
[ 3349.087694][T32518] usb 2-1: SerialNumber: syz
[ 3349.137155][T16965] usb 6-1: USB disconnect, device number 43
[ 3349.154592][T32518] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3349.169539][ T9346] usb 3-1: USB disconnect, device number 90
[ 3349.184772][T30013] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3349.191780][T30013] ath9k_htc: Failed to initialize the device
[ 3349.204741][T20788] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3349.293012][ T9764] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3349.353027][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3349.360362][    T7] ath9k_htc: Failed to initialize the device
[ 3349.372102][T19259] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3349.495225][T28961] udc-core: couldn't find an available UDC or it's busy
[ 3349.502300][T28961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3349.510316][T21295] usb 5-1: USB disconnect, device number 75
[ 3349.573010][T20788] usb 4-1: new high-speed USB device number 116 using dummy_hcd
07:44:00 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:44:00 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3349.722980][T32518] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3349.732153][T19259] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 3349.924462][T19273] usb 2-1: USB disconnect, device number 74
07:44:00 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3349.983047][ T9691] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3349.990157][ T9691] ath9k_htc: Failed to initialize the device
[ 3349.996276][T14840] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3350.003222][T14840] ath9k_htc: Failed to initialize the device
[ 3350.010131][ T9346] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3350.010066][T16965] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3350.152998][T20788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3350.162183][T20788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3350.170495][T20788] usb 4-1: Product: syz
[ 3350.176215][T20788] usb 4-1: Manufacturer: syz
[ 3350.181316][T20788] usb 4-1: SerialNumber: syz
[ 3350.224122][T20788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3350.263252][T19259] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3350.272483][T19259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3350.286026][T19259] usb 1-1: Product: syz
[ 3350.290299][T19259] usb 1-1: Manufacturer: syz
[ 3350.300326][T19259] usb 1-1: SerialNumber: syz
[ 3350.343143][T19259] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3350.355770][T16965] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 3350.382944][ T9346] usb 3-1: new high-speed USB device number 91 using dummy_hcd
07:44:01 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3350.393177][ T9764] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3350.400560][ T9764] ath9k_htc: Failed to initialize the device
[ 3350.406741][T21295] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3350.763387][T21295] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 3350.783125][T32518] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3350.790268][T32518] ath9k_htc: Failed to initialize the device
[ 3350.797797][T19273] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3350.882921][T20788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3350.902925][T19259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3350.912062][ T9346] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3350.921703][ T9346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3350.931090][ T9346] usb 3-1: Product: syz
[ 3350.936660][ T9346] usb 3-1: Manufacturer: syz
[ 3350.942634][ T9346] usb 3-1: SerialNumber: syz
[ 3350.954214][T16965] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3350.964271][T16965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3350.972354][T16965] usb 6-1: Product: syz
[ 3350.978512][T16965] usb 6-1: Manufacturer: syz
[ 3350.983477][T16965] usb 6-1: SerialNumber: syz
[ 3350.983780][ T9346] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3351.033315][T16965] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3351.095744][T29019] udc-core: couldn't find an available UDC or it's busy
[ 3351.103762][T29019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3351.112163][    T7] usb 4-1: USB disconnect, device number 116
[ 3351.162923][T19273] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 3351.282911][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3351.292198][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3351.300560][T21295] usb 5-1: Product: syz
[ 3351.306434][T21295] usb 5-1: Manufacturer: syz
[ 3351.312350][T21295] usb 5-1: SerialNumber: syz
[ 3351.353220][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3351.461715][T29126] udc-core: couldn't find an available UDC or it's busy
[ 3351.468843][T29126] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:44:02 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3351.562878][ T9346] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3351.682980][T19273] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3351.692371][T19273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3351.708024][T19273] usb 2-1: Product: syz
[ 3351.712727][T19273] usb 2-1: Manufacturer: syz
[ 3351.712837][T16965] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3351.723717][T19273] usb 2-1: SerialNumber: syz
[ 3351.767770][T29059] udc-core: couldn't find an available UDC or it's busy
[ 3351.775027][T29059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3351.783575][T19273] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3351.797390][T19273] usb 3-1: USB disconnect, device number 91
[ 3351.902982][T20788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3351.910103][T20788] ath9k_htc: Failed to initialize the device
[ 3351.918863][    T7] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3351.924158][T21295] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3351.933761][ T9764] usb 6-1: USB disconnect, device number 44
[ 3351.982839][T19259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3351.989815][T19259] ath9k_htc: Failed to initialize the device
[ 3352.126988][ T9691] usb 5-1: USB disconnect, device number 76
07:44:03 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3352.302813][    T7] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 3352.372833][T32518] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:03 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:44:03 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3352.486235][T30013] usb 1-1: USB disconnect, device number 115
[ 3352.499331][T30013] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3352.575563][ T9006] usb 2-1: USB disconnect, device number 75
07:44:03 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3352.622772][ T9346] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3352.629669][ T9346] ath9k_htc: Failed to initialize the device
[ 3352.636297][T19273] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3352.782751][T16965] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3352.789717][T16965] ath9k_htc: Failed to initialize the device
[ 3352.795895][ T9764] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3352.874150][    T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3352.883276][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3352.891243][    T7] usb 4-1: Product: syz
[ 3352.896996][    T7] usb 4-1: Manufacturer: syz
[ 3352.902654][    T7] usb 4-1: SerialNumber: syz
[ 3352.942738][T21295] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3352.942984][    T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3352.952137][T21295] ath9k_htc: Failed to initialize the device
[ 3352.973849][ T9691] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3352.992730][T19273] usb 3-1: new high-speed USB device number 92 using dummy_hcd
07:44:03 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3353.112944][T30013] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 3353.162717][ T9764] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 3353.332689][ T9691] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 3353.422694][T32518] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3353.429650][T32518] ath9k_htc: Failed to initialize the device
[ 3353.441045][ T9006] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3353.512711][T19273] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3353.512733][T19273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3353.512822][T19273] usb 3-1: Product: syz
[ 3353.536284][T19273] usb 3-1: Manufacturer: syz
[ 3353.542006][T19273] usb 3-1: SerialNumber: syz
[ 3353.583084][T19273] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3353.602840][    T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3353.692722][T30013] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3353.701758][T30013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3353.711220][T30013] usb 1-1: Product: syz
[ 3353.717123][T30013] usb 1-1: Manufacturer: syz
[ 3353.722589][T30013] usb 1-1: SerialNumber: syz
[ 3353.763012][T30013] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3353.771237][ T9764] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3353.781438][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3353.792649][ T9764] usb 6-1: Product: syz
[ 3353.796795][ T9764] usb 6-1: Manufacturer: syz
[ 3353.801364][ T9764] usb 6-1: SerialNumber: syz
[ 3353.822728][ T9006] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 3353.830287][T29128] udc-core: couldn't find an available UDC or it's busy
[ 3353.838698][T29128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3353.847370][T19259] usb 4-1: USB disconnect, device number 117
[ 3353.862790][ T9691] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3353.871851][ T9691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3353.881325][ T9691] usb 5-1: Product: syz
[ 3353.884419][ T9764] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3353.886912][ T9691] usb 5-1: Manufacturer: syz
[ 3353.911880][ T9691] usb 5-1: SerialNumber: syz
[ 3353.953059][ T9691] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3354.152657][T19273] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:05 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3354.355786][T29149] udc-core: couldn't find an available UDC or it's busy
[ 3354.363853][T29149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3354.371754][ T9346] usb 3-1: USB disconnect, device number 92
[ 3354.412654][ T9006] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3354.421707][ T9006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3354.429745][ T9006] usb 2-1: Product: syz
[ 3354.434110][ T9006] usb 2-1: Manufacturer: syz
[ 3354.439035][ T9006] usb 2-1: SerialNumber: syz
[ 3354.492900][ T9006] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3354.512912][T30013] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3354.522623][ T9691] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3354.542808][ T9764] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3354.632765][    T7] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3354.639755][    T7] ath9k_htc: Failed to initialize the device
[ 3354.650621][T19259] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3354.719007][T29162] udc-core: couldn't find an available UDC or it's busy
[ 3354.725300][ T5391] usb 5-1: USB disconnect, device number 77
[ 3354.728061][T29162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3354.743594][T21295] usb 1-1: USB disconnect, device number 116
[ 3354.752977][T16965] usb 6-1: USB disconnect, device number 45
07:44:05 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3355.002594][T19259] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 3355.152584][ T9006] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3355.182587][T19273] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3355.189574][T19273] ath9k_htc: Failed to initialize the device
[ 3355.195838][ T9346] usb 3-1: ath9k_htc: USB layer deinitialized
07:44:05 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:44:06 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

07:44:06 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3355.355192][T11949] usb 2-1: USB disconnect, device number 76
[ 3355.522605][T19259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3355.532967][T19259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3355.540932][T19259] usb 4-1: Product: syz
[ 3355.545828][T19259] usb 4-1: Manufacturer: syz
[ 3355.551191][T19259] usb 4-1: SerialNumber: syz
[ 3355.556864][ T9346] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 3355.582577][ T9764] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3355.584097][ T9691] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3355.589446][T30013] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3355.597131][ T9691] ath9k_htc: Failed to initialize the device
[ 3355.613134][ T5391] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3355.621598][ T9764] ath9k_htc: Failed to initialize the device
[ 3355.623628][T19259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3355.640029][T16965] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3355.648069][T30013] ath9k_htc: Failed to initialize the device
[ 3355.659555][T21295] usb 1-1: ath9k_htc: USB layer deinitialized
07:44:06 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3356.002696][T21295] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 3356.003370][ T5391] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 3356.032520][T16965] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 3356.082541][ T9346] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3356.091761][ T9346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3356.099774][ T9346] usb 3-1: Product: syz
[ 3356.104706][ T9346] usb 3-1: Manufacturer: syz
[ 3356.109624][ T9346] usb 3-1: SerialNumber: syz
[ 3356.152723][ T9346] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3356.202527][T19259] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3356.232526][ T9006] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3356.239731][ T9006] ath9k_htc: Failed to initialize the device
[ 3356.245727][T11949] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3356.415347][T29232] udc-core: couldn't find an available UDC or it's busy
[ 3356.422426][T29232] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3356.440626][    T7] usb 4-1: USB disconnect, device number 118
[ 3356.522583][T21295] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3356.532154][T21295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3356.547101][T21295] usb 1-1: Product: syz
[ 3356.551241][T21295] usb 1-1: Manufacturer: syz
[ 3356.560696][T21295] usb 1-1: SerialNumber: syz
[ 3356.582817][ T5391] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3356.591968][ T5391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3356.601272][T16965] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3356.604545][T21295] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3356.610679][T16965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3356.627082][T11949] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 3356.634654][ T5391] usb 5-1: Product: syz
[ 3356.638787][ T5391] usb 5-1: Manufacturer: syz
[ 3356.652281][T16965] usb 6-1: Product: syz
[ 3356.656668][ T5391] usb 5-1: SerialNumber: syz
[ 3356.663136][T16965] usb 6-1: Manufacturer: syz
[ 3356.667803][T16965] usb 6-1: SerialNumber: syz
[ 3356.712513][ T9346] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3356.712716][ T5391] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3356.729835][T16965] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:07 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3356.913921][T29253] udc-core: couldn't find an available UDC or it's busy
[ 3356.921005][T29253] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3356.935669][ T9691] usb 3-1: USB disconnect, device number 93
[ 3357.192470][T21295] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3357.242476][T11949] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3357.251527][T11949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3357.262444][T19259] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3357.268376][T11949] usb 2-1: Product: syz
[ 3357.271924][T19259] ath9k_htc: Failed to initialize the device
[ 3357.280473][T11949] usb 2-1: Manufacturer: syz
[ 3357.280543][    T7] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3357.292503][T11949] usb 2-1: SerialNumber: syz
[ 3357.342802][T11949] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3357.382585][T16965] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:08 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3357.391975][ T9764] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3357.586132][T19273] usb 6-1: USB disconnect, device number 46
[ 3357.595656][T14840] usb 5-1: USB disconnect, device number 78
[ 3357.662401][    T7] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 3357.742398][ T9346] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3357.749272][ T9346] ath9k_htc: Failed to initialize the device
[ 3357.760616][ T9691] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3357.770036][T29355] udc-core: couldn't find an available UDC or it's busy
[ 3357.779492][T29355] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3357.992446][T11949] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:08 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:44:08 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3358.123638][ T9691] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 3358.194952][ T5391] usb 2-1: USB disconnect, device number 77
[ 3358.222374][T21295] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3358.230595][T21295] ath9k_htc: Failed to initialize the device
[ 3358.242356][    T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3358.251422][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3358.259442][    T7] usb 4-1: Product: syz
[ 3358.263663][    T7] usb 4-1: Manufacturer: syz
[ 3358.268590][    T7] usb 4-1: SerialNumber: syz
[ 3358.312642][    T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3358.462347][T16965] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3358.469271][ T9764] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3358.476657][ T9764] ath9k_htc: Failed to initialize the device
[ 3358.482797][T16965] ath9k_htc: Failed to initialize the device
[ 3358.491503][T14840] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3358.497921][T19273] usb 6-1: ath9k_htc: USB layer deinitialized
07:44:09 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3358.642348][ T9691] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3358.651442][ T9691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3358.660898][ T9691] usb 3-1: Product: syz
[ 3358.667380][ T9691] usb 3-1: Manufacturer: syz
[ 3358.673515][ T9691] usb 3-1: SerialNumber: syz
[ 3358.713059][ T9691] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:09 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3358.797148][ T9691] usb 1-1: USB disconnect, device number 117
[ 3358.812997][ T9691] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3358.852765][T19273] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 3358.860350][T14840] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 3358.952805][    T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3359.032356][T11949] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3359.040818][T11949] ath9k_htc: Failed to initialize the device
[ 3359.052742][ T5391] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3359.154845][T29333] udc-core: couldn't find an available UDC or it's busy
[ 3359.161780][T29333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3359.170739][ T9691] usb 4-1: USB disconnect, device number 119
[ 3359.292403][T25325] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3359.302328][ T9006] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 3359.372335][T19273] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3359.381391][T19273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3359.389517][T14840] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3359.400127][T19273] usb 6-1: Product: syz
[ 3359.404325][T14840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3359.413769][T19273] usb 6-1: Manufacturer: syz
[ 3359.418354][T19273] usb 6-1: SerialNumber: syz
[ 3359.423051][T14840] usb 5-1: Product: syz
[ 3359.427839][T14840] usb 5-1: Manufacturer: syz
[ 3359.434490][T14840] usb 5-1: SerialNumber: syz
[ 3359.442319][ T5391] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 3359.472658][T19273] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3359.481426][T14840] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3359.502917][T30013] usb 3-1: USB disconnect, device number 94
07:44:10 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3359.882279][ T9006] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3359.891365][ T9006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3359.899528][ T9006] usb 1-1: Product: syz
[ 3359.907108][ T9006] usb 1-1: Manufacturer: syz
[ 3359.913408][ T9006] usb 1-1: SerialNumber: syz
[ 3359.962549][ T9006] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3359.984382][    T7] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3359.991729][    T7] ath9k_htc: Failed to initialize the device
07:44:10 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3360.008316][ T9691] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3360.012287][ T5391] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3360.029325][ T5391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3360.041357][ T5391] usb 2-1: Product: syz
[ 3360.047428][ T5391] usb 2-1: Manufacturer: syz
[ 3360.052510][ T5391] usb 2-1: SerialNumber: syz
[ 3360.062324][T14840] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3360.071318][T19273] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3360.104188][ T5391] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3360.265159][ T9346] usb 6-1: USB disconnect, device number 47
[ 3360.280004][T29364] udc-core: couldn't find an available UDC or it's busy
[ 3360.287075][T29364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3360.302237][T25325] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3360.302872][ T9764] usb 5-1: USB disconnect, device number 79
[ 3360.310670][T25325] ath9k_htc: Failed to initialize the device
[ 3360.324087][T30013] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3360.372228][ T9691] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 3360.592253][ T9006] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3360.692406][T30013] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 3360.722253][ T5391] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:11 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:44:11 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3360.892202][ T9691] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3360.901288][ T9691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3360.910885][ T9691] usb 4-1: Product: syz
[ 3360.915272][ T9691] usb 4-1: Manufacturer: syz
[ 3360.919967][ T9691] usb 4-1: SerialNumber: syz
[ 3360.935995][T19259] usb 2-1: USB disconnect, device number 78
[ 3360.972371][ T9691] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3361.102177][T19273] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3361.109078][T19273] ath9k_htc: Failed to initialize the device
[ 3361.115070][T14840] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3361.121950][T14840] ath9k_htc: Failed to initialize the device
[ 3361.128101][ T9346] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3361.128188][ T9764] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3361.151258][T29487] udc-core: couldn't find an available UDC or it's busy
[ 3361.163123][T29487] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3361.252231][T30013] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3361.261295][T30013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3361.270764][T30013] usb 3-1: Product: syz
[ 3361.276507][T30013] usb 3-1: Manufacturer: syz
[ 3361.281277][T30013] usb 3-1: SerialNumber: syz
[ 3361.322335][T30013] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:12 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3361.492171][ T9346] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 3361.512208][ T9764] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 3361.532163][ T9691] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3361.662137][ T9006] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3361.669267][ T9006] ath9k_htc: Failed to initialize the device
[ 3361.735391][T25325] usb 4-1: USB disconnect, device number 120
[ 3361.748288][ T5391] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3361.755596][ T5391] ath9k_htc: Failed to initialize the device
[ 3361.761602][T19259] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3361.972307][T30013] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3362.012454][ T9346] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3362.021484][ T9346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3362.029954][ T9346] usb 6-1: Product: syz
[ 3362.036536][ T9346] usb 6-1: Manufacturer: syz
[ 3362.043096][ T9346] usb 6-1: SerialNumber: syz
[ 3362.082564][ T9346] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3362.112459][ T9764] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3362.121682][ T9764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3362.122124][T19259] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 3362.140148][ T9764] usb 5-1: Product: syz
[ 3362.145786][ T9764] usb 5-1: Manufacturer: syz
[ 3362.150397][ T9764] usb 5-1: SerialNumber: syz
07:44:12 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3362.175120][T11949] usb 3-1: USB disconnect, device number 95
[ 3362.197133][T14840] usb 1-1: USB disconnect, device number 118
[ 3362.213949][ T9764] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:13 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3362.218173][T14840] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3362.542082][ T9691] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3362.549093][ T9691] ath9k_htc: Failed to initialize the device
[ 3362.560565][T25325] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3362.642198][ T9346] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3362.658134][T19259] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3362.667291][T14840] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 3362.675023][T19259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
07:44:13 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3362.692011][T19259] usb 2-1: Product: syz
[ 3362.696723][T19259] usb 2-1: Manufacturer: syz
[ 3362.707723][T19259] usb 2-1: SerialNumber: syz
[ 3362.752221][T19259] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3362.844915][T16965] usb 6-1: USB disconnect, device number 48
[ 3362.872078][ T9764] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3362.922050][T25325] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 3363.022261][T30013] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3363.029183][T30013] ath9k_htc: Failed to initialize the device
[ 3363.038032][T11949] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3363.075332][T29466] udc-core: couldn't find an available UDC or it's busy
[ 3363.082713][T29466] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3363.090467][T32518] usb 5-1: USB disconnect, device number 80
[ 3363.192036][T14840] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3363.201170][T14840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3363.211894][T14840] usb 1-1: Product: syz
[ 3363.217617][T14840] usb 1-1: Manufacturer: syz
[ 3363.224789][T14840] usb 1-1: SerialNumber: syz
[ 3363.265696][T14840] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:14 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3e, 0x4, 0x1, 0x0, 0xf8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3363.322045][T19259] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3363.422807][T11949] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 3363.442052][T25325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3363.451231][T25325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3363.459493][T25325] usb 4-1: Product: syz
[ 3363.464133][T25325] usb 4-1: Manufacturer: syz
[ 3363.469000][T25325] usb 4-1: SerialNumber: syz
[ 3363.512301][T25325] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3363.540839][ T5391] usb 2-1: USB disconnect, device number 79
07:44:14 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3363.661995][ T9346] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3363.668882][ T9346] ath9k_htc: Failed to initialize the device
[ 3363.678965][T16965] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3363.832031][T14840] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3363.901992][ T9764] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3363.908953][ T9764] ath9k_htc: Failed to initialize the device
[ 3363.917796][T32518] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3364.022015][T11949] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3364.031098][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3364.039264][T11949] usb 3-1: Product: syz
[ 3364.045133][T11949] usb 3-1: Manufacturer: syz
[ 3364.049768][T11949] usb 3-1: SerialNumber: syz
[ 3364.054446][T16965] usb 6-1: new high-speed USB device number 49 using dummy_hcd
07:44:14 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3364.071974][T25325] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3364.093961][T29524] udc-core: couldn't find an available UDC or it's busy
[ 3364.104071][T29524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3364.113012][T11949] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3364.129725][T11949] usb 1-1: USB disconnect, device number 119
[ 3364.271956][T32518] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 3364.281682][ T9006] usb 4-1: USB disconnect, device number 121
[ 3364.381969][T19259] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3364.388908][T19259] ath9k_htc: Failed to initialize the device
[ 3364.400535][ T5391] usb 2-1: ath9k_htc: USB layer deinitialized
07:44:15 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3364.651980][T16965] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3364.661035][T16965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3364.670458][T16965] usb 6-1: Product: syz
[ 3364.675519][T16965] usb 6-1: Manufacturer: syz
[ 3364.680353][T16965] usb 6-1: SerialNumber: syz
[ 3364.732110][T16965] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3364.751947][ T5391] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 3364.772216][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:15 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3364.793688][T32518] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3364.802870][T32518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3364.810917][T32518] usb 5-1: Product: syz
[ 3364.819553][T32518] usb 5-1: Manufacturer: syz
[ 3364.825865][T32518] usb 5-1: SerialNumber: syz
[ 3364.861914][T14840] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3364.868782][T14840] ath9k_htc: Failed to initialize the device
[ 3364.875108][T32518] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3364.884659][T11949] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3364.973128][ T9764] usb 3-1: USB disconnect, device number 96
[ 3365.101944][T25325] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3365.109378][T25325] ath9k_htc: Failed to initialize the device
[ 3365.120814][ T9006] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3365.251889][T11949] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 3365.301999][ T5391] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3365.311119][ T5391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3365.325055][ T5391] usb 2-1: Product: syz
[ 3365.329348][ T5391] usb 2-1: Manufacturer: syz
[ 3365.339544][ T5391] usb 2-1: SerialNumber: syz
[ 3365.363062][T16965] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3365.392211][ T5391] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:16 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3365.441891][T32518] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3365.502113][ T9006] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 3365.565168][T19259] usb 6-1: USB disconnect, device number 49
[ 3365.643980][T29579] udc-core: couldn't find an available UDC or it's busy
[ 3365.650989][T29579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3365.660352][ T9691] usb 5-1: USB disconnect, device number 81
[ 3365.821904][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3365.828765][T11949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3365.837826][    T7] ath9k_htc: Failed to initialize the device
[ 3365.851661][T11949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3365.862695][ T9764] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3365.869833][T11949] usb 1-1: Product: syz
[ 3365.880106][T11949] usb 1-1: Manufacturer: syz
[ 3365.887187][T11949] usb 1-1: SerialNumber: syz
[ 3365.932240][T11949] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3366.011968][ T5391] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:16 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3e, 0x4, 0x1, 0x0, 0xf8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3366.072185][ T9006] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3366.081199][ T9006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3366.093719][ T9006] usb 4-1: Product: syz
[ 3366.099402][ T9006] usb 4-1: Manufacturer: syz
[ 3366.104471][ T9006] usb 4-1: SerialNumber: syz
07:44:16 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3366.152248][ T9006] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3366.219947][T25325] usb 2-1: USB disconnect, device number 80
[ 3366.241822][ T9764] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 3366.391827][T16965] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3366.398929][T16965] ath9k_htc: Failed to initialize the device
[ 3366.410325][T19259] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3366.461819][T32518] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3366.468784][T32518] ath9k_htc: Failed to initialize the device
[ 3366.475089][ T9691] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3366.591823][T11949] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:17 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3e, 0x4, 0x1, 0x0, 0xf8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3366.761781][T19259] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 3366.781989][ T9006] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3366.800682][T29612] udc-core: couldn't find an available UDC or it's busy
[ 3366.807886][ T9764] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3366.807935][T29612] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3366.816916][ T9764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3366.816929][ T9764] usb 3-1: Product: syz
[ 3366.816938][ T9764] usb 3-1: Manufacturer: syz
[ 3366.816947][ T9764] usb 3-1: SerialNumber: syz
[ 3366.831873][ T9691] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 3366.856367][T19273] usb 1-1: USB disconnect, device number 120
[ 3366.882288][ T9764] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3366.984118][    T7] usb 4-1: USB disconnect, device number 122
[ 3367.021785][ T5391] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3367.028673][ T5391] ath9k_htc: Failed to initialize the device
[ 3367.036176][T25325] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3367.281763][T19259] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3367.290825][T19259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3367.300368][T19259] usb 6-1: Product: syz
[ 3367.306064][T19259] usb 6-1: Manufacturer: syz
[ 3367.312137][T19259] usb 6-1: SerialNumber: syz
07:44:18 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3367.352118][T19259] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3367.371810][ T9691] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3367.381589][ T9691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3367.390538][ T9691] usb 5-1: Product: syz
[ 3367.395194][T25325] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 3367.403116][ T9691] usb 5-1: Manufacturer: syz
[ 3367.407708][ T9691] usb 5-1: SerialNumber: syz
07:44:18 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3367.452000][ T9691] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3367.511776][ T9764] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3367.661791][T11949] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3367.668820][T11949] ath9k_htc: Failed to initialize the device
[ 3367.680042][T19273] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3367.715439][T29650] udc-core: couldn't find an available UDC or it's busy
[ 3367.722583][T29650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3367.730309][T32518] usb 3-1: USB disconnect, device number 97
[ 3367.821719][ T9006] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3367.828597][ T9006] ath9k_htc: Failed to initialize the device
[ 3367.839733][    T7] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3367.921788][T19259] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3367.930763][T25325] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3367.940243][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3367.949922][T25325] usb 2-1: Product: syz
[ 3367.955521][T25325] usb 2-1: Manufacturer: syz
[ 3367.960719][T25325] usb 2-1: SerialNumber: syz
[ 3368.001971][T25325] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3368.014562][ T9691] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3368.031757][T19273] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 3368.124758][ T9346] usb 6-1: USB disconnect, device number 50
07:44:18 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3368.211687][    T7] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 3368.225216][ T5391] usb 5-1: USB disconnect, device number 82
[ 3368.541682][ T9764] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3368.548636][ T9764] ath9k_htc: Failed to initialize the device
[ 3368.551732][T19273] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3368.565058][T32518] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3368.571912][T25325] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3368.581851][T19273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
07:44:19 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3e, 0x4, 0x1, 0x0, 0xf8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3368.592905][T19273] usb 1-1: Product: syz
[ 3368.600453][T19273] usb 1-1: Manufacturer: syz
[ 3368.605072][T19273] usb 1-1: SerialNumber: syz
[ 3368.652037][T19273] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:19 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3368.779311][T11949] usb 2-1: USB disconnect, device number 81
[ 3368.821690][    T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3368.832187][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3368.840144][    T7] usb 4-1: Product: syz
[ 3368.851760][    T7] usb 4-1: Manufacturer: syz
[ 3368.860618][    T7] usb 4-1: SerialNumber: syz
[ 3368.911880][    T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3368.932189][T32518] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 3368.941669][T19259] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3368.950002][T19259] ath9k_htc: Failed to initialize the device
[ 3368.956355][ T9346] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3369.101720][ T9691] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3369.108795][ T9691] ath9k_htc: Failed to initialize the device
[ 3369.116263][ T5391] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3369.211652][T19273] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:20 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3369.312102][ T9346] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 3369.422649][T30013] usb 1-1: USB disconnect, device number 121
[ 3369.451869][T32518] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3369.460917][T32518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3369.471636][ T5391] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 3369.472866][T32518] usb 3-1: Product: syz
[ 3369.484498][T32518] usb 3-1: Manufacturer: syz
[ 3369.490875][T32518] usb 3-1: SerialNumber: syz
[ 3369.532321][T32518] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3369.581620][T25325] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3369.588568][T25325] ath9k_htc: Failed to initialize the device
[ 3369.595849][T11949] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3369.602094][    T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3369.804798][T29728] udc-core: couldn't find an available UDC or it's busy
[ 3369.811763][T29728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3369.819435][T16965] usb 4-1: USB disconnect, device number 123
[ 3369.831888][ T9346] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3369.842506][ T9346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3369.851555][ T9346] usb 6-1: Product: syz
[ 3369.856731][ T9346] usb 6-1: Manufacturer: syz
[ 3369.862589][ T9346] usb 6-1: SerialNumber: syz
07:44:20 executing program 0:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:44:20 executing program 0:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3369.902134][ T9346] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:20 executing program 0:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:44:20 executing program 0:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:44:20 executing program 0:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

07:44:20 executing program 0:
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

[ 3369.981597][T11949] usb 2-1: new high-speed USB device number 82 using dummy_hcd
07:44:20 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3370.083077][ T5391] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3370.092319][ T5391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3370.100268][ T5391] usb 5-1: Product: syz
[ 3370.101567][T32518] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3370.106092][ T5391] usb 5-1: Manufacturer: syz
[ 3370.118687][ T5391] usb 5-1: SerialNumber: syz
[ 3370.171867][ T5391] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3370.221614][T19273] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3370.228627][T19273] ath9k_htc: Failed to initialize the device
[ 3370.239862][T30013] usb 1-1: ath9k_htc: USB layer deinitialized
07:44:21 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3370.322769][T29756] udc-core: couldn't find an available UDC or it's busy
[ 3370.329798][T29756] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3370.341141][ T9006] usb 3-1: USB disconnect, device number 98
[ 3370.471542][ T9346] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3370.541712][T11949] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3370.550808][T11949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3370.560302][T11949] usb 2-1: Product: syz
[ 3370.566270][T11949] usb 2-1: Manufacturer: syz
[ 3370.572292][T11949] usb 2-1: SerialNumber: syz
[ 3370.612828][T11949] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3370.631587][    T7] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3370.640644][    T7] ath9k_htc: Failed to initialize the device
[ 3370.647200][T16965] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3370.671634][T30013] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 3370.686205][T25325] usb 6-1: USB disconnect, device number 51
07:44:21 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3370.821585][ T5391] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3371.021500][T16965] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 3371.024033][T19259] usb 5-1: USB disconnect, device number 83
07:44:21 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x0, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3371.181487][T32518] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3371.189477][T32518] ath9k_htc: Failed to initialize the device
[ 3371.203440][ T9006] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3371.222328][T30013] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3371.231343][T30013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3371.239419][T30013] usb 1-1: Product: syz
[ 3371.245198][T30013] usb 1-1: Manufacturer: syz
[ 3371.251113][T30013] usb 1-1: SerialNumber: syz
[ 3371.272388][T11949] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3371.291903][T30013] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:22 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3371.501470][ T9346] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3371.508462][ T9346] ath9k_htc: Failed to initialize the device
[ 3371.514499][T25325] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3371.591519][ T9006] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 3371.611519][T16965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3371.620735][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3371.633988][T16965] usb 4-1: Product: syz
[ 3371.638157][T16965] usb 4-1: Manufacturer: syz
[ 3371.648398][T16965] usb 4-1: SerialNumber: syz
[ 3371.691746][T16965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3371.831338][T29904] udc-core: couldn't find an available UDC or it's busy
[ 3371.839521][T29904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3371.871458][T25325] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 3371.901521][ T5391] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3371.908409][ T5391] ath9k_htc: Failed to initialize the device
[ 3371.916960][T19259] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3371.931522][    T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3372.138265][T19273] usb 1-1: USB disconnect, device number 122
[ 3372.158557][ T9006] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3372.167635][ T9006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3372.182162][ T9006] usb 3-1: Product: syz
[ 3372.186301][ T9006] usb 3-1: Manufacturer: syz
[ 3372.191223][ T9006] usb 3-1: SerialNumber: syz
[ 3372.241731][ T9006] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3372.271768][T19259] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 3372.301925][T11949] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3372.308913][T11949] ath9k_htc: Failed to initialize the device
[ 3372.331557][T16965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3372.391444][T25325] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3372.400877][T25325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3372.408885][T25325] usb 6-1: Product: syz
[ 3372.413746][T25325] usb 6-1: Manufacturer: syz
[ 3372.419552][T25325] usb 6-1: SerialNumber: syz
[ 3372.461646][T25325] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3372.534989][T25325] usb 4-1: USB disconnect, device number 124
[ 3372.791453][T19259] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3372.800766][T19259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3372.810770][T19259] usb 5-1: Product: syz
[ 3372.816619][T19259] usb 5-1: Manufacturer: syz
[ 3372.821695][T19259] usb 5-1: SerialNumber: syz
07:44:23 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:44:23 executing program 0:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3372.857836][T21295] usb 2-1: USB disconnect, device number 82
[ 3372.864294][T19259] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3372.873131][T21295] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3372.880233][ T9006] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3372.941535][    T5] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3372.948616][    T5] ath9k_htc: Failed to initialize the device
[ 3372.954783][T19273] usb 1-1: ath9k_htc: USB layer deinitialized
07:44:23 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3373.021403][ T9346] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3373.074457][T29869] udc-core: couldn't find an available UDC or it's busy
[ 3373.081569][T29869] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3373.089300][T21295] usb 3-1: USB disconnect, device number 99
[ 3373.232956][T11949] usb 6-1: USB disconnect, device number 52
[ 3373.311388][T19273] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 3373.341393][T16965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3373.348368][T16965] ath9k_htc: Failed to initialize the device
[ 3373.354574][T25325] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3373.411350][ T5391] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 3373.441332][T19259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:24 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3373.644060][ T9691] usb 5-1: USB disconnect, device number 84
07:44:24 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x0, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3373.711328][T25325] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 3373.831593][T19273] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3373.840719][T19273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3373.853794][T19273] usb 1-1: Product: syz
[ 3373.857942][T19273] usb 1-1: Manufacturer: syz
[ 3373.867151][T19273] usb 1-1: SerialNumber: syz
[ 3373.911644][T19273] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3373.971477][ T5391] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3373.980497][ T5391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3373.989854][ T9006] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3373.998228][ T9006] ath9k_htc: Failed to initialize the device
[ 3374.004231][ T5391] usb 2-1: Product: syz
[ 3374.004320][T21295] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3374.008360][ T5391] usb 2-1: Manufacturer: syz
[ 3374.008452][ T5391] usb 2-1: SerialNumber: syz
[ 3374.061311][ T9346] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3374.068212][ T9346] ath9k_htc: Failed to initialize the device
[ 3374.079745][T11949] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3374.086110][ T5391] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:24 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3374.251297][T25325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3374.260413][T25325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3374.270969][T25325] usb 4-1: Product: syz
[ 3374.275684][T25325] usb 4-1: Manufacturer: syz
[ 3374.281773][T25325] usb 4-1: SerialNumber: syz
[ 3374.321654][T25325] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3374.371465][T21295] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 3374.461285][T19259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3374.468239][T19259] ath9k_htc: Failed to initialize the device
[ 3374.471253][T11949] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 3374.482712][T19273] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3374.494131][ T9691] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3374.688434][T32518] usb 1-1: USB disconnect, device number 123
[ 3374.721248][ T5391] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3374.851544][ T9691] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 3374.891257][T25325] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3374.900286][T21295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3374.911028][T21295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3374.931414][T21295] usb 3-1: Product: syz
[ 3374.936734][T21295] usb 3-1: Manufacturer: syz
[ 3374.941642][T21295] usb 3-1: SerialNumber: syz
[ 3374.981790][T21295] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3375.041285][T11949] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3375.050389][T11949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3375.058773][T11949] usb 6-1: Product: syz
[ 3375.064874][T11949] usb 6-1: Manufacturer: syz
[ 3375.069936][T11949] usb 6-1: SerialNumber: syz
[ 3375.105303][T15167] usb 4-1: USB disconnect, device number 125
[ 3375.123244][T11949] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:25 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x0, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3375.381228][ T9691] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3375.390327][ T9691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3375.401372][ T9691] usb 5-1: Product: syz
[ 3375.406168][ T9691] usb 5-1: Manufacturer: syz
[ 3375.411988][ T9691] usb 5-1: SerialNumber: syz
[ 3375.451412][ T9691] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3375.501201][T19273] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3375.508242][T19273] ath9k_htc: Failed to initialize the device
[ 3375.514574][T32518] usb 1-1: ath9k_htc: USB layer deinitialized
07:44:26 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 3375.561197][T21295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3375.741188][ T5391] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3375.748242][ T5391] ath9k_htc: Failed to initialize the device
[ 3375.764585][ T9346] usb 3-1: USB disconnect, device number 100
[ 3375.811324][T16965] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3375.871175][T32518] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 3375.981162][T25325] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3375.988094][T25325] ath9k_htc: Failed to initialize the device
[ 3375.999488][T15167] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3376.011147][ T9691] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3376.024102][ T9006] usb 6-1: USB disconnect, device number 53
[ 3376.213642][T19259] usb 5-1: USB disconnect, device number 85
07:44:27 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

07:44:27 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3376.302711][ T9764] usb 2-1: USB disconnect, device number 83
[ 3376.321358][ T9764] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3376.371147][T15167] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 3376.391154][T32518] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3376.402132][T32518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3376.410088][T32518] usb 1-1: Product: syz
[ 3376.422288][T32518] usb 1-1: Manufacturer: syz
[ 3376.426984][T32518] usb 1-1: SerialNumber: syz
[ 3376.471325][T32518] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:27 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x42, 0x4, 0x1, 0x0, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x0, 0x11, "a242bf0684d79757c5a738297b5f5f"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3376.621161][T21295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3376.628049][T21295] ath9k_htc: Failed to initialize the device
[ 3376.634265][ T9346] usb 3-1: ath9k_htc: USB layer deinitialized
07:44:27 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3376.811107][T19273] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 3376.871155][T16965] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3376.878066][T16965] ath9k_htc: Failed to initialize the device
[ 3376.889838][ T9006] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3376.901282][T15167] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3376.910838][T15167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3376.920725][T15167] usb 4-1: Product: syz
[ 3376.927912][T15167] usb 4-1: Manufacturer: syz
[ 3376.934286][T15167] usb 4-1: SerialNumber: syz
[ 3376.971267][T15167] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3376.997696][ T9346] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 3377.021158][ T9691] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3377.028021][ T9691] ath9k_htc: Failed to initialize the device
[ 3377.034071][T32518] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3377.044874][T19259] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3377.241602][T25325] usb 1-1: USB disconnect, device number 124
[ 3377.291121][ T9006] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 3377.341199][T19273] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3377.350328][T19273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3377.358367][T19273] usb 2-1: Product: syz
[ 3377.362952][T19273] usb 2-1: Manufacturer: syz
[ 3377.368023][T19273] usb 2-1: SerialNumber: syz
[ 3377.401164][T19259] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 3377.411294][T19273] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3377.521149][ T9346] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3377.530222][ T9346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3377.538436][ T9346] usb 3-1: Product: syz
[ 3377.544670][ T9346] usb 3-1: Manufacturer: syz
[ 3377.549918][ T9346] usb 3-1: SerialNumber: syz
[ 3377.561080][T15167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3377.591346][ T9346] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:28 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3377.773391][ T9764] usb 4-1: USB disconnect, device number 126
[ 3377.851049][ T9006] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3377.860247][ T9006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3377.869675][ T9006] usb 6-1: Product: syz
[ 3377.875384][ T9006] usb 6-1: Manufacturer: syz
[ 3377.880965][ T9006] usb 6-1: SerialNumber: syz
[ 3377.921473][ T9006] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3377.931363][T19259] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3377.940518][T19259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3377.948680][T19259] usb 5-1: Product: syz
[ 3377.953763][T19259] usb 5-1: Manufacturer: syz
[ 3377.959829][T19259] usb 5-1: SerialNumber: syz
[ 3377.971308][T19273] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3378.001512][T19259] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3378.061086][T32518] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3378.068003][T32518] ath9k_htc: Failed to initialize the device
[ 3378.074206][T25325] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3378.151043][ T9346] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:29 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3378.352345][T14840] usb 3-1: USB disconnect, device number 101
[ 3378.430994][T25325] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 3378.561020][T19259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3378.580992][ T9006] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3378.621066][T15167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3378.628006][T15167] ath9k_htc: Failed to initialize the device
[ 3378.639768][ T9764] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3378.771401][T21295] usb 5-1: USB disconnect, device number 86
[ 3378.786187][ T9691] usb 6-1: USB disconnect, device number 54
07:44:29 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3378.950960][T25325] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3378.960332][T25325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3378.969581][T25325] usb 1-1: Product: syz
[ 3378.975346][T25325] usb 1-1: Manufacturer: syz
[ 3378.980412][T25325] usb 1-1: SerialNumber: syz
[ 3379.002324][ T9764] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 3379.021062][T19273] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3379.028295][T25325] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3379.036371][T19273] ath9k_htc: Failed to initialize the device
[ 3379.181040][ T9346] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3379.187928][ T9346] ath9k_htc: Failed to initialize the device
[ 3379.193978][T14840] usb 3-1: ath9k_htc: USB layer deinitialized
07:44:30 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

07:44:30 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x2}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:44:30 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3379.540845][T11243] usb 2-1: USB disconnect, device number 84
[ 3379.548093][T11243] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3379.555647][T14840] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 3379.580985][T19259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3379.581161][ T9764] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3379.590754][T19259] ath9k_htc: Failed to initialize the device
[ 3379.603484][T25325] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3379.610417][ T9764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3379.623824][T21295] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3379.635322][ T9764] usb 4-1: Product: syz
[ 3379.643288][ T9764] usb 4-1: Manufacturer: syz
[ 3379.647933][ T9764] usb 4-1: SerialNumber: syz
[ 3379.670949][ T9006] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3379.677801][ T9006] ath9k_htc: Failed to initialize the device
[ 3379.688896][ T9691] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3379.701054][ T9764] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3379.960925][T11243] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 3379.990906][T21295] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 3380.040924][ T9691] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 3380.090896][T14840] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3380.099938][T14840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3380.109544][T14840] usb 3-1: Product: syz
[ 3380.116391][T14840] usb 3-1: Manufacturer: syz
[ 3380.122085][T14840] usb 3-1: SerialNumber: syz
[ 3380.160593][T30216] udc-core: couldn't find an available UDC or it's busy
[ 3380.168645][T14840] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3380.177476][T30216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3380.290894][ T5391] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3380.480962][T11243] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3380.490110][T11243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3380.498404][T11243] usb 2-1: Product: syz
[ 3380.504064][T11243] usb 2-1: Manufacturer: syz
[ 3380.509730][T11243] usb 2-1: SerialNumber: syz
[ 3380.516518][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3380.526722][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3380.537836][T21295] usb 5-1: Product: syz
[ 3380.543965][T21295] usb 5-1: Manufacturer: syz
[ 3380.549347][T21295] usb 5-1: SerialNumber: syz
[ 3380.557089][T15167] usb 4-1: USB disconnect, device number 127
[ 3380.572244][ T9691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3380.583338][T11243] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3380.591949][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3380.599984][ T9691] usb 6-1: Product: syz
[ 3380.606451][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3380.618241][ T9691] usb 6-1: Manufacturer: syz
[ 3380.625121][ T9691] usb 6-1: SerialNumber: syz
[ 3380.671105][ T9691] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3380.700901][T25325] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3380.707997][T25325] ath9k_htc: Failed to initialize the device
[ 3380.741019][T14840] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3380.943664][T11949] usb 3-1: USB disconnect, device number 102
07:44:31 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

07:44:31 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3381.180900][T21295] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3381.189945][T19259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3381.208955][T11243] usb 1-1: USB disconnect, device number 125
[ 3381.231997][T11243] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3381.242307][ T9691] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3381.350888][ T5391] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3381.357861][ T5391] ath9k_htc: Failed to initialize the device
[ 3381.363880][T15167] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3381.388620][T19273] usb 2-1: USB disconnect, device number 85
[ 3381.403935][ T9346] usb 5-1: USB disconnect, device number 87
07:44:32 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3381.448323][T32518] usb 6-1: USB disconnect, device number 55
[ 3381.710914][ T9764] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 3381.722021][T15167] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 3381.820976][T14840] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3381.827914][T14840] ath9k_htc: Failed to initialize the device
[ 3381.834052][T11949] usb 3-1: ath9k_htc: USB layer deinitialized
07:44:32 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:44:32 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

07:44:32 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x2}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3382.210825][T11949] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 3382.223147][T19259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3382.230181][T19259] ath9k_htc: Failed to initialize the device
[ 3382.236178][T21295] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3382.244228][T21295] ath9k_htc: Failed to initialize the device
[ 3382.251666][T15167] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3382.260804][ T9346] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3382.267194][T19273] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3382.274055][T15167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3382.282695][T15167] usb 4-1: Product: syz
[ 3382.291949][ T9764] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3382.292620][T15167] usb 4-1: Manufacturer: syz
[ 3382.306801][ T9691] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3382.306853][ T9764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3382.313847][T15167] usb 4-1: SerialNumber: syz
[ 3382.328641][ T9691] ath9k_htc: Failed to initialize the device
[ 3382.336042][T32518] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3382.344006][ T9764] usb 1-1: Product: syz
[ 3382.354472][ T9764] usb 1-1: Manufacturer: syz
[ 3382.368807][ T9764] usb 1-1: SerialNumber: syz
[ 3382.381167][T15167] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3382.431076][ T9764] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3382.620734][ T9346] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 3382.634023][T19273] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 3382.690933][T32518] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 3382.790912][T11949] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3382.800158][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3382.808428][T11949] usb 3-1: Product: syz
[ 3382.814211][T11949] usb 3-1: Manufacturer: syz
[ 3382.818976][T11949] usb 3-1: SerialNumber: syz
[ 3382.861077][T11949] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3382.951095][T15167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3383.051658][ T5391] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3383.140679][ T9346] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3383.149890][ T9346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3383.163301][T19273] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3383.163431][T16965] usb 4-1: USB disconnect, device number 2
[ 3383.180823][T19273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3383.188803][T19273] usb 2-1: Product: syz
[ 3383.207945][ T9346] usb 5-1: Product: syz
[ 3383.213436][T32518] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3383.222468][ T9346] usb 5-1: Manufacturer: syz
[ 3383.227107][ T9346] usb 5-1: SerialNumber: syz
[ 3383.233186][T19273] usb 2-1: Manufacturer: syz
[ 3383.238031][T19273] usb 2-1: SerialNumber: syz
[ 3383.242796][T32518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3383.259313][T32518] usb 6-1: Product: syz
[ 3383.263485][T32518] usb 6-1: Manufacturer: syz
[ 3383.268891][T32518] usb 6-1: SerialNumber: syz
[ 3383.290913][ T9346] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3383.312615][T19273] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3383.320923][T32518] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3383.500700][ T9764] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3383.609435][T30342] udc-core: couldn't find an available UDC or it's busy
[ 3383.616661][T30342] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:44:34 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 3383.850622][ T9346] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3383.900851][T19273] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3383.910228][T21295] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3383.980676][T15167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3383.987557][T15167] ath9k_htc: Failed to initialize the device
[ 3383.999602][T16965] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3384.063006][T30352] udc-core: couldn't find an available UDC or it's busy
[ 3384.070191][T30352] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3384.105379][T11949] usb 6-1: USB disconnect, device number 56
[ 3384.150711][ T5391] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3384.157653][ T5391] ath9k_htc: Failed to initialize the device
[ 3384.380753][T16965] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 3384.418287][T30355] udc-core: couldn't find an available UDC or it's busy
[ 3384.425385][T30355] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3384.460412][T30356] udc-core: couldn't find an available UDC or it's busy
[ 3384.467511][T30356] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3384.540663][ T9764] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3384.547561][ T9764] ath9k_htc: Failed to initialize the device
07:44:35 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x2}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:44:35 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3384.636930][ T9006] usb 1-1: USB disconnect, device number 126
[ 3384.657195][ T9006] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3384.860904][ T9346] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3384.867851][ T9346] ath9k_htc: Failed to initialize the device
[ 3384.940620][T21295] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3384.947717][T19273] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3384.954968][T19273] ath9k_htc: Failed to initialize the device
[ 3384.961045][T21295] ath9k_htc: Failed to initialize the device
[ 3384.967596][T11949] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3384.975771][T16965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3384.989794][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3384.999415][T16965] usb 4-1: Product: syz
[ 3385.005949][T16965] usb 4-1: Manufacturer: syz
[ 3385.010602][T16965] usb 4-1: SerialNumber: syz
07:44:35 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3385.050941][T16965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3385.089566][T15167] usb 3-1: USB disconnect, device number 103
[ 3385.108955][T15167] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3385.241652][ T9006] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 3385.350541][T11949] usb 6-1: new high-speed USB device number 57 using dummy_hcd
07:44:36 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3385.447275][T32518] usb 5-1: USB disconnect, device number 88
[ 3385.455665][T32518] usb 5-1: ath9k_htc: USB layer deinitialized
07:44:36 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})

[ 3385.492308][ T9691] usb 2-1: USB disconnect, device number 86
[ 3385.502988][ T9691] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3385.580531][T15167] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 3385.680522][T16965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3385.810553][ T9006] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3385.819637][ T9006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3385.833267][ T9006] usb 1-1: Product: syz
[ 3385.837401][ T9006] usb 1-1: Manufacturer: syz
[ 3385.847495][ T9006] usb 1-1: SerialNumber: syz
[ 3385.883810][T19273] usb 4-1: USB disconnect, device number 3
[ 3385.901070][ T9006] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3385.920943][T11949] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3385.930029][T11949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3385.941768][    T5] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 3385.949377][T11949] usb 6-1: Product: syz
[ 3385.953658][T11949] usb 6-1: Manufacturer: syz
[ 3385.959470][T11949] usb 6-1: SerialNumber: syz
[ 3385.990496][ T9691] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 3386.020863][T11949] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3386.100479][T15167] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3386.109561][T15167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3386.118083][T15167] usb 3-1: Product: syz
[ 3386.122694][T15167] usb 3-1: Manufacturer: syz
[ 3386.127400][T15167] usb 3-1: SerialNumber: syz
[ 3386.170707][T15167] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:37 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3386.500562][    T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3386.509701][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3386.510465][ T9691] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3386.528073][    T5] usb 5-1: Product: syz
[ 3386.529976][ T9691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3386.538448][ T9006] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3386.540858][ T9691] usb 2-1: Product: syz
[ 3386.550684][    T5] usb 5-1: Manufacturer: syz
[ 3386.553769][ T9691] usb 2-1: Manufacturer: syz
[ 3386.564639][ T9691] usb 2-1: SerialNumber: syz
[ 3386.565326][    T5] usb 5-1: SerialNumber: syz
[ 3386.602127][ T9691] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3386.632500][    T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3386.640683][T11949] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3386.700549][T16965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3386.707455][T16965] ath9k_htc: Failed to initialize the device
[ 3386.718764][T19273] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3386.744060][T21295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3386.839078][ T9764] usb 6-1: USB disconnect, device number 57
[ 3387.070467][T19273] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 3387.095364][T30458] udc-core: couldn't find an available UDC or it's busy
[ 3387.102359][T30458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3387.170454][ T9691] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:38 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0xa, "a242bf0684d79757"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3387.296091][T30459] udc-core: couldn't find an available UDC or it's busy
[ 3387.303050][T30459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3387.330453][    T5] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3387.590454][ T9006] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3387.590626][T19273] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3387.598768][ T9006] ath9k_htc: Failed to initialize the device
[ 3387.606428][T19273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3387.620523][T19273] usb 4-1: Product: syz
[ 3387.624856][T19273] usb 4-1: Manufacturer: syz
[ 3387.630501][T19273] usb 4-1: SerialNumber: syz
[ 3387.660559][T11949] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3387.667401][T11949] ath9k_htc: Failed to initialize the device
[ 3387.670757][T19273] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3387.685257][ T9764] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3387.730083][T30475] udc-core: couldn't find an available UDC or it's busy
[ 3387.737733][T30475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3387.820353][T21295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3387.827277][T21295] ath9k_htc: Failed to initialize the device
[ 3387.890135][T30476] udc-core: couldn't find an available UDC or it's busy
[ 3387.897173][T30476] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3388.050338][ T9764] usb 6-1: new high-speed USB device number 58 using dummy_hcd
07:44:38 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})

[ 3388.129741][T15167] usb 1-1: USB disconnect, device number 127
[ 3388.146924][T15167] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3388.220361][ T9691] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3388.227238][ T9691] ath9k_htc: Failed to initialize the device
[ 3388.241034][T19273] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:39 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)

[ 3388.322629][ T5391] usb 3-1: USB disconnect, device number 104
[ 3388.334294][ T5391] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3388.380379][    T5] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3388.387305][    T5] ath9k_htc: Failed to initialize the device
[ 3388.630367][T15167] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 3388.641861][ T9764] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3388.652195][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3388.660152][ T9764] usb 6-1: Product: syz
[ 3388.665573][ T9764] usb 6-1: Manufacturer: syz
[ 3388.670569][ T9764] usb 6-1: SerialNumber: syz
[ 3388.720570][ T9764] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:39 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})

[ 3388.761004][T32518] usb 2-1: USB disconnect, device number 87
[ 3388.776930][T32518] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3388.805839][T30514] udc-core: couldn't find an available UDC or it's busy
[ 3388.812790][T30514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3388.820360][T21295] usb 3-1: new high-speed USB device number 105 using dummy_hcd
07:44:39 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)

[ 3388.922706][T11949] usb 5-1: USB disconnect, device number 89
[ 3388.940556][T11949] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3389.150424][T15167] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3389.159523][T15167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3389.174581][T15167] usb 1-1: Product: syz
[ 3389.178757][T15167] usb 1-1: Manufacturer: syz
[ 3389.189023][T15167] usb 1-1: SerialNumber: syz
[ 3389.230566][T15167] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3389.260356][T19273] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3389.267263][T19273] ath9k_htc: Failed to initialize the device
[ 3389.280291][ T9006] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 3389.360432][ T9764] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3389.360663][T21295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3389.387484][T21295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3389.398770][T21295] usb 3-1: Product: syz
[ 3389.405665][T21295] usb 3-1: Manufacturer: syz
[ 3389.413144][T21295] usb 3-1: SerialNumber: syz
[ 3389.450608][T21295] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3389.510310][T11949] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 3389.563971][T16965] usb 6-1: USB disconnect, device number 58
[ 3389.810269][T15167] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3389.840439][ T9006] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3389.849533][ T9006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
07:44:40 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[ 3389.858928][ T9006] usb 2-1: Product: syz
[ 3389.864936][T32518] usb 4-1: USB disconnect, device number 4
[ 3389.866027][ T9006] usb 2-1: Manufacturer: syz
[ 3389.875806][ T9006] usb 2-1: SerialNumber: syz
[ 3389.883295][T32518] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3389.930674][ T9006] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3390.010253][T21295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:40 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0xa, "a242bf0684d79757"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3390.070224][T11949] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3390.079357][T11949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3390.093948][T11949] usb 5-1: Product: syz
[ 3390.098112][T11949] usb 5-1: Manufacturer: syz
[ 3390.109091][T11949] usb 5-1: SerialNumber: syz
[ 3390.170600][T11949] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3390.368761][T30568] udc-core: couldn't find an available UDC or it's busy
[ 3390.375853][T30568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3390.384097][ T9346] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 3390.390344][ T9764] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3390.399363][ T9764] ath9k_htc: Failed to initialize the device
[ 3390.407061][T16965] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3390.577821][T30574] udc-core: couldn't find an available UDC or it's busy
[ 3390.584820][T30574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3390.590171][ T9006] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3390.820189][T16965] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 3390.840426][T11949] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3390.860167][T15167] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3390.867135][T15167] ath9k_htc: Failed to initialize the device
[ 3390.910436][ T9346] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3390.919468][ T9346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3390.930475][ T9346] usb 4-1: Product: syz
[ 3390.935469][ T9346] usb 4-1: Manufacturer: syz
[ 3390.942172][ T9346] usb 4-1: SerialNumber: syz
[ 3390.980526][ T9346] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3391.020137][T21295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3391.027036][T21295] ath9k_htc: Failed to initialize the device
[ 3391.159235][T30581] udc-core: couldn't find an available UDC or it's busy
[ 3391.167315][T30581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:44:42 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3391.400413][T16965] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3391.409663][T30582] udc-core: couldn't find an available UDC or it's busy
[ 3391.416617][T16965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3391.418025][T19273] usb 1-1: USB disconnect, device number 2
[ 3391.430950][T30582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3391.441976][T19273] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3391.445722][T16965] usb 6-1: Product: syz
[ 3391.462489][T16965] usb 6-1: Manufacturer: syz
[ 3391.467172][T16965] usb 6-1: SerialNumber: syz
[ 3391.511107][T16965] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3391.550151][ T9346] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:42 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
socket$packet(0x11, 0x2, 0x300)

[ 3391.613474][T32518] usb 3-1: USB disconnect, device number 105
[ 3391.630298][T32518] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3391.660212][ T9006] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3391.667074][ T9006] ath9k_htc: Failed to initialize the device
[ 3391.910317][T11949] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3391.917705][T11949] ath9k_htc: Failed to initialize the device
[ 3391.950137][T19273] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 3392.110111][T32518] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 3392.110455][T30611] udc-core: couldn't find an available UDC or it's busy
[ 3392.125352][T30611] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:44:42 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})

[ 3392.190972][T16965] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3392.206745][ T9764] usb 2-1: USB disconnect, device number 88
[ 3392.214907][ T9764] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3392.393225][ T9691] usb 6-1: USB disconnect, device number 59
07:44:43 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, 0x0, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3392.470112][T19273] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3392.479304][T19273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3392.491764][    T5] usb 5-1: USB disconnect, device number 90
[ 3392.500874][T19273] usb 1-1: Product: syz
[ 3392.505045][T19273] usb 1-1: Manufacturer: syz
[ 3392.507776][    T5] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3392.509810][T19273] usb 1-1: SerialNumber: syz
[ 3392.570411][T19273] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3392.620034][ T9346] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3392.626997][ T9346] ath9k_htc: Failed to initialize the device
[ 3392.650146][T32518] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3392.659239][T32518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3392.668753][T32518] usb 3-1: Product: syz
[ 3392.673706][T32518] usb 3-1: Manufacturer: syz
[ 3392.679838][T32518] usb 3-1: SerialNumber: syz
[ 3392.720361][T32518] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3392.810087][ T9764] usb 2-1: new high-speed USB device number 89 using dummy_hcd
07:44:43 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x3, "a2"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3393.060003][T21295] usb 5-1: new high-speed USB device number 91 using dummy_hcd
07:44:43 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, 0x0, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3393.131120][T19273] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3393.147937][    T5] usb 4-1: USB disconnect, device number 5
[ 3393.160859][    T5] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3393.260053][T16965] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3393.266954][T16965] ath9k_htc: Failed to initialize the device
[ 3393.278299][ T9691] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3393.284593][T32518] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3393.338495][T11949] usb 1-1: USB disconnect, device number 3
[ 3393.361179][ T9764] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3393.370342][ T9764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3393.378404][ T9764] usb 2-1: Product: syz
[ 3393.386291][ T9764] usb 2-1: Manufacturer: syz
[ 3393.393191][ T9764] usb 2-1: SerialNumber: syz
[ 3393.440963][ T9764] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3393.579974][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3393.589247][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3393.597453][T21295] usb 5-1: Product: syz
[ 3393.602514][T21295] usb 5-1: Manufacturer: syz
[ 3393.607170][T21295] usb 5-1: SerialNumber: syz
[ 3393.639958][ T9691] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 3393.651776][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3393.729973][ T9006] usb 4-1: new high-speed USB device number 6 using dummy_hcd
07:44:44 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3393.845703][T30684] udc-core: couldn't find an available UDC or it's busy
[ 3393.862276][T30684] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3394.090193][ T9764] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3394.169984][ T9691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3394.179336][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3394.189149][ T9691] usb 6-1: Product: syz
[ 3394.195273][ T9691] usb 6-1: Manufacturer: syz
[ 3394.201673][ T9691] usb 6-1: SerialNumber: syz
[ 3394.219954][T19273] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3394.226815][T21295] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3394.235858][T19273] ath9k_htc: Failed to initialize the device
[ 3394.242465][ T9691] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3394.255393][T11949] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3394.299928][T32518] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3394.300030][ T9006] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3394.307596][T32518] ath9k_htc: Failed to initialize the device
[ 3394.316236][ T9006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3394.330247][ T9006] usb 4-1: Product: syz
[ 3394.334385][ T9006] usb 4-1: Manufacturer: syz
[ 3394.339410][ T9006] usb 4-1: SerialNumber: syz
[ 3394.380178][ T9006] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3394.648835][T30707] udc-core: couldn't find an available UDC or it's busy
[ 3394.656083][T11949] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 3394.659881][T30707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3394.809953][ T9691] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:45 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
socket$packet(0x11, 0x2, 0x300)

[ 3394.879422][ T9346] usb 3-1: USB disconnect, device number 106
[ 3394.896393][ T9346] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3395.015280][T14840] usb 6-1: USB disconnect, device number 60
[ 3395.050027][ T9006] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3395.109935][ T9764] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3395.116783][ T9764] ath9k_htc: Failed to initialize the device
[ 3395.220001][T11949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3395.229556][T11949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3395.237567][T11949] usb 1-1: Product: syz
[ 3395.243047][T11949] usb 1-1: Manufacturer: syz
[ 3395.247820][T11949] usb 1-1: SerialNumber: syz
[ 3395.259920][T21295] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3395.267403][T21295] ath9k_htc: Failed to initialize the device
[ 3395.300276][T11949] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3395.399952][T16965] usb 3-1: new high-speed USB device number 107 using dummy_hcd
07:44:46 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x3, "a2"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

07:44:46 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[ 3395.686772][    T7] usb 2-1: USB disconnect, device number 89
[ 3395.712175][    T7] usb 2-1: ath9k_htc: USB layer deinitialized
07:44:46 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3395.791879][ T5391] usb 5-1: USB disconnect, device number 91
[ 3395.811261][ T5391] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3395.819981][ T9691] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3395.827373][ T9691] ath9k_htc: Failed to initialize the device
[ 3395.836038][T14840] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3395.929853][T11949] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3395.969890][T16965] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3395.979074][T16965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3395.987311][T16965] usb 3-1: Product: syz
[ 3395.993153][T16965] usb 3-1: Manufacturer: syz
[ 3395.999432][T16965] usb 3-1: SerialNumber: syz
[ 3396.050178][T16965] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3396.069904][ T9006] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3396.076852][ T9006] ath9k_htc: Failed to initialize the device
[ 3396.189808][T14840] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 3396.289819][    T7] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 3396.329776][T21295] usb 5-1: new high-speed USB device number 92 using dummy_hcd
07:44:47 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001000)="271b30c833fa1cb69170f2d2133f56a34feef1af912420ceb87194843c18d1d9f4c8c90bdd8726fe26108038fbfc0d5e65fb61c59d54b0adca394e3063deabd6b437e9aec00b3e07a57c531e98716808f6f47938a75c7d6d6260caee247d8df70113f25096a9f9c96a53fa4d0a933f90b96023a275a9aa143d05669c85")

[ 3396.644457][ T5391] usb 4-1: USB disconnect, device number 6
[ 3396.652685][ T5391] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3396.691016][T16965] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3396.711105][T14840] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3396.721598][T14840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3396.729555][T14840] usb 6-1: Product: syz
[ 3396.733819][T14840] usb 6-1: Manufacturer: syz
[ 3396.738588][T14840] usb 6-1: SerialNumber: syz
[ 3396.780004][T14840] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3396.839875][    T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3396.848893][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3396.849747][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3396.866665][    T7] usb 2-1: Product: syz
[ 3396.869053][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3396.877191][    T7] usb 2-1: Manufacturer: syz
[ 3396.882604][T21295] usb 5-1: Product: syz
[ 3396.887802][T21295] usb 5-1: Manufacturer: syz
[ 3396.890557][    T7] usb 2-1: SerialNumber: syz
[ 3396.895473][T21295] usb 5-1: SerialNumber: syz
[ 3396.941499][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3396.952775][T11949] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3396.959966][    T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3396.972119][T11949] ath9k_htc: Failed to initialize the device
[ 3397.246622][T30801] udc-core: couldn't find an available UDC or it's busy
[ 3397.253699][T14840] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 3397.259711][T30801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3397.349715][T15167] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:48 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x0, 0x1004, 0xffffffffffffffff, 0x10001, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

[ 3397.502438][T19273] usb 1-1: USB disconnect, device number 4
[ 3397.518421][T19273] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3397.525330][T21295] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3397.554820][ T9691] usb 6-1: USB disconnect, device number 61
[ 3397.609747][    T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3397.740984][T16965] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3397.747931][T16965] ath9k_htc: Failed to initialize the device
[ 3397.779720][T14840] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3397.788899][T14840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3397.796990][T14840] usb 4-1: Product: syz
[ 3397.802056][T14840] usb 4-1: Manufacturer: syz
[ 3397.807302][T14840] usb 4-1: SerialNumber: syz
[ 3397.849895][T14840] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:48 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x3, "a2"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3398.019664][T19273] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 3398.165424][T30824] udc-core: couldn't find an available UDC or it's busy
[ 3398.172401][T30824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:44:49 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
socket$packet(0x11, 0x2, 0x300)

[ 3398.278995][T32518] usb 3-1: USB disconnect, device number 107
[ 3398.301542][T32518] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3398.379667][T15167] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3398.386628][T15167] ath9k_htc: Failed to initialize the device
[ 3398.398087][ T9691] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3398.409737][T14840] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3398.539768][T21295] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3398.546819][T21295] ath9k_htc: Failed to initialize the device
[ 3398.560558][T19273] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3398.573860][T19273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3398.584901][T19273] usb 1-1: Product: syz
[ 3398.589035][T19273] usb 1-1: Manufacturer: syz
[ 3398.599210][T19273] usb 1-1: SerialNumber: syz
[ 3398.639815][T19273] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3398.699676][    T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3398.706667][    T7] ath9k_htc: Failed to initialize the device
[ 3398.769734][ T9691] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 3398.779817][T32518] usb 3-1: new high-speed USB device number 108 using dummy_hcd
07:44:49 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000c00))

[ 3399.094208][T19259] usb 5-1: USB disconnect, device number 92
[ 3399.110285][T19259] usb 5-1: ath9k_htc: USB layer deinitialized
07:44:49 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})

[ 3399.194822][T25325] usb 2-1: USB disconnect, device number 90
[ 3399.200838][T19273] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3399.229694][T25325] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3399.289805][ T9691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3399.298824][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3399.309671][T32518] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3399.318771][T32518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3399.329051][ T9691] usb 6-1: Product: syz
[ 3399.334657][ T9691] usb 6-1: Manufacturer: syz
[ 3399.339245][ T9691] usb 6-1: SerialNumber: syz
[ 3399.343842][T32518] usb 3-1: Product: syz
[ 3399.348543][T32518] usb 3-1: Manufacturer: syz
[ 3399.356711][T32518] usb 3-1: SerialNumber: syz
[ 3399.389850][ T9691] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3399.402659][T32518] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3399.420157][T14840] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3399.430746][T14840] ath9k_htc: Failed to initialize the device
[ 3399.649719][T21295] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 3399.770362][T30883] udc-core: couldn't find an available UDC or it's busy
[ 3399.777437][T30883] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3399.790219][T25325] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 3399.949675][ T9691] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3399.969718][T32518] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3399.988673][T15167] usb 4-1: USB disconnect, device number 7
07:44:50 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48000, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x7f, {0x7f, 0x7, "9ef360557aaf78f683558d0e133a85393f7e6455a289ccc5562adf48f066dc073085a6f2dd70f40d40b5f87b60be7160dcf7f217a4616b482fba5beaf4a60e2ad18a6f667a78af4ad7868ccf0355438fa7b8c73a15abc4c910bc9b98182263d925f6a8896b824fc17882f6fe4da2c7599ddc3b7a5a4aef923d4b7af14d"}}, &(0x7f00000003c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "57903b0d840cf779f86e3117eb7ed640eafac80395a759e6bf2515eb9bcc35b5d7c5623bcecb7070e73eb4e52288fbe98129588ccb5e8cd0533cd4938557ea6c6d7108fc05cd41bece980f6a763e2289206f5859781ddbbddd71e93ae21db427febdbfd3343c6da2b809d4d1ba5b1bcf61b4e069ebe03e99dbd1d7191ff3fe319ded585ae84b92402b7bd63113c55ad62bb2788c02e7e0cb1fb1d4927ae8578bdd5052a71614fdedb5c1e7adb67c8cafe94469c850a71992f81217fdd3e70b0996ea51104ae2f2ebd9e94e19432733aeec3d8cbb8bf40257060294ed3103c0f5df183453a1b0239ffad4f41c5f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d4f92e4966478ea7da28424da5f263ad"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xee, 0x58, 0x7, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x0, 0x2, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xee, 0x2, 0x81}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x3, 0x7f, "91c018de", "94785545"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x8, 0x81, 0x9, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xa9, "c513dd51dbf9657ce21a930367ec04b10e498f65193c1a267082254a82a10119f7db03e8eb3ad02390b687479ec6c4e534ad79b4a7936a8e265e39a64c3b938b7d604d4ea11b716c163ac2656f47b36bd92f51907de944de1f6f2a4da004cdcb607790eb8f52a6ae26b6f41973d8e7746324c3ba9a33599a2a52b3bca57b51afd2c3c904466429037c490b69ce00cd1ab09a8d82b48c862b2a3d61a6a516f86893fb97783b8d745217"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xc0, 0x35}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000800)={0x40, 0xb, 0x2, "185a"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xce2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2ad6"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xff}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000b00)=0x1, 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000c00))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}]})
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001000)="271b30c833fa1cb69170f2d2133f56a34feef1af912420ceb87194843c18d1d9f4c8c90bdd8726fe26108038fbfc0d5e65fb61c59d54b0adca394e3063deabd6b437e9aec00b3e07a57c531e98716808f6f47938a75c7d6d6260caee247d8df70113f25096a9f9c96a53fa4d0a933f90b96023a275a9aa143d05669c85")

[ 3399.995474][T15167] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3400.152272][ T9006] usb 6-1: USB disconnect, device number 62
[ 3400.169938][T21295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3400.179198][T21295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3400.192302][T21295] usb 5-1: Product: syz
[ 3400.196502][T21295] usb 5-1: Manufacturer: syz
[ 3400.206512][T21295] usb 5-1: SerialNumber: syz
[ 3400.219565][T19273] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3400.228906][T19273] ath9k_htc: Failed to initialize the device
[ 3400.249906][T21295] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3400.319562][T25325] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3400.328831][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3400.338505][T25325] usb 2-1: Product: syz
[ 3400.347007][T25325] usb 2-1: Manufacturer: syz
[ 3400.352150][T25325] usb 2-1: SerialNumber: syz
[ 3400.389794][T25325] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:51 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x40, 0x4, 0x1, 0x0, 0x100, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x7, "a242bf0684"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3400.619722][T14840] usb 4-1: new high-speed USB device number 8 using dummy_hcd
07:44:51 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x0, 0x1004, 0xffffffffffffffff, 0x10001, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

[ 3400.797175][T15167] usb 1-1: USB disconnect, device number 5
[ 3400.811870][T15167] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3400.819538][T21295] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3400.949683][T25325] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3401.019506][T32518] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3401.026452][ T9691] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3401.033499][T32518] ath9k_htc: Failed to initialize the device
[ 3401.049650][ T9691] ath9k_htc: Failed to initialize the device
[ 3401.055667][ T9006] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3401.149535][T14840] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3401.158595][T14840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3401.168285][T14840] usb 4-1: Product: syz
[ 3401.174991][T14840] usb 4-1: Manufacturer: syz
[ 3401.180967][T14840] usb 4-1: SerialNumber: syz
[ 3401.219797][T14840] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3401.389443][    T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 3401.429425][ T9006] usb 6-1: new high-speed USB device number 63 using dummy_hcd
07:44:52 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
socket$packet(0x11, 0x2, 0x300)

[ 3401.509263][T30940] udc-core: couldn't find an available UDC or it's busy
[ 3401.516266][T30940] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3401.535196][T19273] usb 3-1: USB disconnect, device number 108
[ 3401.548203][T19273] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3401.779447][T14840] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3401.899426][T21295] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3401.907885][T21295] ath9k_htc: Failed to initialize the device
[ 3401.979476][T25325] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 3401.986732][T25325] ath9k_htc: Failed to initialize the device
[ 3401.999614][ T9006] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3402.008771][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3402.017866][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3402.025946][ T9006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3402.033936][ T9006] usb 6-1: Product: syz
[ 3402.038143][ T9006] usb 6-1: Manufacturer: syz
[ 3402.040914][T19273] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 3402.042826][    T7] usb 1-1: Product: syz
[ 3402.056072][ T9006] usb 6-1: SerialNumber: syz
[ 3402.061987][    T7] usb 1-1: Manufacturer: syz
[ 3402.067276][    T7] usb 1-1: SerialNumber: syz
[ 3402.109788][ T9006] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3402.139887][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:53 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
socket$packet(0x11, 0x2, 0x300)

[ 3402.389049][T32518] usb 5-1: USB disconnect, device number 93
[ 3402.396569][T32518] usb 5-1: ath9k_htc: USB layer deinitialized
07:44:53 executing program 1:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)

[ 3402.545918][T11949] usb 2-1: USB disconnect, device number 91
[ 3402.553064][T11949] usb 2-1: ath9k_htc: USB layer deinitialized
[ 3402.569485][T19273] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3402.578517][T19273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3402.591875][T19273] usb 3-1: Product: syz
[ 3402.596203][T19273] usb 3-1: Manufacturer: syz
[ 3402.601232][T19273] usb 3-1: SerialNumber: syz
[ 3402.639603][T19273] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3402.779355][ T9006] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3402.809525][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3402.859347][T14840] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3402.866235][T14840] ath9k_htc: Failed to initialize the device
[ 3402.889427][T32518] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 3402.983473][ T9764] usb 6-1: USB disconnect, device number 63
[ 3403.069381][T16965] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 3403.209486][T19273] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:54 executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x3, "a2"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3403.355743][T25325] usb 4-1: USB disconnect, device number 8
[ 3403.377200][T25325] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3403.380543][T30997] udc-core: couldn't find an available UDC or it's busy
[ 3403.390960][T30997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3403.409492][T32518] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3403.409523][T32518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3403.409537][T32518] usb 5-1: Product: syz
[ 3403.432033][T32518] usb 5-1: Manufacturer: syz
[ 3403.437879][T32518] usb 5-1: SerialNumber: syz
07:44:54 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync})
syz_open_dev$radio(0x0, 0x3, 0x2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x0, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x1b, 0xff, [@broadcast, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @remote]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0xe, "a5de2961792a9cc3a6566e39"}, {0x5, 0x9, "261941d361c9da"}, {0x1, 0x3, 'I'}, {0x1, 0x8, "25ae189e6e4b"}, {0x0, 0x5, "40b333"}, {0x6, 0x10, "913e928bcac45fd0e4830e9d59f2"}, {0x6, 0xd, "16c31610ae31018d6e5011"}, {0x1, 0x2}, {0x6, 0x4, "d8f4"}]}, @ssrr={0x89, 0x7, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xb, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote}]}, @timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@empty, 0x200}, {@multicast1, 0x4}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@loopback, 0x1}, {@private=0xa010100, 0xfff}, {@remote, 0x7}]}, @generic={0x83, 0x4, "a242"}, @noop]}}}}})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nullb0\x00', 0x6440, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000f80)=0x3ff)

[ 3403.479539][T32518] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3403.629404][T16965] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3403.638515][T16965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3403.652735][T16965] usb 2-1: Product: syz
[ 3403.656883][T16965] usb 2-1: Manufacturer: syz
[ 3403.667022][T16965] usb 2-1: SerialNumber: syz
[ 3403.709552][T16965] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3403.819357][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3403.826337][ T9006] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3403.833336][ T9006] ath9k_htc: Failed to initialize the device
[ 3403.850417][    T7] ath9k_htc: Failed to initialize the device
[ 3403.856556][ T9764] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3403.929323][T25325] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 3404.049309][T32518] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3404.249309][ T9764] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 3404.299280][T19273] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3404.306251][T19273] ath9k_htc: Failed to initialize the device
[ 3404.349353][T16965] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:44:55 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0xe3, &(0x7f0000000080)=""/227)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0x4d, 0x80000000, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x80, 0x8, 0x0, 0x9}})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, r1}, 0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'geneve0\x00', @local})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'sit0\x00'})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x37)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xb, 0x2, 0x7fffffff, 0x0, 0x1004, 0xffffffffffffffff, 0x10001, [], r1, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

[ 3404.413280][T11949] usb 1-1: USB disconnect, device number 6
[ 3404.443138][T11949] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3404.449698][T25325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3404.473876][T25325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3404.493410][T25325] usb 4-1: Product: syz
[ 3404.504072][T25325] usb 4-1: Manufacturer: syz
[ 3404.514260][T25325] usb 4-1: SerialNumber: syz
[ 3404.560895][T25325] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
07:44:55 executing program 2:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
socket$packet(0x11, 0x2, 0x300)

[ 3404.779688][T21295] usb 3-1: USB disconnect, device number 109
[ 3404.796086][T21295] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3404.811736][ T9764] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3404.821052][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3404.829031][ T9764] usb 6-1: Product: syz
[ 3404.834506][ T9764] usb 6-1: Manufacturer: syz
[ 3404.839694][ T9764] usb 6-1: SerialNumber: syz
[ 3404.847510][T31058] ==================================================================
[ 3404.855563][T31058] BUG: KCSAN: data-race in lookup_fast / shrink_dentry_list
[ 3404.862837][T31058] 
[ 3404.865141][T31058] write to 0xffff88812d8ca780 of 4 bytes by task 4871 on cpu 1:
[ 3404.872738][T31058]  shrink_dentry_list+0x352/0x590
[ 3404.877759][T31058]  shrink_dcache_parent+0x4d/0x3c0
[ 3404.882838][T31058]  d_invalidate+0x70/0x1b0
[ 3404.887230][T31058]  lookup_fast+0x2ed/0x370
[ 3404.891665][T31058]  walk_component+0x5c/0x350
[ 3404.896237][T31058]  path_lookupat+0x11d/0x550
[ 3404.900794][T31058]  filename_lookup+0xf2/0x380
[ 3404.905477][T31058]  user_path_at_empty+0x3b/0x50
[ 3404.910420][T31058]  vfs_statx+0x90/0x270
[ 3404.914547][T31058]  __se_sys_newlstat+0x46/0x250
[ 3404.919493][T31058]  __x64_sys_newlstat+0x2d/0x40
[ 3404.924320][T31058]  do_syscall_64+0x39/0x80
[ 3404.928719][T31058]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3404.934582][T31058] 
[ 3404.936879][T31058] read to 0xffff88812d8ca780 of 4 bytes by task 31058 on cpu 0:
[ 3404.944565][T31058]  lookup_fast+0x7b/0x370
[ 3404.948871][T31058]  walk_component+0x5c/0x350
[ 3404.953199][T31060] udc-core: couldn't find an available UDC or it's busy
[ 3404.953430][T31058]  link_path_walk+0x471/0x730
[ 3404.960527][T14840] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 3404.964988][T31058]  path_openat+0x19f/0x20a0
[ 3404.965006][T31058]  do_filp_open+0xbd/0x1d0
[ 3404.965019][T31058]  do_sys_openat2+0xa3/0x240
[ 3404.965037][T31058]  __x64_sys_open+0xe2/0x110
[ 3404.965055][T31058]  do_syscall_64+0x39/0x80
[ 3404.965073][T31058]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3404.974517][T31060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 3404.977009][T31058] 
[ 3404.977013][T31058] Reported by Kernel Concurrency Sanitizer on:
[ 3405.022180][T31058] CPU: 0 PID: 31058 Comm: systemd-udevd Not tainted 5.11.0-rc1-syzkaller #0
[ 3405.032014][T31058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3405.043054][T31058] ==================================================================
[ 3405.051601][T31058] Kernel panic - not syncing: panic_on_warn set ...
[ 3405.058461][T31058] CPU: 0 PID: 31058 Comm: systemd-udevd Not tainted 5.11.0-rc1-syzkaller #0
[ 3405.067566][T31058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3405.077609][T31058] Call Trace:
[ 3405.081548][T31058]  dump_stack+0x116/0x15d
[ 3405.086261][T31058]  panic+0x1e7/0x5fa
[ 3405.090150][T31058]  ? vprintk_emit+0x2e2/0x360
[ 3405.096158][T31058]  kcsan_report+0x67b/0x680
[ 3405.099642][T32518] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3405.100646][T31058]  ? kcsan_setup_watchpoint+0x47b/0x4e0
[ 3405.111155][T32518] ath9k_htc: Failed to initialize the device
[ 3405.112975][T31058]  ? lookup_fast+0x7b/0x370
[ 3405.112991][T31058]  ? walk_component+0x5c/0x350
[ 3405.129282][T25325] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3405.129386][T31058]  ? link_path_walk+0x471/0x730
[ 3405.143856][T31058]  ? path_openat+0x19f/0x20a0
[ 3405.148548][T31058]  ? do_filp_open+0xbd/0x1d0
[ 3405.153579][T31058]  ? do_sys_openat2+0xa3/0x240
[ 3405.158567][T31058]  ? __x64_sys_open+0xe2/0x110
[ 3405.163319][T31058]  ? do_syscall_64+0x39/0x80
[ 3405.168027][T31058]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3405.174432][T31058]  ? widen_string+0x3a/0x280
[ 3405.179013][T31058]  ? string+0x1f9/0x210
[ 3405.183165][T31058]  ? __rcu_read_unlock+0x51/0x250
[ 3405.189129][T31058]  ? __rcu_read_unlock+0x51/0x250
[ 3405.194755][T31058]  kcsan_setup_watchpoint+0x47b/0x4e0
[ 3405.200893][T31058]  lookup_fast+0x7b/0x370
[ 3405.205532][T31058]  walk_component+0x5c/0x350
[ 3405.210116][T31058]  link_path_walk+0x471/0x730
[ 3405.215836][T31058]  path_openat+0x19f/0x20a0
[ 3405.220327][T31058]  ? filemap_map_pages+0x96e/0x9a0
[ 3405.226447][T31058]  do_filp_open+0xbd/0x1d0
[ 3405.231163][T31058]  ? _raw_spin_unlock+0x22/0x40
[ 3405.236770][T31058]  ? alloc_fd+0x35d/0x3b0
[ 3405.241494][T31058]  do_sys_openat2+0xa3/0x240
[ 3405.246074][T31058]  __x64_sys_open+0xe2/0x110
[ 3405.250651][T31058]  do_syscall_64+0x39/0x80
[ 3405.255063][T31058]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3405.260936][T31058] RIP: 0033:0x7f7c4c7866f0
[ 3405.265332][T31058] Code: 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 19 30 2c 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 fe 9d 01 00 48 89 04 24
[ 3405.284925][T31058] RSP: 002b:00007ffc39107db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 3405.289450][T21295] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 3405.293309][T31058] RAX: ffffffffffffffda RBX: 000055cfb25b0350 RCX: 00007f7c4c7866f0
[ 3405.293320][T31058] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffc39107f60
[ 3405.293329][T31058] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001
[ 3405.325243][T31058] R10: 0000000000080000 R11: 0000000000000246 R12: 000055cfb1c3c68a
[ 3405.333192][T31058] R13: 0000000000000001 R14: 000055cfb25c3400 R15: 00007ffc39107ff0
[ 3405.341810][T31058] Kernel Offset: disabled
[ 3405.346115][T31058] Rebooting in 86400 seconds..