onnect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x26c}}}}}}]}}, 0x0)

11:25:11 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)

11:25:11 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x20a}}}}}}]}}, 0x0)

[ 2936.473079][ T3742] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 2936.622836][ T8004] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2936.638362][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2936.651105][ T3699] ath9k_htc: Failed to initialize the device
[ 2936.674144][T22270] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2936.712681][ T3702] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2936.721457][ T3702] ath9k_htc: Failed to initialize the device
[ 2936.742718][ T3700] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 2936.763466][ T8129] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2936.864258][T29273] usb 2-1: USB disconnect, device number 54
[ 2936.872506][ T8132] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2936.884327][ T8132] ath9k_htc: Failed to initialize the device
[ 2936.900849][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
11:25:12 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)

[ 2937.062778][T22270] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 2937.082347][ T3742] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2937.114355][ T3742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2937.130551][ T3742] usb 5-1: Product: syz
[ 2937.141376][ T3742] usb 5-1: Manufacturer: syz
[ 2937.155350][ T3742] usb 5-1: SerialNumber: syz
[ 2937.244878][ T3742] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2937.274259][ T3700] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2937.309761][ T3700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2937.323055][T28889] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 2937.344053][ T3700] usb 3-1: Product: syz
[ 2937.348383][ T3700] usb 3-1: Manufacturer: syz
[ 2937.362547][ T3700] usb 3-1: SerialNumber: syz
[ 2937.423476][ T3700] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:25:12 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

11:25:12 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)

[ 2937.707844][T22270] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2937.724898][T22270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2937.745356][T22270] usb 6-1: Product: syz
[ 2937.751824][T22270] usb 6-1: Manufacturer: syz
[ 2937.752488][ T8004] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2937.759107][T22270] usb 6-1: SerialNumber: syz
[ 2937.782593][T28889] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 522
[ 2937.790461][ T8004] ath9k_htc: Failed to initialize the device
[ 2937.824081][T22270] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2937.835401][T29273] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2937.972993][ T3742] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:13 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 2938.028936][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2938.056735][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2938.062629][ T3700] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2938.087468][T28889] usb 4-1: Product: syz
[ 2938.102063][T28889] usb 4-1: Manufacturer: syz
[ 2938.111349][T28889] usb 4-1: SerialNumber: syz
11:25:13 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x205}}}}}}]}}, 0x0)

[ 2938.152896][T12260] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 2938.183798][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2938.240549][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2938.251984][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2938.281292][ T8004] usb 5-1: USB disconnect, device number 114
[ 2938.323160][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2938.342782][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2938.361148][ T3699] usb 3-1: USB disconnect, device number 121
[ 2938.495359][T22270] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2938.508229][ T8132] usb 1-1: new high-speed USB device number 46 using dummy_hcd
11:25:13 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 2938.745886][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2938.773522][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
11:25:14 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x202}}}}}}]}}, 0x0)

[ 2938.806442][T29273] usb 6-1: USB disconnect, device number 100
11:25:14 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x4, 0xf9, &(0x7f0000000240)=""/249, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x76, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

[ 2938.873115][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2938.913323][ T8132] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 517
[ 2939.042571][ T3742] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2939.050940][ T3742] ath9k_htc: Failed to initialize the device
[ 2939.076261][ T8004] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2939.094410][ T8147] usb 4-1: USB disconnect, device number 30
[ 2939.126316][ T8132] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2939.137931][ T8132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2939.149443][ T8132] usb 1-1: Product: syz
[ 2939.156449][ T8132] usb 1-1: Manufacturer: syz
[ 2939.163741][ T8132] usb 1-1: SerialNumber: syz
[ 2939.193216][ T3700] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2939.194661][T12270] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[ 2939.221119][ T3700] ath9k_htc: Failed to initialize the device
[ 2939.240708][ T3699] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2939.254245][ T8132] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:25:14 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x27a}}}}}}]}}, 0x0)

11:25:14 executing program 2:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc}}}}}}]}}, 0x0)

11:25:14 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4}}}}}}]}}, 0x0)

[ 2939.452553][ T8004] usb 5-1: new high-speed USB device number 115 using dummy_hcd
11:25:14 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x20f}}}}}}]}}, 0x0)

[ 2939.603091][T22270] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2939.617173][T22270] ath9k_htc: Failed to initialize the device
[ 2939.632955][ T8129] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2939.661979][T29273] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2939.753135][ T3699] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 2939.812994][ T8004] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 514
[ 2939.923078][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2939.933113][ T8132] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2939.952946][T28889] ath9k_htc: Failed to initialize the device
[ 2939.969010][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2940.008654][ T8004] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2940.033988][ T8004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2940.056738][ T8004] usb 5-1: Product: syz
[ 2940.061077][ T8004] usb 5-1: Manufacturer: syz
[ 2940.062737][T29273] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 2940.069578][ T8004] usb 5-1: SerialNumber: syz
[ 2940.075206][ T8129] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[ 2940.103117][T12274] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2940.144504][ T8004] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2940.166148][T11233] usb 1-1: USB disconnect, device number 46
[ 2940.292655][ T3699] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2940.292810][ T8129] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2940.318978][ T3699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2940.342996][ T8147] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 2940.346150][ T3699] usb 3-1: Product: syz
[ 2940.359074][ T3699] usb 3-1: Manufacturer: syz
[ 2940.367644][ T3699] usb 3-1: SerialNumber: syz
[ 2940.390049][ T8129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2940.413567][ T3699] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2940.417802][ T8129] usb 2-1: Product: syz
[ 2940.439914][ T8129] usb 2-1: Manufacturer: syz
[ 2940.451729][ T8129] usb 2-1: SerialNumber: syz
[ 2940.503651][ T8129] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:25:15 executing program 0:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 2940.702766][T29273] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2940.724575][T29273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2940.734817][ T8147] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 527
[ 2940.736133][ T8004] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2940.755817][T29273] usb 6-1: Product: syz
[ 2940.793670][T29273] usb 6-1: Manufacturer: syz
[ 2940.800486][T29273] usb 6-1: SerialNumber: syz
[ 2940.876320][T29273] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2940.963022][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2940.986188][ T3700] usb 5-1: USB disconnect, device number 115
[ 2940.992860][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2941.032906][ T8147] usb 4-1: Product: syz
[ 2941.034914][ T3699] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2941.037997][ T8147] usb 4-1: Manufacturer: syz
[ 2941.061306][ T8132] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2941.079951][ T8132] ath9k_htc: Failed to initialize the device
[ 2941.095532][T11233] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2941.112025][ T8147] usb 4-1: SerialNumber: syz
[ 2941.153146][T12284] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22
[ 2941.199828][ T8129] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2941.213301][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:25:16 executing program 0:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 2941.334516][T11233] usb 3-1: USB disconnect, device number 122
[ 2941.443833][ T7333] usb 2-1: USB disconnect, device number 55
11:25:16 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x202}}}}}}]}}, 0x0)

[ 2941.598213][T29273] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:17 executing program 0:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[ 2941.815979][T12282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2941.832658][ T8004] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2941.840504][ T8004] ath9k_htc: Failed to initialize the device
[ 2941.843341][T12282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
11:25:17 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x205}}}}}}]}}, 0x0)

[ 2941.878389][ T3700] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2941.892551][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:17 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x274}}}}}}]}}, 0x0)

[ 2941.943207][T29641] usb 6-1: USB disconnect, device number 101
[ 2942.072614][ T3699] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2942.091205][ T3699] ath9k_htc: Failed to initialize the device
[ 2942.096533][ T8132] usb 4-1: USB disconnect, device number 31
[ 2942.114282][T11233] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2942.252407][ T3700] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2942.322407][ T8129] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2942.347511][ T8129] ath9k_htc: Failed to initialize the device
[ 2942.364810][ T7333] usb 2-1: ath9k_htc: USB layer deinitialized
11:25:17 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x300}}}}}}]}}, 0x0)

11:25:17 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x27a}}}}}}]}}, 0x0)

[ 2942.532615][T11233] usb 3-1: new high-speed USB device number 123 using dummy_hcd
11:25:17 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x218}}}}}}]}}, 0x0)

[ 2942.632604][ T3700] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 514
[ 2942.642934][T29273] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2942.671080][T29273] ath9k_htc: Failed to initialize the device
[ 2942.680444][T29641] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2942.732879][ T7333] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2942.812762][ T3700] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2942.837540][ T3700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2942.859334][ T3700] usb 5-1: Product: syz
[ 2942.866565][ T3700] usb 5-1: Manufacturer: syz
[ 2942.881551][T31872] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 2942.899900][ T3700] usb 5-1: SerialNumber: syz
[ 2942.942782][T12290] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2942.953627][T11233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 517
[ 2942.967851][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2942.983834][ T8147] ath9k_htc: Failed to initialize the device
[ 2943.003648][ T3700] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2943.012895][ T8132] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2943.093869][T29641] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 2943.187730][T11233] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2943.216792][T11233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2943.229914][T11233] usb 3-1: Product: syz
[ 2943.240893][T11233] usb 3-1: Manufacturer: syz
[ 2943.250493][T11233] usb 3-1: SerialNumber: syz
[ 2943.291540][T12294] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2943.293228][ T7333] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2943.318849][ T7333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2943.331374][ T7333] usb 2-1: Product: syz
[ 2943.334056][T11233] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2943.338606][ T7333] usb 2-1: Manufacturer: syz
[ 2943.354595][ T7333] usb 2-1: SerialNumber: syz
[ 2943.405142][ T7333] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2943.422510][ T8132] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 2943.433926][T31872] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2943.455253][T31872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2943.482561][T31872] usb 1-1: Product: syz
[ 2943.488266][T31872] usb 1-1: Manufacturer: syz
[ 2943.513481][T31872] usb 1-1: SerialNumber: syz
[ 2943.563638][T31872] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2943.612745][ T3700] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2943.662795][T29641] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2943.684467][T29641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2943.714145][T29641] usb 6-1: Product: syz
[ 2943.720385][T29641] usb 6-1: Manufacturer: syz
[ 2943.734538][T29641] usb 6-1: SerialNumber: syz
[ 2943.803890][T29641] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2943.842672][ T8132] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 536
[ 2943.910437][T29273] usb 5-1: USB disconnect, device number 116
[ 2944.022862][T11233] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2944.052841][ T8132] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2944.069054][ T8132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2944.072964][ T7333] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2944.081110][ T8132] usb 4-1: Product: syz
[ 2944.103915][ T8132] usb 4-1: Manufacturer: syz
[ 2944.111460][ T8132] usb 4-1: SerialNumber: syz
[ 2944.142922][T12302] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22
[ 2944.163578][T31872] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2944.185948][ T8132] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2944.280072][ T8147] usb 3-1: USB disconnect, device number 123
[ 2944.376815][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2944.404098][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2944.414394][T29641] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:19 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x4}}}}}}]}}, 0x0)

[ 2944.441116][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2944.463441][ T3702] usb 2-1: USB disconnect, device number 56
[ 2944.471994][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2944.515232][ T3699] usb 1-1: USB disconnect, device number 47
[ 2944.636951][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2944.675941][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2944.692576][ T7352] usb 6-1: USB disconnect, device number 102
[ 2944.713187][ T3700] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2944.736822][ T3700] ath9k_htc: Failed to initialize the device
[ 2944.763472][T29273] usb 5-1: ath9k_htc: USB layer deinitialized
11:25:20 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x4}}}}}}]}}, 0x0)

[ 2944.927422][ T8132] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:20 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x3}}}}}}]}}, 0x0)

11:25:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xffffffb1, 0x6, 0xcdb5, 0x1}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd700077dbdf250400000008002c000100000005002d000000000008003c0037d1000005002a000100000008003c003f00000008003c000000000008003400000000000500370001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c009)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e23, 0x10001, @private1, 0x4}}}, 0x32)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)

[ 2945.113165][T11233] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2945.113275][ T7333] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2945.113720][ T7333] ath9k_htc: Failed to initialize the device
[ 2945.124355][T11233] ath9k_htc: Failed to initialize the device
[ 2945.139284][ T3702] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2945.151340][ T8147] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2945.170884][T29273] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2945.192445][T31872] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2945.194116][ T8129] usb 4-1: USB disconnect, device number 32
[ 2945.200667][T31872] ath9k_htc: Failed to initialize the device
11:25:20 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x700}}}}}}]}}, 0x0)

[ 2945.200993][ T3699] usb 1-1: ath9k_htc: USB layer deinitialized
11:25:20 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x300}}}}}}]}}, 0x0)

[ 2945.512694][T29641] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2945.521925][T29641] ath9k_htc: Failed to initialize the device
[ 2945.542124][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
11:25:20 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x21d}}}}}}]}}, 0x0)

[ 2945.632530][ T8147] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 2945.642560][ T3702] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2945.765075][T29273] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2945.777577][T29273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2945.787400][T29273] usb 5-1: Product: syz
[ 2945.794045][T29273] usb 5-1: Manufacturer: syz
[ 2945.801036][T29273] usb 5-1: SerialNumber: syz
[ 2945.818199][ T3699] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 2945.867446][T29273] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2945.924452][ T7352] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 2945.992429][ T8132] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2946.002215][ T8132] ath9k_htc: Failed to initialize the device
[ 2946.034271][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2946.164037][ T3702] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2946.183211][ T3702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2946.194102][ T3702] usb 2-1: Product: syz
[ 2946.199386][ T3702] usb 2-1: Manufacturer: syz
[ 2946.207125][ T3702] usb 2-1: SerialNumber: syz
[ 2946.257171][ T3702] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2946.276438][ T8147] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2946.302667][ T8147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2946.314280][ T8147] usb 3-1: Product: syz
[ 2946.320282][ T8147] usb 3-1: Manufacturer: syz
[ 2946.328267][ T8147] usb 3-1: SerialNumber: syz
[ 2946.343205][ T3699] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2946.377270][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2946.393752][ T8147] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2946.398244][ T3699] usb 1-1: Product: syz
[ 2946.419091][ T3699] usb 1-1: Manufacturer: syz
[ 2946.426222][ T3699] usb 1-1: SerialNumber: syz
[ 2946.443521][ T8129] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 2946.459640][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2946.478260][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2946.498333][ T3699] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2946.510559][ T7352] usb 6-1: Product: syz
[ 2946.517765][ T7352] usb 6-1: Manufacturer: syz
[ 2946.538620][ T7352] usb 6-1: SerialNumber: syz
[ 2946.572801][T29273] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2946.605596][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2946.835201][ T3702] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2946.863492][ T8129] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 541
[ 2946.923568][T12304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2946.936290][T12304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2946.954541][T29641] usb 5-1: USB disconnect, device number 117
[ 2947.082776][ T8147] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2947.107554][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2947.114843][ T3699] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2947.123876][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2947.144752][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2947.171919][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2947.197004][ T8129] usb 4-1: Product: syz
[ 2947.210623][ T8129] usb 4-1: Manufacturer: syz
[ 2947.222568][ T8129] usb 4-1: SerialNumber: syz
[ 2947.232700][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2947.245606][T11233] usb 2-1: USB disconnect, device number 57
[ 2947.256044][T12317] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22
[ 2947.301588][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2947.331914][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2947.369657][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2947.376486][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2947.421327][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2947.421640][T31872] usb 3-1: USB disconnect, device number 124
11:25:22 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x300}}}}}}]}}, 0x0)

[ 2947.467801][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2947.482959][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2947.509126][ T8132] usb 1-1: USB disconnect, device number 48
[ 2947.541967][T28889] usb 6-1: USB disconnect, device number 103
[ 2947.685922][T29273] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2947.713733][T29273] ath9k_htc: Failed to initialize the device
11:25:23 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x300}}}}}}]}}, 0x0)

[ 2947.733114][T29641] usb 5-1: ath9k_htc: USB layer deinitialized
11:25:23 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1ffff000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)

[ 2947.912612][ T3702] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2947.934733][ T3702] ath9k_htc: Failed to initialize the device
[ 2947.954147][T11233] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2948.014343][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)

11:25:23 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0xa00}}}}}}]}}, 0x0)

[ 2948.132934][T29641] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2948.153283][ T3699] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2948.154965][ T8147] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2948.172803][ T3699] ath9k_htc: Failed to initialize the device
11:25:23 executing program 2:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0xa, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2948.201992][ T8132] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2948.222171][ T8147] ath9k_htc: Failed to initialize the device
[ 2948.228873][ T7333] usb 4-1: USB disconnect, device number 33
11:25:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)

[ 2948.257360][T31872] usb 3-1: ath9k_htc: USB layer deinitialized
11:25:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)

[ 2948.312776][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2948.332383][T11233] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2948.340140][ T7352] ath9k_htc: Failed to initialize the device
11:25:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

[ 2948.389265][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
11:25:23 executing program 0:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

11:25:23 executing program 0:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

[ 2948.662407][T31872] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 2948.692876][T29641] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
11:25:24 executing program 0:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

[ 2948.705757][T29641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2948.720385][T29641] usb 5-1: Product: syz
[ 2948.726525][T29641] usb 5-1: Manufacturer: syz
[ 2948.734221][T29641] usb 5-1: SerialNumber: syz
[ 2948.782771][T28889] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 2948.784850][T29641] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2948.942567][T11233] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2948.957821][T11233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2948.969329][T11233] usb 2-1: Product: syz
[ 2948.983833][T11233] usb 2-1: Manufacturer: syz
[ 2948.990595][T11233] usb 2-1: SerialNumber: syz
[ 2949.056893][T11233] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2949.113712][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2949.124370][ T8129] ath9k_htc: Failed to initialize the device
[ 2949.141899][ T7333] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2949.213721][T31872] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2949.234677][T31872] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[ 2949.250647][T31872] usb 3-1: Product: syz
[ 2949.258070][T31872] usb 3-1: Manufacturer: syz
[ 2949.272771][T31872] usb 3-1: SerialNumber: syz
[ 2949.335410][T31872] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2949.354990][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2949.389666][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2949.404131][T28889] usb 6-1: Product: syz
[ 2949.409282][T28889] usb 6-1: Manufacturer: syz
[ 2949.426955][T28889] usb 6-1: SerialNumber: syz
[ 2949.433302][T29641] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2949.515229][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2949.676733][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2949.689968][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2949.717833][T28889] usb 5-1: USB disconnect, device number 118
[ 2949.752865][T11233] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2949.932599][T31872] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2949.988937][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2950.001771][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2950.027419][ T7352] usb 2-1: USB disconnect, device number 58
[ 2950.164538][ T8147] usb 3-1: USB disconnect, device number 125
[ 2950.194773][ T8129] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:25 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x23e}}}}}}]}}, 0x0)

[ 2950.436815][T12329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2950.457117][T12329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2950.475355][T29641] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2950.478849][T22270] usb 6-1: USB disconnect, device number 104
[ 2950.504094][T29641] ath9k_htc: Failed to initialize the device
[ 2950.521534][T28889] usb 5-1: ath9k_htc: USB layer deinitialized
11:25:25 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

11:25:25 executing program 1:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0xa, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:25:25 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x21d}}}}}}]}}, 0x0)

[ 2950.573736][ T8132] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 2950.803259][T11233] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2950.825766][T11233] ath9k_htc: Failed to initialize the device
[ 2950.840305][ T7352] usb 2-1: ath9k_htc: USB layer deinitialized
11:25:26 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0xe00}}}}}}]}}, 0x0)

11:25:26 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

11:25:26 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x17, 0x4)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)

[ 2951.003075][ T8132] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 574
[ 2951.032652][T28889] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2951.038382][T31872] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
11:25:26 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

11:25:26 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0xa00}}}}}}]}}, 0x0)

[ 2951.083942][T31872] ath9k_htc: Failed to initialize the device
[ 2951.115041][ T8147] usb 3-1: ath9k_htc: USB layer deinitialized
11:25:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

[ 2951.212471][ T7352] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2951.218085][ T8132] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2951.261323][ T8132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2951.282411][ T8129] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2951.304156][ T8132] usb 4-1: Product: syz
11:25:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

[ 2951.316774][ T8129] ath9k_htc: Failed to initialize the device
[ 2951.338696][ T8132] usb 4-1: Manufacturer: syz
[ 2951.347943][T22270] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2951.371537][ T8132] usb 4-1: SerialNumber: syz
11:25:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

[ 2951.413856][T12345] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2951.490152][ T8132] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2951.558756][T28889] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 541
[ 2951.622959][ T8147] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 2951.753642][ T7352] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2951.772886][T28889] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2951.779200][ T7352] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[ 2951.794908][T28889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2951.806354][ T7352] usb 2-1: Product: syz
[ 2951.806402][ T7352] usb 2-1: Manufacturer: syz
[ 2951.806417][ T7352] usb 2-1: SerialNumber: syz
[ 2951.830904][T22270] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 2951.843693][T28889] usb 5-1: Product: syz
[ 2951.848191][T28889] usb 5-1: Manufacturer: syz
[ 2951.854397][T28889] usb 5-1: SerialNumber: syz
[ 2951.863491][ T7352] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2951.893034][T12348] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2951.923562][T28889] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2952.253893][ T8147] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2952.268325][ T8132] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2952.295702][ T8147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2952.319499][ T8147] usb 3-1: Product: syz
[ 2952.326930][ T8147] usb 3-1: Manufacturer: syz
[ 2952.334134][ T8147] usb 3-1: SerialNumber: syz
[ 2952.403418][T22270] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2952.418524][ T8147] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2952.437657][T22270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2952.445271][ T7352] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2952.450188][T22270] usb 6-1: Product: syz
[ 2952.472506][T22270] usb 6-1: Manufacturer: syz
[ 2952.478315][T22270] usb 6-1: SerialNumber: syz
[ 2952.498113][ T1043] usb 4-1: USB disconnect, device number 34
[ 2952.553932][T22270] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2952.564207][T28889] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2952.690716][ T7333] usb 2-1: USB disconnect, device number 59
[ 2952.811013][T31872] usb 5-1: USB disconnect, device number 119
11:25:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000040))

11:25:28 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x248}}}}}}]}}, 0x0)

[ 2953.132744][ T8147] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000040))

[ 2953.233535][T22270] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:28 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x23e}}}}}}]}}, 0x0)

[ 2953.353095][ T8132] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2953.367439][ T8132] ath9k_htc: Failed to initialize the device
[ 2953.387523][ T1043] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2953.462715][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2953.486655][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2953.496429][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2953.512833][ T7352] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2953.530322][ T8129] usb 6-1: USB disconnect, device number 105
[ 2953.547997][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2953.548611][ T7352] ath9k_htc: Failed to initialize the device
[ 2953.604429][T11233] usb 3-1: USB disconnect, device number 126
[ 2953.605531][ T7333] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2953.682817][T28889] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2953.695689][T28889] ath9k_htc: Failed to initialize the device
[ 2953.706356][T31872] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2953.822415][ T1043] usb 4-1: new high-speed USB device number 35 using dummy_hcd
11:25:29 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0xf00}}}}}}]}}, 0x0)

11:25:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000040))

11:25:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000040))

[ 2954.082795][T31872] usb 5-1: new high-speed USB device number 120 using dummy_hcd
11:25:29 executing program 2:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x23e}}}}}}]}}, 0x0)

11:25:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000040))

[ 2954.153832][ T8147] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2954.181868][ T8147] ath9k_htc: Failed to initialize the device
11:25:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000040))

[ 2954.233298][T11233] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2954.244302][ T1043] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 584
11:25:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/51, 0x0)

11:25:29 executing program 1:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000040))

[ 2954.322739][T22270] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2954.337378][T22270] ath9k_htc: Failed to initialize the device
[ 2954.364212][ T8129] usb 6-1: ath9k_htc: USB layer deinitialized
11:25:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/51, 0x0)

[ 2954.466741][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2954.490022][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2954.493001][T31872] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 574
[ 2954.507560][ T1043] usb 4-1: Product: syz
[ 2954.524068][ T1043] usb 4-1: Manufacturer: syz
[ 2954.534278][ T1043] usb 4-1: SerialNumber: syz
[ 2954.572771][T12371] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2954.615517][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2954.692813][T11233] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 2954.723059][T31872] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2954.736635][T31872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2954.742549][ T8129] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 2954.751090][T31872] usb 5-1: Product: syz
[ 2954.780376][T31872] usb 5-1: Manufacturer: syz
[ 2954.793156][T31872] usb 5-1: SerialNumber: syz
[ 2954.832903][T12375] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2954.875842][T31872] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2955.132745][T11233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 574
[ 2955.292588][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2955.354556][T11233] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2955.367133][ T8129] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2955.382839][T11233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2955.397207][ T8129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2955.413387][T11233] usb 3-1: Product: syz
[ 2955.419394][T11233] usb 3-1: Manufacturer: syz
[ 2955.429464][ T8129] usb 6-1: Product: syz
[ 2955.437413][ T8129] usb 6-1: Manufacturer: syz
[ 2955.444368][T11233] usb 3-1: SerialNumber: syz
[ 2955.451006][ T8129] usb 6-1: SerialNumber: syz
[ 2955.463402][T31872] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2955.488991][T12384] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[ 2955.505349][ T8129] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2955.536949][T22270] usb 4-1: USB disconnect, device number 35
[ 2955.549059][T11233] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2955.725305][ T8147] usb 5-1: USB disconnect, device number 120
11:25:31 executing program 1:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000040))

11:25:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/51, 0x0)

11:25:31 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0xa00}}}}}}]}}, 0x0)

11:25:31 executing program 1:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000040))

[ 2956.202662][ T8129] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2956.263174][T11233] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2956.312636][ T1043] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2956.348511][ T1043] ath9k_htc: Failed to initialize the device
[ 2956.383369][T22270] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2956.415518][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2956.433166][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2956.450171][T28889] usb 6-1: USB disconnect, device number 106
[ 2956.499312][ T3742] usb 3-1: USB disconnect, device number 127
[ 2956.552549][T31872] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2956.561484][T31872] ath9k_htc: Failed to initialize the device
[ 2956.571459][ T8147] usb 5-1: ath9k_htc: USB layer deinitialized
11:25:32 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x1f00}}}}}}]}}, 0x0)

[ 2956.963135][ T8147] usb 5-1: new high-speed USB device number 121 using dummy_hcd
11:25:32 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x24c}}}}}}]}}, 0x0)

11:25:32 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x248}}}}}}]}}, 0x0)

11:25:32 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000040))

11:25:32 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0xa00}}}}}}]}}, 0x0)

11:25:32 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000040))

11:25:32 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000040))

11:25:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040))

11:25:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040))

11:25:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040))

[ 2957.343879][ T1043] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 2957.359803][T11233] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2957.368452][ T8129] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2957.382757][ T7352] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 2957.384105][T11233] ath9k_htc: Failed to initialize the device
[ 2957.403319][ T8129] ath9k_htc: Failed to initialize the device
[ 2957.422750][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2957.439474][ T3742] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2957.562600][ T8147] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2957.594071][ T8147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2957.622685][ T8147] usb 5-1: Product: syz
[ 2957.628551][ T8147] usb 5-1: Manufacturer: syz
[ 2957.635628][ T8147] usb 5-1: SerialNumber: syz
[ 2957.684505][ T8147] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2957.762854][ T7352] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 584
[ 2957.822704][T28889] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 2957.832536][ T3742] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 2957.853236][ T1043] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 588
[ 2957.942732][ T7352] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2957.964939][ T7352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2957.987601][ T7352] usb 1-1: Product: syz
[ 2958.000012][ T7352] usb 1-1: Manufacturer: syz
[ 2958.015569][ T7352] usb 1-1: SerialNumber: syz
[ 2958.043083][T12409] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[ 2958.064027][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2958.066068][ T7352] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2958.093221][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2958.144008][ T1043] usb 4-1: Product: syz
[ 2958.151704][ T1043] usb 4-1: Manufacturer: syz
[ 2958.185332][ T1043] usb 4-1: SerialNumber: syz
[ 2958.223434][T12403] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2958.273367][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2958.315551][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 2958.327572][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[ 2958.428277][ T8147] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2958.442813][ T3742] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2958.468006][ T3742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2958.492748][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2958.508819][ T3742] usb 3-1: Product: syz
[ 2958.519336][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2958.534855][ T3742] usb 3-1: Manufacturer: syz
[ 2958.549732][T28889] usb 6-1: Product: syz
[ 2958.563749][ T3742] usb 3-1: SerialNumber: syz
[ 2958.576565][T28889] usb 6-1: Manufacturer: syz
[ 2958.584947][T28889] usb 6-1: SerialNumber: syz
[ 2958.655284][ T3742] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2958.672848][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2958.682496][ T7352] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2958.710529][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2958.726745][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2958.742397][T28889] usb 5-1: USB disconnect, device number 121
[ 2958.938767][ T8129] usb 1-1: USB disconnect, device number 49
[ 2958.973005][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2959.180407][T22270] usb 4-1: USB disconnect, device number 36
11:25:34 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, 0x0)

11:25:34 executing program 4:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

[ 2959.343350][ T3742] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2959.356147][T11233] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2959.512381][ T8147] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2959.521515][ T8147] ath9k_htc: Failed to initialize the device
[ 2959.542179][T28889] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2959.564354][T12408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2959.584568][T12408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2959.605877][ T8132] usb 6-1: USB disconnect, device number 107
[ 2959.627462][T12412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2959.655121][T12412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2959.677037][ T7333] usb 3-1: USB disconnect, device number 2
[ 2959.752608][ T7352] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2959.767818][ T7352] ath9k_htc: Failed to initialize the device
[ 2959.778173][ T8129] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2960.072430][ T1043] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2960.085393][ T1043] ath9k_htc: Failed to initialize the device
[ 2960.104709][T22270] usb 4-1: ath9k_htc: USB layer deinitialized
11:25:35 executing program 4:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

11:25:35 executing program 0:
socketpair(0xf, 0x400000000000000, 0x0, &(0x7f0000000000))

11:25:35 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x268}}}}}}]}}, 0x0)

11:25:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, 0x0)

11:25:35 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x3100}}}}}}]}}, 0x0)

11:25:35 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x1f00}}}}}}]}}, 0x0)

11:25:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, 0x0)

11:25:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, 0x0)

11:25:35 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x24c}}}}}}]}}, 0x0)

11:25:35 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x9}}]}}, 0x0)

11:25:35 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x7}}]}}, 0x0)

[ 2960.472722][T11233] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2960.481552][ T3742] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2960.494024][T11233] ath9k_htc: Failed to initialize the device
[ 2960.518826][ T8132] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2960.532131][ T3742] ath9k_htc: Failed to initialize the device
[ 2960.552456][ T7333] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2960.602457][ T7352] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 2960.732674][ T1043] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2960.832365][T22270] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2960.843173][T31872] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 2960.892938][ T8132] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 2960.923239][ T7333] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 2960.982602][ T7352] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 616
[ 2961.159247][ T1043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 588
[ 2961.174231][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2961.189631][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2961.204505][ T7352] usb 4-1: Product: syz
[ 2961.210023][ T7352] usb 4-1: Manufacturer: syz
[ 2961.217202][ T7352] usb 4-1: SerialNumber: syz
[ 2961.243015][T12432] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2961.266677][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2961.363037][ T1043] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2961.392642][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2961.403915][T31872] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2961.404035][T31872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2961.404070][T31872] usb 1-1: Product: syz
[ 2961.404097][T31872] usb 1-1: Manufacturer: syz
[ 2961.404125][T31872] usb 1-1: SerialNumber: syz
[ 2961.454264][ T7333] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2961.470643][ T7333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2961.472476][T22270] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2961.485420][T31872] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2961.513051][T22270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2961.517643][ T7333] usb 3-1: Product: syz
[ 2961.531529][T22270] usb 2-1: Product: syz
[ 2961.547751][ T7333] usb 3-1: Manufacturer: syz
[ 2961.547758][T22270] usb 2-1: Manufacturer: syz
[ 2961.547785][ T7333] usb 3-1: SerialNumber: syz
[ 2961.558783][T22270] usb 2-1: SerialNumber: syz
[ 2961.571196][ T8132] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2961.591538][ T1043] usb 5-1: Product: syz
[ 2961.601103][ T8132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2961.632849][ T1043] usb 5-1: Manufacturer: syz
[ 2961.640745][ T1043] usb 5-1: SerialNumber: syz
[ 2961.654301][ T7333] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2961.654926][ T8132] usb 6-1: Product: syz
[ 2961.673715][T12443] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[ 2961.693540][T22270] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2961.712386][ T8132] usb 6-1: Manufacturer: syz
[ 2961.718809][ T8132] usb 6-1: SerialNumber: syz
[ 2961.728812][ T1043] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2961.807938][ T8132] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2961.862563][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2962.089420][T29641] usb 4-1: USB disconnect, device number 37
[ 2962.183236][T31872] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2962.242604][ T7333] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2962.463344][ T1043] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2962.477314][T22270] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2962.534401][T12447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2962.553829][T12447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2962.570633][T12439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2962.584690][ T8132] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2962.616463][T11233] usb 1-1: USB disconnect, device number 50
[ 2962.627257][T12439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
11:25:37 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x26c}}}}}}]}}, 0x0)

[ 2962.658244][ T3742] usb 3-1: USB disconnect, device number 3
[ 2962.735290][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2962.763771][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2962.765056][ T3702] usb 5-1: USB disconnect, device number 122
[ 2962.816863][ T8129] usb 2-1: USB disconnect, device number 60
[ 2962.851933][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2962.892724][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2962.935078][T28889] usb 6-1: USB disconnect, device number 108
[ 2962.952873][ T7352] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2962.972192][ T7352] ath9k_htc: Failed to initialize the device
[ 2962.995861][T29641] usb 4-1: ath9k_htc: USB layer deinitialized
11:25:38 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x7}}]}}, 0x0)

11:25:38 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x4}}]}}, 0x0)

11:25:38 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0xf, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2963.272791][T31872] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2963.281803][T31872] ath9k_htc: Failed to initialize the device
11:25:38 executing program 1:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0xa, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2963.317469][T11233] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2963.352424][ T7333] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2963.368894][ T7333] ath9k_htc: Failed to initialize the device
[ 2963.383178][T29641] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 2963.397852][ T3742] usb 3-1: ath9k_htc: USB layer deinitialized
11:25:38 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x3e00}}}}}}]}}, 0x0)

[ 2963.512958][ T1043] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2963.543142][ T1043] ath9k_htc: Failed to initialize the device
[ 2963.562932][ T8129] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2963.593336][T22270] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2963.609028][T22270] ath9k_htc: Failed to initialize the device
[ 2963.633890][ T3702] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2963.682498][ T8132] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2963.704104][ T8132] ath9k_htc: Failed to initialize the device
[ 2963.722736][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2963.753135][T29641] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 620
[ 2963.772625][T11233] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 2963.802653][ T3742] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 2963.942925][T29641] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2963.962814][ T8129] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 2963.968571][T29641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2964.005695][T29641] usb 4-1: Product: syz
[ 2964.010541][T29641] usb 4-1: Manufacturer: syz
[ 2964.022651][ T3702] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2964.034120][T29641] usb 4-1: SerialNumber: syz
[ 2964.073576][T12449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2964.113671][T29641] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2964.132882][T28889] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 2964.362884][T11233] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2964.403255][T11233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2964.417224][ T3742] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2964.442966][ T3742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2964.455810][T11233] usb 1-1: Product: syz
[ 2964.461374][T11233] usb 1-1: Manufacturer: syz
[ 2964.482716][ T3742] usb 3-1: Product: syz
[ 2964.489896][ T3742] usb 3-1: Manufacturer: syz
[ 2964.496972][T11233] usb 1-1: SerialNumber: syz
[ 2964.512386][ T3742] usb 3-1: SerialNumber: syz
[ 2964.553849][T11233] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2964.563610][ T3702] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2964.593312][ T3702] usb 5-1: New USB device strings: Mfr=15, Product=2, SerialNumber=3
[ 2964.593501][ T3742] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2964.609347][ T3702] usb 5-1: Product: syz
[ 2964.621580][ T8129] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2964.631544][ T3702] usb 5-1: Manufacturer: syz
[ 2964.659155][ T3702] usb 5-1: SerialNumber: syz
[ 2964.661618][ T8129] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3
[ 2964.706151][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2964.707071][T29641] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2964.732331][ T8129] usb 2-1: Product: syz
[ 2964.737995][ T3702] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2964.742883][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2964.777133][ T8129] usb 2-1: Manufacturer: syz
[ 2964.813560][ T8129] usb 2-1: SerialNumber: syz
[ 2964.850875][T28889] usb 6-1: Product: syz
[ 2964.873774][T28889] usb 6-1: Manufacturer: syz
[ 2964.879217][T28889] usb 6-1: SerialNumber: syz
[ 2964.893746][ T8129] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2964.947329][T22270] usb 4-1: USB disconnect, device number 38
[ 2964.968689][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2965.252854][T11233] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2965.322616][ T3702] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:40 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x274}}}}}}]}}, 0x0)

[ 2965.560008][T12451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2965.606011][T12451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2965.622914][ T8129] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2965.636406][ T7333] usb 5-1: USB disconnect, device number 123
[ 2965.646611][ T1043] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2965.682621][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2965.721918][ T8132] usb 1-1: USB disconnect, device number 51
[ 2965.832927][T29641] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2965.853039][T29641] ath9k_htc: Failed to initialize the device
[ 2965.868036][T22270] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2965.889116][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2965.904594][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2965.920400][T31872] usb 2-1: USB disconnect, device number 61
[ 2965.954104][ T3699] usb 6-1: USB disconnect, device number 109
[ 2965.964416][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2965.992865][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2966.023407][ T7352] usb 3-1: USB disconnect, device number 4
11:25:41 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x6, 0x4)

11:25:41 executing program 4:
socketpair(0x7ffff, 0x0, 0x0, &(0x7f0000000000))

11:25:41 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x9, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2966.293779][T22270] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 2966.312777][T11233] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2966.337244][T11233] ath9k_htc: Failed to initialize the device
11:25:41 executing program 4:
socketpair(0x7ffff, 0x0, 0x0, &(0x7f0000000000))

[ 2966.369076][ T8132] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2966.392401][ T3702] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2966.406830][ T3702] ath9k_htc: Failed to initialize the device
11:25:41 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xe4, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

[ 2966.435711][ T7333] usb 5-1: ath9k_htc: USB layer deinitialized
11:25:41 executing program 4:
socketpair(0x7ffff, 0x0, 0x0, &(0x7f0000000000))

11:25:41 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x3f00}}}}}}]}}, 0x0)

11:25:41 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x3e00}}}}}}]}}, 0x0)

11:25:41 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xe4, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

11:25:42 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))

11:25:42 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xe4, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

[ 2966.712600][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2966.724304][ T1043] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2966.735098][T22270] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 628
[ 2966.772042][ T1043] ath9k_htc: Failed to initialize the device
[ 2966.781929][ T8132] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 2966.793090][ T8129] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2966.810479][T28889] ath9k_htc: Failed to initialize the device
[ 2966.832000][ T8129] ath9k_htc: Failed to initialize the device
[ 2966.846253][T31872] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2966.859113][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2966.873651][ T7352] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2967.032710][T22270] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2967.058524][T22270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2967.093246][T22270] usb 4-1: Product: syz
[ 2967.100834][T22270] usb 4-1: Manufacturer: syz
[ 2967.119641][T22270] usb 4-1: SerialNumber: syz
[ 2967.153684][T12461] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 2967.195011][T22270] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2967.242872][ T7352] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 2967.253537][ T3699] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 2967.422629][ T8132] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2967.453573][ T8132] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[ 2967.462537][ T8132] usb 1-1: Product: syz
[ 2967.482329][ T8132] usb 1-1: Manufacturer: syz
[ 2967.488214][ T8132] usb 1-1: SerialNumber: syz
[ 2967.544403][ T8132] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2967.792635][ T7352] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2967.808171][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2967.831358][ T7352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2967.843756][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2967.853487][ T3699] usb 6-1: Product: syz
[ 2967.861877][ T7352] usb 3-1: Product: syz
[ 2967.868325][ T3699] usb 6-1: Manufacturer: syz
[ 2967.873720][ T7352] usb 3-1: Manufacturer: syz
[ 2967.880971][ T3699] usb 6-1: SerialNumber: syz
[ 2967.891700][ T7352] usb 3-1: SerialNumber: syz
[ 2967.892513][T22270] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2967.954782][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2967.968469][ T7352] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2968.097574][T31872] usb 4-1: USB disconnect, device number 39
[ 2968.212748][ T8132] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2968.481698][T29641] usb 1-1: USB disconnect, device number 52
11:25:43 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x27a}}}}}}]}}, 0x0)

11:25:43 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xe4, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

11:25:43 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))

[ 2968.582679][ T3699] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2968.597214][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2968.820510][T12476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2968.874943][T12476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2968.901109][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2968.924294][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2968.946447][ T8129] usb 6-1: USB disconnect, device number 110
[ 2968.963166][T22270] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2968.992576][T22270] ath9k_htc: Failed to initialize the device
11:25:44 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))

11:25:44 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xe4, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

11:25:44 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x9, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2969.033648][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2969.045746][T28889] usb 3-1: USB disconnect, device number 5
11:25:44 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xe4, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

[ 2969.273553][ T8132] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2969.306579][ T8132] ath9k_htc: Failed to initialize the device
[ 2969.362759][T29641] usb 1-1: ath9k_htc: USB layer deinitialized
11:25:44 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x4000}}}}}}]}}, 0x0)

[ 2969.452496][T31872] usb 4-1: new high-speed USB device number 40 using dummy_hcd
11:25:44 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

11:25:44 executing program 4:
socketpair(0x7ffff, 0x0, 0x0, 0x0)

11:25:44 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x3f00}}}}}}]}}, 0x0)

11:25:44 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

[ 2969.674331][ T3699] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2969.686651][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2969.706800][ T7352] ath9k_htc: Failed to initialize the device
[ 2969.724428][ T3699] ath9k_htc: Failed to initialize the device
[ 2969.739725][ T8129] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2969.748396][T28889] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2969.764067][T29641] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 2969.843433][T31872] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 634
[ 2970.033447][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2970.047513][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2970.059930][T31872] usb 4-1: Product: syz
[ 2970.066353][T31872] usb 4-1: Manufacturer: syz
[ 2970.073962][T31872] usb 4-1: SerialNumber: syz
[ 2970.103323][T12491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2970.143590][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2970.163732][ T8129] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 2970.176056][T28889] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 2970.322835][T29641] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2970.346380][T29641] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[ 2970.369868][T29641] usb 1-1: Product: syz
[ 2970.379952][T29641] usb 1-1: Manufacturer: syz
[ 2970.395977][T29641] usb 1-1: SerialNumber: syz
[ 2970.464533][T29641] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2970.732629][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2970.752614][ T8129] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2970.764132][T28889] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2970.792303][ T8129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2970.813285][T28889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2970.835778][ T8129] usb 6-1: Product: syz
[ 2970.842055][ T8129] usb 6-1: Manufacturer: syz
[ 2970.857406][T28889] usb 3-1: Product: syz
[ 2970.865733][T28889] usb 3-1: Manufacturer: syz
[ 2970.875677][T28889] usb 3-1: SerialNumber: syz
[ 2970.887529][ T8129] usb 6-1: SerialNumber: syz
[ 2970.956543][ T8129] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2970.971294][T28889] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2970.978789][ T7333] usb 4-1: USB disconnect, device number 40
[ 2971.072604][T29641] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2971.306029][ T3699] usb 1-1: USB disconnect, device number 53
11:25:46 executing program 4:
socketpair(0x7ffff, 0x0, 0x0, 0x0)

11:25:46 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

11:25:46 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x300}}}}}}]}}, 0x0)

11:25:46 executing program 4:
socketpair(0x7ffff, 0x0, 0x0, 0x0)

11:25:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

[ 2971.613077][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2971.627766][ T8129] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2971.819040][T12502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2971.841260][T31872] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2971.854493][T12502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2971.875159][T31872] ath9k_htc: Failed to initialize the device
[ 2971.920880][ T7333] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2971.957132][ T3702] usb 6-1: USB disconnect, device number 111
11:25:47 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

[ 2971.989401][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2972.007141][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2972.029718][ T7352] usb 3-1: USB disconnect, device number 6
11:25:47 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x27a}}}}}}]}}, 0x0)

[ 2972.152651][T29641] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2972.189435][T29641] ath9k_htc: Failed to initialize the device
[ 2972.209982][ T3699] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2972.322405][ T7333] usb 4-1: new high-speed USB device number 41 using dummy_hcd
11:25:47 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0xff00}}}}}}]}}, 0x0)

11:25:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

11:25:47 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

[ 2972.423818][T22270] usb 5-1: new high-speed USB device number 124 using dummy_hcd
11:25:47 executing program 2:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x5, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:25:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x40, 0x80, 0x1}, {0x5, 0x3f, 0x7, 0x48}, {0x0, 0xec, 0x47, 0x10000}]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="80fb990100080010000000c1c43e77dc439c1f0348dd8c54fbede103000000d145a057a5dc1ffb33b9f4ffc547e7addc34d326b0a48695d66282e9e2c00b39710c1e7254e2251fdf7ca86db45aecddb2b261d96461c398e2546e28fe109d9fce5756e4a305826912bac55e41f73605008f57f415cf8eda6afd25ae7d36b7b4427683f87f90bd7d41504a73e0253835a4880b00291b0fb47cd8eb6b045cf75ac837a60f960ff3f5181f7b879bd4c0bafee9e56b35352ba1ca53b2f761492ee2cd05a29734404344bb2da99db67bfc322f7e36678167f9a32bbbe931d4273caa13e7542e1e45d4f4e02d503333f8773a5388b33381275cdbbe0f3817c079de1d720d7fd60d22e6a34dcfa8d61fb8a137f93105000000d3d9b86e"])
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

11:25:47 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x5b38, 0x4)

11:25:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 2972.702439][ T7333] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 768
[ 2972.732614][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2972.794599][ T8129] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2972.812884][T28889] ath9k_htc: Failed to initialize the device
[ 2972.825701][ T8129] ath9k_htc: Failed to initialize the device
[ 2972.838467][ T3702] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2972.855198][ T7352] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2972.862707][T22270] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 634
[ 2972.902968][ T7333] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2972.931792][ T7333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2972.961914][ T7333] usb 4-1: Product: syz
[ 2972.971470][ T7333] usb 4-1: Manufacturer: syz
[ 2972.988779][ T7333] usb 4-1: SerialNumber: syz
[ 2973.023610][T12516] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2973.043529][ T7333] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2973.124124][T22270] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2973.162979][T22270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2973.203531][T22270] usb 5-1: Product: syz
[ 2973.211100][T22270] usb 5-1: Manufacturer: syz
[ 2973.242357][T22270] usb 5-1: SerialNumber: syz
[ 2973.263605][ T7352] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 2973.274841][ T3702] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 2973.293363][T12524] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2973.363649][T22270] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2973.642572][ T7333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2973.833250][ T7352] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2973.873375][ T7352] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[ 2973.913456][ T3702] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2973.937387][ T7352] usb 3-1: Product: syz
[ 2973.957218][ T7352] usb 3-1: Manufacturer: syz
[ 2973.964844][ T7352] usb 3-1: SerialNumber: syz
[ 2973.975896][ T3702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2973.997558][ T3702] usb 6-1: Product: syz
[ 2974.006582][ T3702] usb 6-1: Manufacturer: syz
[ 2974.025309][ T3702] usb 6-1: SerialNumber: syz
[ 2974.039576][ T7352] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2974.079459][ T7352] usb 4-1: USB disconnect, device number 41
[ 2974.101038][ T3702] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2974.162778][T22270] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:49 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x500}}}}}}]}}, 0x0)

11:25:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x40, 0x80, 0x1}, {0x5, 0x3f, 0x7, 0x48}, {0x0, 0xec, 0x47, 0x10000}]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

11:25:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 2974.449685][ T3699] usb 5-1: USB disconnect, device number 124
11:25:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 2974.693273][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2974.721774][ T3702] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2974.740081][ T7333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2974.761202][ T7333] ath9k_htc: Failed to initialize the device
[ 2974.783055][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2974.922532][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2974.951519][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
11:25:50 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x300}}}}}}]}}, 0x0)

[ 2974.975503][ T8129] usb 3-1: USB disconnect, device number 7
[ 2975.011610][T28889] usb 6-1: USB disconnect, device number 112
[ 2975.153350][ T7352] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 2975.272811][T22270] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2975.294169][T22270] ath9k_htc: Failed to initialize the device
[ 2975.322978][ T3699] usb 5-1: ath9k_htc: USB layer deinitialized
11:25:50 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:25:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x40, 0x80, 0x1}, {0x5, 0x3f, 0x7, 0x48}, {0x0, 0xec, 0x47, 0x10000}]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

11:25:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)

11:25:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 2975.533257][ T7352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024
11:25:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)

[ 2975.566858][ T7352] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
11:25:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:25:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x40, 0x80, 0x1}, {0x5, 0x3f, 0x7, 0x48}, {0x0, 0xec, 0x47, 0x10000}]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc)

[ 2975.702345][ T3699] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 2975.792713][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2975.817248][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2975.830655][ T7352] usb 4-1: Product: syz
[ 2975.838986][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2975.849714][ T3702] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2975.870446][ T7352] usb 4-1: Manufacturer: syz
[ 2975.878522][ T3702] ath9k_htc: Failed to initialize the device
[ 2975.892946][T31872] ath9k_htc: Failed to initialize the device
[ 2975.909409][ T7352] usb 4-1: SerialNumber: syz
[ 2975.916914][ T8129] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2975.925090][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2975.932971][T12544] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2975.956741][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2976.123534][ T3699] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 768
[ 2976.312799][ T3699] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2976.342509][T28889] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 2976.346542][ T3699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2976.380314][ T3699] usb 5-1: Product: syz
[ 2976.390654][ T3699] usb 5-1: Manufacturer: syz
[ 2976.412132][ T3699] usb 5-1: SerialNumber: syz
[ 2976.453784][T12548] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2976.494438][ T3699] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2976.589589][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2976.808549][ T8129] usb 4-1: USB disconnect, device number 42
[ 2976.943172][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2976.982309][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2977.012493][T28889] usb 6-1: Product: syz
[ 2977.018763][T28889] usb 6-1: Manufacturer: syz
[ 2977.042384][T28889] usb 6-1: SerialNumber: syz
[ 2977.082450][ T3699] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2977.104652][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:25:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x40, 0x80, 0x1}, {0x5, 0x3f, 0x7, 0x48}, {0x0, 0xec, 0x47, 0x10000}]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])

11:25:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:25:52 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x600}}}}}}]}}, 0x0)

11:25:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)

[ 2977.483043][T22270] usb 5-1: USB disconnect, device number 125
[ 2977.673660][ T7352] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2977.698383][ T7352] ath9k_htc: Failed to initialize the device
[ 2977.719864][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2977.782629][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:53 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x4, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2977.992044][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2978.017913][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2978.047379][T11233] usb 6-1: USB disconnect, device number 113
[ 2978.142364][ T8129] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 2978.153174][ T3699] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2978.153669][ T3699] ath9k_htc: Failed to initialize the device
[ 2978.188179][T22270] usb 5-1: ath9k_htc: USB layer deinitialized
11:25:53 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x2}}}}}}]}}, 0x0)

11:25:53 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0xe, 0x48}}]}}, 0x0)

11:25:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x40, 0x80, 0x1}, {0x5, 0x3f, 0x7, 0x48}, {0x0, 0xec, 0x47, 0x10000}]})

11:25:53 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)

[ 2978.573629][T22270] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 2978.586378][ T8129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1536, setting to 1024
11:25:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)

11:25:53 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)

[ 2978.643198][ T8129] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
11:25:54 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)

11:25:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200), 0x80)

11:25:54 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)

[ 2978.853643][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2978.872543][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2978.874268][T31872] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 2978.892654][T28889] ath9k_htc: Failed to initialize the device
[ 2978.893134][T11233] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2978.922942][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2978.952113][ T8129] usb 4-1: Product: syz
[ 2978.974699][ T8129] usb 4-1: Manufacturer: syz
[ 2978.987611][ T8129] usb 4-1: SerialNumber: syz
[ 2979.013341][T12570] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2979.043875][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2979.192927][T22270] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2979.223112][T22270] usb 5-1: New USB device strings: Mfr=4, Product=2, SerialNumber=3
[ 2979.253653][T22270] usb 5-1: Product: syz
[ 2979.263344][T22270] usb 5-1: Manufacturer: syz
[ 2979.271620][T22270] usb 5-1: SerialNumber: syz
[ 2979.325851][T22270] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2979.353112][T11233] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 2979.463111][T31872] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2979.483341][T31872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2979.497486][T31872] usb 2-1: Product: syz
[ 2979.503996][T31872] usb 2-1: Manufacturer: syz
[ 2979.510935][T31872] usb 2-1: SerialNumber: syz
[ 2979.575740][T31872] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2979.688855][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2979.888308][ T3742] usb 4-1: USB disconnect, device number 43
[ 2979.932780][T11233] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2979.962374][T11233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2979.992746][T22270] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2980.026131][T11233] usb 6-1: Product: syz
[ 2980.052297][T11233] usb 6-1: Manufacturer: syz
[ 2980.058256][T11233] usb 6-1: SerialNumber: syz
[ 2980.113418][T11233] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2980.172586][T31872] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2980.248371][ T3702] usb 5-1: USB disconnect, device number 126
11:25:55 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x700}}}}}}]}}, 0x0)

11:25:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)

[ 2980.431879][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2980.468724][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2980.504674][ T3699] usb 2-1: USB disconnect, device number 62
11:25:56 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x600}}}}}}]}}, 0x0)

[ 2980.772465][T11233] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2980.803100][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2980.818191][ T8129] ath9k_htc: Failed to initialize the device
[ 2980.851779][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2980.978162][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2980.996812][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2981.033764][ T8132] usb 6-1: USB disconnect, device number 114
[ 2981.046772][T22270] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2981.070939][T22270] ath9k_htc: Failed to initialize the device
[ 2981.082160][ T3702] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2981.262383][ T3742] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 2981.274555][T31872] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2981.300965][T31872] ath9k_htc: Failed to initialize the device
[ 2981.323484][ T3699] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2981.482485][ T3702] usb 5-1: new high-speed USB device number 127 using dummy_hcd
11:25:56 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x3}}}}}}]}}, 0x0)

11:25:56 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)

11:25:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800})

11:25:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x6, 0x7, 0x0, 0x21c0, 0x800], 0x6, 0x800})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)

11:25:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:25:56 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)

11:25:56 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2981.670350][ T3742] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
11:25:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x2}, 0xc)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

[ 2981.723249][ T3742] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
11:25:57 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 2981.862842][ T3702] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1536, setting to 1024
[ 2981.909801][ T3702] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2981.933066][T11233] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2981.952585][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2981.968135][T11233] ath9k_htc: Failed to initialize the device
[ 2981.984627][ T8132] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2981.998381][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2982.032400][ T3742] usb 4-1: Product: syz
[ 2982.040312][ T3742] usb 4-1: Manufacturer: syz
[ 2982.052999][ T3742] usb 4-1: SerialNumber: syz
[ 2982.064154][T28889] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2982.092818][ T3702] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2982.112961][T12594] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2982.118368][ T3702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2982.142957][ T3702] usb 5-1: Product: syz
[ 2982.151327][ T3702] usb 5-1: Manufacturer: syz
[ 2982.163382][ T3702] usb 5-1: SerialNumber: syz
[ 2982.166418][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2982.192695][T12596] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2982.214317][ T3702] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2982.268044][ T1043] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 2982.382771][ T8132] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 2982.693078][T28889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2982.714079][T28889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2982.755173][T28889] usb 2-1: Product: syz
[ 2982.762571][T28889] usb 2-1: Manufacturer: syz
[ 2982.769995][T28889] usb 2-1: SerialNumber: syz
[ 2982.792880][ T3702] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2982.832646][ T1043] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2982.847789][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2982.867077][T28889] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2982.901977][ T1043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2982.942424][ T1043] usb 3-1: Product: syz
[ 2982.951824][ T1043] usb 3-1: Manufacturer: syz
[ 2982.962509][ T1043] usb 3-1: SerialNumber: syz
[ 2983.003156][ T8132] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2983.022989][ T1043] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2983.067044][ T8132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2983.105714][T31872] usb 5-1: USB disconnect, device number 127
[ 2983.114431][ T8132] usb 6-1: Product: syz
[ 2983.120973][ T8132] usb 6-1: Manufacturer: syz
[ 2983.144736][ T8132] usb 6-1: SerialNumber: syz
[ 2983.161000][T22270] usb 4-1: USB disconnect, device number 44
[ 2983.214997][ T8132] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:25:58 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x900}}}}}}]}}, 0x0)

11:25:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

[ 2983.592976][T28889] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:25:58 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x700}}}}}}]}}, 0x0)

[ 2983.763597][ T1043] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2983.829880][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2983.862720][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2983.899059][T11233] usb 2-1: USB disconnect, device number 63
[ 2983.913523][ T3702] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2983.913873][ T3702] ath9k_htc: Failed to initialize the device
[ 2983.914694][T31872] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2983.950559][ T8132] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2983.987919][T12614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2983.999452][ T3742] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2984.003262][T12614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2984.011050][ T3742] ath9k_htc: Failed to initialize the device
[ 2984.039286][T22270] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2984.071272][ T8129] usb 3-1: USB disconnect, device number 8
[ 2984.185800][T12604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2984.209616][T12604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2984.233580][ T8147] usb 6-1: USB disconnect, device number 115
[ 2984.272671][T31872] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 2984.402525][T22270] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 2984.652670][T31872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[ 2984.680702][T31872] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2984.720020][T28889] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2984.740956][T28889] ath9k_htc: Failed to initialize the device
11:26:00 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x4}}}}}}]}}, 0x0)

11:26:00 executing program 0:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:00 executing program 1:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x700}}}}}}]}}, 0x0)

11:26:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2984.764624][T11233] usb 2-1: ath9k_htc: USB layer deinitialized
11:26:00 executing program 0:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

[ 2984.792448][T22270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2304, setting to 1024
11:26:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2984.849214][T22270] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2984.863025][T31872] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2984.882683][ T1043] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2984.915434][ T1043] ath9k_htc: Failed to initialize the device
[ 2984.919056][T31872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2984.938454][ T8129] usb 3-1: ath9k_htc: USB layer deinitialized
11:26:00 executing program 0:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2984.988281][T31872] usb 5-1: Product: syz
[ 2985.016549][T31872] usb 5-1: Manufacturer: syz
[ 2985.032877][ T8132] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2985.041781][T31872] usb 5-1: SerialNumber: syz
[ 2985.050956][ T8132] ath9k_htc: Failed to initialize the device
[ 2985.060854][T22270] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2985.083506][T22270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
11:26:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2985.114035][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2985.122869][T12620] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2985.143630][T31872] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2985.152486][T22270] usb 4-1: Product: syz
[ 2985.180036][T22270] usb 4-1: Manufacturer: syz
[ 2985.196785][T22270] usb 4-1: SerialNumber: syz
[ 2985.242707][T12618] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2985.254385][T11233] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 2985.303353][T22270] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2985.596008][ T8147] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 2985.662843][T11233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[ 2985.712994][T11233] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2985.782610][T31872] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2985.912946][T11233] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2985.943640][T11233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2985.972733][T11233] usb 2-1: Product: syz
[ 2985.978339][T11233] usb 2-1: Manufacturer: syz
[ 2985.989349][T11233] usb 2-1: SerialNumber: syz
[ 2986.015857][T22270] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2986.032435][T12624] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 2986.091500][ T1043] usb 5-1: USB disconnect, device number 2
[ 2986.102405][T11233] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2986.220492][T10021] usb 4-1: USB disconnect, device number 45
[ 2986.262668][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2986.292581][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2986.323810][ T8147] usb 6-1: Product: syz
[ 2986.342437][ T8147] usb 6-1: Manufacturer: syz
[ 2986.349898][ T8147] usb 6-1: SerialNumber: syz
[ 2986.433823][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:26:02 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x3}}}}}}]}}, 0x0)

11:26:02 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2986.763443][T11233] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2986.880647][T31872] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2986.901078][T31872] ath9k_htc: Failed to initialize the device
[ 2986.921753][ T1043] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2987.034115][ T3742] usb 2-1: USB disconnect, device number 64
[ 2987.112456][T22270] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2987.144853][T22270] ath9k_htc: Failed to initialize the device
[ 2987.176406][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2987.196019][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2987.334571][ T1043] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2987.398245][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2987.431702][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2987.451229][T10021] usb 6-1: USB disconnect, device number 116
[ 2987.894794][ T1043] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2987.912381][T11233] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2987.942378][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2987.958896][T11233] ath9k_htc: Failed to initialize the device
[ 2987.971468][ T3742] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2987.986063][ T1043] usb 5-1: Product: syz
11:26:03 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x5}}}}}}]}}, 0x0)

11:26:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:26:03 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0xa00}}}}}}]}}, 0x0)

11:26:03 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:03 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x3}}}}}}]}}, 0x0)

[ 2987.997222][ T1043] usb 5-1: Manufacturer: syz
[ 2988.030569][ T1043] usb 5-1: SerialNumber: syz
11:26:03 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2988.103526][ T1043] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:26:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2988.324219][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2988.345371][ T8147] ath9k_htc: Failed to initialize the device
[ 2988.363155][T22270] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 2988.392448][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2988.452656][ T3742] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 2988.774245][T22270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2560, setting to 1024
[ 2988.782681][T10021] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 2988.802643][ T1043] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2988.853837][T22270] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2989.043605][ T3742] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2989.061593][T12644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2989.092301][ T3742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2989.105224][T22270] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2989.123270][T12644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2989.132300][ T3742] usb 2-1: Product: syz
[ 2989.146735][T22270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2989.152372][T31872] usb 5-1: USB disconnect, device number 3
[ 2989.172784][ T3742] usb 2-1: Manufacturer: syz
[ 2989.195144][T22270] usb 4-1: Product: syz
[ 2989.222604][ T3742] usb 2-1: SerialNumber: syz
[ 2989.230888][T22270] usb 4-1: Manufacturer: syz
[ 2989.243563][T22270] usb 4-1: SerialNumber: syz
[ 2989.274400][ T3742] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2989.345778][T22270] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2989.372872][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2989.399069][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2989.419089][T10021] usb 6-1: Product: syz
[ 2989.431045][T10021] usb 6-1: Manufacturer: syz
[ 2989.447467][T10021] usb 6-1: SerialNumber: syz
[ 2989.493962][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:26:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:26:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2989.913750][ T1043] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2989.932499][ T3742] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2989.952602][ T1043] ath9k_htc: Failed to initialize the device
[ 2989.962051][T31872] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2990.008181][T22270] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2990.102627][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2990.180786][T12649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2990.196939][T12649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2990.221566][T31872] usb 4-1: USB disconnect, device number 46
[ 2990.250339][ T3699] usb 2-1: USB disconnect, device number 65
[ 2990.325452][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2990.372572][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2990.424384][ T3702] usb 6-1: USB disconnect, device number 117
11:26:06 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x6}}}}}}]}}, 0x0)

11:26:06 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:26:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24)

11:26:06 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0xb00}}}}}}]}}, 0x0)

11:26:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (fail_nth: 1)

11:26:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:26:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:06 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x5}}}}}}]}}, 0x0)

[ 2991.032780][ T3742] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2991.044201][T12678] FAULT_INJECTION: forcing a failure.
[ 2991.044201][T12678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2991.091233][ T3742] ath9k_htc: Failed to initialize the device
[ 2991.126383][T22270] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2991.154059][T22270] ath9k_htc: Failed to initialize the device
[ 2991.158236][T12678] CPU: 0 PID: 12678 Comm: syz-executor.1 Not tainted 6.1.0-syzkaller #0
[ 2991.181985][T12678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2991.199043][T12678] Call Trace:
[ 2991.208139][T12678]  <TASK>
[ 2991.212131][T12678]  dump_stack_lvl+0xd1/0x138
[ 2991.218044][T12678]  should_fail_ex.cold+0x5/0xa
[ 2991.226326][T12678]  _copy_to_user+0x2e/0x150
[ 2991.236060][T12678]  simple_read_from_buffer+0xd0/0x160
[ 2991.244673][T12678]  proc_fail_nth_read+0x18b/0x220
11:26:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100))

[ 2991.255047][T12678]  ? proc_fault_inject_read+0x220/0x220
[ 2991.263852][T12678]  ? security_file_permission+0xaf/0xd0
[ 2991.274603][T12678]  vfs_read+0x25b/0x930
[ 2991.280572][T12678]  ? proc_fault_inject_read+0x220/0x220
[ 2991.293638][T12678]  ? kernel_read+0x1c0/0x1c0
11:26:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100))

[ 2991.302144][T12678]  ? __fget_files+0x26a/0x440
[ 2991.311304][T12678]  ksys_read+0x12b/0x250
[ 2991.319114][T12678]  ? vfs_write+0xdd0/0xdd0
[ 2991.326587][T12678]  ? syscall_enter_from_user_mode+0x26/0xb0
[ 2991.337548][T12678]  do_syscall_64+0x39/0xb0
[ 2991.344435][T12678]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2991.357134][T12678] RIP: 0033:0x7f546583defc
[ 2991.366535][T12678] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
11:26:06 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 2991.402077][T12678] RSP: 002b:00007f546666f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2991.418022][T12678] RAX: ffffffffffffffda RBX: 00007f54659abf80 RCX: 00007f546583defc
[ 2991.431049][T12678] RDX: 000000000000000f RSI: 00007f546666f1e0 RDI: 0000000000000004
[ 2991.443588][T12678] RBP: 00007f546666f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2991.458480][T12678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2991.472208][T12678] R13: 00007fff2951953f R14: 00007f546666f300 R15: 0000000000022000
[ 2991.489732][T12678]  </TASK>
[ 2991.496733][ T3699] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2991.508903][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2991.520153][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2991.541524][T10021] ath9k_htc: Failed to initialize the device
[ 2991.556225][ T3702] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2991.585845][ T8147] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 2991.903429][T31872] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 2991.916524][ T3702] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 2992.232619][ T8147] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2992.272633][ T8147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2992.292806][T31872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2816, setting to 1024
[ 2992.302794][ T8147] usb 5-1: Product: syz
[ 2992.330180][T31872] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2992.332317][ T8147] usb 5-1: Manufacturer: syz
[ 2992.393817][ T8147] usb 5-1: SerialNumber: syz
[ 2992.462749][ T3702] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2992.483837][ T8147] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2992.488774][ T3702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2992.519733][ T3702] usb 6-1: Product: syz
[ 2992.528020][ T3702] usb 6-1: Manufacturer: syz
[ 2992.544870][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2992.563933][ T3702] usb 6-1: SerialNumber: syz
[ 2992.587153][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2992.611757][T31872] usb 4-1: Product: syz
[ 2992.617730][T31872] usb 4-1: Manufacturer: syz
[ 2992.633787][ T3702] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2992.653592][T31872] usb 4-1: SerialNumber: syz
[ 2992.697021][T12676] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2992.733967][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2993.212729][ T8147] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2993.262814][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2993.322541][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2993.457946][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2993.470915][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2993.491364][T12681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2993.511186][T22270] usb 5-1: USB disconnect, device number 4
[ 2993.524434][T12681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2993.559719][ T3742] usb 6-1: USB disconnect, device number 118
[ 2993.562065][ T3702] usb 4-1: USB disconnect, device number 47
11:26:09 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x7}}}}}}]}}, 0x0)

11:26:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, 0x0)

11:26:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:09 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:26:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:09 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0xc00}}}}}}]}}, 0x0)

11:26:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x2, 0x0, 0x0)

11:26:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, 0x0)

11:26:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:09 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:26:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x3, 0x0, 0x0)

[ 2994.312471][ T8147] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2994.313158][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2994.340658][ T8147] ath9k_htc: Failed to initialize the device
11:26:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, 0x0)

[ 2994.373774][T10021] ath9k_htc: Failed to initialize the device
[ 2994.382959][T22270] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2994.392326][T31872] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2994.417948][T31872] ath9k_htc: Failed to initialize the device
[ 2994.432564][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2994.441717][ T3702] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2994.812497][ T3702] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 2994.834151][ T3742] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 2995.182691][ T3702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 3072, setting to 1024
[ 2995.203141][ T3702] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2995.382969][ T3702] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2995.406989][ T3702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2995.425910][ T3702] usb 4-1: Product: syz
[ 2995.433571][ T3702] usb 4-1: Manufacturer: syz
[ 2995.440147][ T3702] usb 4-1: SerialNumber: syz
[ 2995.472685][T12708] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2995.476843][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2995.493147][ T3702] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2995.526499][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2995.553974][ T3742] usb 6-1: Product: syz
[ 2995.559641][ T3742] usb 6-1: Manufacturer: syz
[ 2995.582630][ T3742] usb 6-1: SerialNumber: syz
[ 2995.664013][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2996.093386][ T3702] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2996.316900][T31872] usb 4-1: USB disconnect, device number 48
[ 2996.396356][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2996.599196][T12702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2996.619786][T12702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2996.647962][T10021] usb 6-1: USB disconnect, device number 119
11:26:12 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x18}}}}}}]}}, 0x0)

11:26:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x5, 0x0, 0x0)

11:26:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:26:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x3, 0x0, 0x0)

11:26:12 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0xf00}}}}}}]}}, 0x0)

[ 2997.197848][ T3702] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
11:26:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x8, 0x0, 0x0)

11:26:12 executing program 4:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x5, 0x0, 0x0)

11:26:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

[ 2997.267613][ T3702] ath9k_htc: Failed to initialize the device
[ 2997.358933][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
11:26:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:26:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x5, 0x0, 0x0)

[ 2997.432477][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2997.465376][ T3742] ath9k_htc: Failed to initialize the device
[ 2997.511299][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2997.742529][T31872] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 2997.902817][T10021] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 2998.122667][T31872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 3840, setting to 1024
[ 2998.151981][T31872] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2998.332896][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2998.357866][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2998.380149][T31872] usb 4-1: Product: syz
[ 2998.386320][T31872] usb 4-1: Manufacturer: syz
[ 2998.406149][T31872] usb 4-1: SerialNumber: syz
[ 2998.433795][T12725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2998.452792][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2998.475149][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2998.497077][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2998.524641][T10021] usb 6-1: Product: syz
[ 2998.531895][T10021] usb 6-1: Manufacturer: syz
[ 2998.545782][T10021] usb 6-1: SerialNumber: syz
[ 2998.593473][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2999.123298][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2999.172522][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2999.345543][ T3702] usb 4-1: USB disconnect, device number 49
[ 2999.414931][T12728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2999.442986][T12728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2999.474388][ T7333] usb 6-1: USB disconnect, device number 120
11:26:15 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x3e}}}}}}]}}, 0x0)

11:26:15 executing program 4:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x5, 0x0, 0x0)

11:26:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:26:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, 0x0, 0x0)

11:26:15 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x1800}}}}}}]}}, 0x0)

11:26:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, 0x0, 0x0)

11:26:15 executing program 4:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:15 executing program 0:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)

11:26:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), 0x0)

11:26:15 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x3)

[ 3000.152790][T31872] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3000.178541][T31872] ath9k_htc: Failed to initialize the device
[ 3000.221631][ T3702] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3000.232362][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3000.265526][T10021] ath9k_htc: Failed to initialize the device
[ 3000.296565][ T7333] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3000.612897][ T3702] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 3000.663736][ T7333] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 3000.994332][ T3702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 6144, setting to 1024
[ 3001.012628][ T3702] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3001.183194][ T3702] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3001.203647][ T7333] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3001.218475][ T3702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3001.235599][ T7333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3001.250784][ T3702] usb 4-1: Product: syz
[ 3001.267895][ T7333] usb 6-1: Product: syz
[ 3001.279443][ T3702] usb 4-1: Manufacturer: syz
[ 3001.291688][ T7333] usb 6-1: Manufacturer: syz
[ 3001.306703][ T3702] usb 4-1: SerialNumber: syz
[ 3001.316119][ T7333] usb 6-1: SerialNumber: syz
[ 3001.363431][ T3702] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3001.377548][ T7333] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3001.962506][ T3702] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3001.979019][ T7333] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3002.208014][T22270] usb 4-1: USB disconnect, device number 50
[ 3002.216818][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3002.257590][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3002.302606][T10021] usb 6-1: USB disconnect, device number 121
11:26:18 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x1f00}}}}}}]}}, 0x0)

11:26:18 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x48}}}}}}]}}, 0x0)

11:26:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), 0x0)

11:26:18 executing program 0:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)

11:26:18 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x300)

11:26:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x3000000)

11:26:18 executing program 0:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)

11:26:18 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000100))

11:26:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), 0x0)

11:26:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x300000000000000)

[ 3003.032499][ T7333] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3003.044447][ T3702] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3003.064665][ T3702] ath9k_htc: Failed to initialize the device
11:26:18 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)

[ 3003.082400][ T7333] ath9k_htc: Failed to initialize the device
[ 3003.091385][T22270] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3003.107322][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3003.482510][T10021] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 3003.532346][T22270] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 3003.984542][T22270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 7936, setting to 1024
[ 3004.022531][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3004.032312][T22270] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3004.046255][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3004.081255][T10021] usb 6-1: Product: syz
[ 3004.096835][T10021] usb 6-1: Manufacturer: syz
[ 3004.106003][T10021] usb 6-1: SerialNumber: syz
[ 3004.165174][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3004.242708][T22270] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3004.272658][T22270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3004.293479][T22270] usb 4-1: Product: syz
[ 3004.300926][T22270] usb 4-1: Manufacturer: syz
[ 3004.309597][T22270] usb 4-1: SerialNumber: syz
[ 3004.344775][T12776] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 3004.373213][T22270] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3004.772690][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3004.999774][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3005.020540][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3005.051901][ T7333] usb 6-1: USB disconnect, device number 122
[ 3005.082580][T22270] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3005.294934][ T8147] usb 4-1: USB disconnect, device number 51
11:26:21 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x3f00}}}}}}]}}, 0x0)

11:26:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x300)

11:26:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100))

11:26:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000240)={0x9, 0x8000, 0xfff, 0x9}, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14203405fdb4a41fd90852e1ce03c4b34b724cecf698c7c22133ceb8f82d2c8d3f41b07ed0aa8b5fbf3a590fb44a2d5319e72a1da31247bac073bc70c4db018c78e630b50a1770b5802ee4a72d3da7dd56e93f9e41d8db23f931a93b3aa6e4b39884da1106bde962602c34ed27eefc9a23dc47eb136c0b9bcd967b21894e9ac8f8b284daae3cb5918bcfcf2b909b03339cb531bd304ef266a3537070550b3fbcb1d0fe8ff1c704af339d7fd5f2b0ed0e967dbab40b2fbe4a", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x40800)

11:26:21 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)

11:26:21 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x4c}}}}}}]}}, 0x0)

[ 3005.836018][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
11:26:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100))

11:26:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x300)

[ 3005.885230][T10021] ath9k_htc: Failed to initialize the device
11:26:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000240)={0x9, 0x8000, 0xfff, 0x9}, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14203405fdb4a41fd90852e1ce03c4b34b724cecf698c7c22133ceb8f82d2c8d3f41b07ed0aa8b5fbf3a590fb44a2d5319e72a1da31247bac073bc70c4db018c78e630b50a1770b5802ee4a72d3da7dd56e93f9e41d8db23f931a93b3aa6e4b39884da1106bde962602c34ed27eefc9a23dc47eb136c0b9bcd967b21894e9ac8f8b284daae3cb5918bcfcf2b909b03339cb531bd304ef266a3537070550b3fbcb1d0fe8ff1c704af339d7fd5f2b0ed0e967dbab40b2fbe4a", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000240)={0x9, 0x8000, 0xfff, 0x9}, 0x10) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14203405fdb4a41fd90852e1ce03c4b34b724cecf698c7c22133ceb8f82d2c8d3f41b07ed0aa8b5fbf3a590fb44a2d5319e72a1da31247bac073bc70c4db018c78e630b50a1770b5802ee4a72d3da7dd56e93f9e41d8db23f931a93b3aa6e4b39884da1106bde962602c34ed27eefc9a23dc47eb136c0b9bcd967b21894e9ac8f8b284daae3cb5918bcfcf2b909b03339cb531bd304ef266a3537070550b3fbcb1d0fe8ff1c704af339d7fd5f2b0ed0e967dbab40b2fbe4a", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x40800) (async)

11:26:21 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)

[ 3005.928854][ T7333] usb 6-1: ath9k_htc: USB layer deinitialized
11:26:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x300)

11:26:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100))

[ 3006.172298][T22270] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3006.188940][T22270] ath9k_htc: Failed to initialize the device
[ 3006.208338][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3006.313698][ T7333] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 3006.602304][ T8147] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 3006.843390][ T7333] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3006.862567][ T7333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3006.889801][ T7333] usb 6-1: Product: syz
[ 3006.899324][ T7333] usb 6-1: Manufacturer: syz
[ 3006.914863][ T7333] usb 6-1: SerialNumber: syz
[ 3006.964287][ T7333] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3007.022540][ T8147] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 16128, setting to 1024
[ 3007.052271][ T8147] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3007.312498][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3007.343830][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3007.364719][ T8147] usb 4-1: Product: syz
[ 3007.369818][ T8147] usb 4-1: Manufacturer: syz
[ 3007.382340][ T8147] usb 4-1: SerialNumber: syz
[ 3007.433041][T12800] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 3007.474654][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3007.542657][ T7333] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3007.771176][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3007.790520][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3007.817518][T10021] usb 6-1: USB disconnect, device number 123
[ 3008.172668][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3008.380658][ T1043] usb 4-1: USB disconnect, device number 52
[ 3008.638079][ T7333] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3008.657890][ T7333] ath9k_htc: Failed to initialize the device
[ 3008.670527][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
11:26:24 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x4000}}}}}}]}}, 0x0)

11:26:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, 0x0)

11:26:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000240)={0x9, 0x8000, 0xfff, 0x9}, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14203405fdb4a41fd90852e1ce03c4b34b724cecf698c7c22133ceb8f82d2c8d3f41b07ed0aa8b5fbf3a590fb44a2d5319e72a1da31247bac073bc70c4db018c78e630b50a1770b5802ee4a72d3da7dd56e93f9e41d8db23f931a93b3aa6e4b39884da1106bde962602c34ed27eefc9a23dc47eb136c0b9bcd967b21894e9ac8f8b284daae3cb5918bcfcf2b909b03339cb531bd304ef266a3537070550b3fbcb1d0fe8ff1c704af339d7fd5f2b0ed0e967dbab40b2fbe4a", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000240)={0x9, 0x8000, 0xfff, 0x9}, 0x10) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14203405fdb4a41fd90852e1ce03c4b34b724cecf698c7c22133ceb8f82d2c8d3f41b07ed0aa8b5fbf3a590fb44a2d5319e72a1da31247bac073bc70c4db018c78e630b50a1770b5802ee4a72d3da7dd56e93f9e41d8db23f931a93b3aa6e4b39884da1106bde962602c34ed27eefc9a23dc47eb136c0b9bcd967b21894e9ac8f8b284daae3cb5918bcfcf2b909b03339cb531bd304ef266a3537070550b3fbcb1d0fe8ff1c704af339d7fd5f2b0ed0e967dbab40b2fbe4a", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x40800) (async)

11:26:24 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x60}}}}}}]}}, 0x0)

11:26:24 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x1800}}}}}}]}}, 0x0)

11:26:24 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x300)

11:26:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4)

11:26:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, 0x0)

11:26:24 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x300)

11:26:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4)

11:26:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, 0x0)

11:26:24 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x300)

[ 3009.199839][T10021] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 3009.232451][ T7333] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 3009.282724][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3009.299880][ T8147] ath9k_htc: Failed to initialize the device
[ 3009.322588][ T1043] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3009.583298][T10021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 6144, setting to 1024
[ 3009.614873][T10021] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3009.702751][ T1043] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 3009.793049][ T7333] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3009.810536][T10021] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3009.834427][T10021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3009.853262][ T7333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3009.879564][T10021] usb 1-1: Product: syz
[ 3009.890188][ T7333] usb 6-1: Product: syz
[ 3009.900366][T10021] usb 1-1: Manufacturer: syz
[ 3009.912933][ T7333] usb 6-1: Manufacturer: syz
[ 3009.920981][T10021] usb 1-1: SerialNumber: syz
[ 3009.931235][ T7333] usb 6-1: SerialNumber: syz
[ 3009.983708][T10021] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3009.997868][ T7333] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3010.122673][ T1043] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 16384, setting to 1024
[ 3010.163868][ T1043] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3010.393565][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3010.422311][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3010.445834][ T1043] usb 4-1: Product: syz
[ 3010.452010][ T1043] usb 4-1: Manufacturer: syz
[ 3010.472543][ T1043] usb 4-1: SerialNumber: syz
[ 3010.553413][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3010.592644][ T7333] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3010.605604][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3010.835400][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3010.853082][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3010.874152][ T8147] usb 6-1: USB disconnect, device number 124
[ 3010.880499][ T3702] usb 1-1: USB disconnect, device number 54
[ 3011.202648][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3011.412473][T31872] usb 4-1: USB disconnect, device number 53
[ 3011.672816][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3011.685352][ T7333] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3011.701957][ T7333] ath9k_htc: Failed to initialize the device
[ 3011.717988][T10021] ath9k_htc: Failed to initialize the device
[ 3011.731829][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3011.732169][ T3702] usb 1-1: ath9k_htc: USB layer deinitialized
11:26:27 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0xff00}}}}}}]}}, 0x0)

11:26:27 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x4c}}}}}}]}}, 0x0)

11:26:27 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x300)

11:26:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4)

11:26:27 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x68}}}}}}]}}, 0x0)

11:26:27 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x1800}}}}}}]}}, 0x0)

11:26:27 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x300)

11:26:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80)

11:26:27 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x300)

11:26:27 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100))

11:26:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) (async)

11:26:27 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), 0x0)

[ 3012.262432][ T8147] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 3012.272472][ T3702] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 3012.275966][T22270] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 3012.313376][ T1043] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3012.336067][ T1043] ath9k_htc: Failed to initialize the device
[ 3012.359212][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3012.742697][T22270] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 6144, setting to 1024
[ 3012.752526][T31872] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 3012.794117][T22270] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3012.823352][ T3702] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3012.845080][ T3702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3012.859884][ T3702] usb 6-1: Product: syz
[ 3012.865590][ T3702] usb 6-1: Manufacturer: syz
[ 3012.873358][ T3702] usb 6-1: SerialNumber: syz
[ 3012.919957][ T8147] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3012.942756][ T3702] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3012.985105][ T8147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3013.035908][ T8147] usb 5-1: Product: syz
[ 3013.048484][T22270] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3013.070071][ T8147] usb 5-1: Manufacturer: syz
[ 3013.079904][ T8147] usb 5-1: SerialNumber: syz
[ 3013.100394][T22270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3013.131086][T22270] usb 1-1: Product: syz
[ 3013.146493][T22270] usb 1-1: Manufacturer: syz
[ 3013.152850][T31872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 3013.159383][T22270] usb 1-1: SerialNumber: syz
[ 3013.190080][T31872] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3013.213327][ T8147] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3013.283732][T22270] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3013.392678][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3013.413081][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3013.434172][T31872] usb 4-1: Product: syz
[ 3013.443111][T31872] usb 4-1: Manufacturer: syz
[ 3013.455436][T31872] usb 4-1: SerialNumber: syz
[ 3013.482794][T12855] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 3013.503378][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3013.562858][ T3702] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3013.808074][T12852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3013.840581][T12852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3013.866935][ T3699] usb 6-1: USB disconnect, device number 125
[ 3014.002625][ T8147] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3014.053133][T22270] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3014.122694][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3014.250425][T12846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3014.292734][T12846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3014.304492][ T1043] usb 1-1: USB disconnect, device number 55
[ 3014.315282][ T7333] usb 5-1: USB disconnect, device number 5
[ 3014.358884][T10021] usb 4-1: USB disconnect, device number 54
[ 3014.633078][ T3702] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3014.660569][ T3702] ath9k_htc: Failed to initialize the device
[ 3014.681353][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
11:26:30 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:26:30 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), 0x0)

11:26:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80)

11:26:30 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x6c}}}}}}]}}, 0x0)

11:26:30 executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x1800}}}}}}]}}, 0x0)

11:26:30 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x68}}}}}}]}}, 0x0)

11:26:30 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), 0x0)

11:26:30 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

11:26:30 executing program 2:
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)

11:26:30 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)

11:26:30 executing program 2:
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)

[ 3015.112470][T22270] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3015.121461][T22270] ath9k_htc: Failed to initialize the device
[ 3015.130747][ T8147] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3015.152881][ T8147] ath9k_htc: Failed to initialize the device
[ 3015.183307][ T1043] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3015.192701][T31872] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3015.193101][T31872] ath9k_htc: Failed to initialize the device
[ 3015.193784][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3015.219865][ T7333] usb 5-1: ath9k_htc: USB layer deinitialized
11:26:30 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async, rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[ 3015.322405][ T3742] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 3015.572708][ T1043] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 3015.603113][ T7333] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 3015.642661][T10021] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 3015.952812][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3015.977104][ T1043] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 6144, setting to 1024
[ 3016.022987][ T1043] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3016.044247][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3016.063061][ T3742] usb 6-1: Product: syz
[ 3016.071088][ T3742] usb 6-1: Manufacturer: syz
[ 3016.080440][ T3742] usb 6-1: SerialNumber: syz
[ 3016.132622][ T7333] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3016.133720][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3016.158489][ T7333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3016.171120][ T7333] usb 5-1: Product: syz
[ 3016.182883][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3016.199778][ T7333] usb 5-1: Manufacturer: syz
[ 3016.216596][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3016.230491][ T7333] usb 5-1: SerialNumber: syz
[ 3016.237873][T10021] usb 4-1: Product: syz
[ 3016.245657][T10021] usb 4-1: Manufacturer: syz
[ 3016.253030][T10021] usb 4-1: SerialNumber: syz
[ 3016.265253][ T1043] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3016.279122][ T1043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3016.284296][ T7333] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3016.292140][ T1043] usb 1-1: Product: syz
[ 3016.304596][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3016.309881][ T1043] usb 1-1: Manufacturer: syz
[ 3016.333984][ T1043] usb 1-1: SerialNumber: syz
[ 3016.431728][ T1043] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3016.843118][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3016.933223][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3016.947554][ T7333] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3017.064469][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3017.085964][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3017.103151][ T1043] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3017.115834][T31872] usb 6-1: USB disconnect, device number 126
[ 3017.170958][T11233] usb 4-1: USB disconnect, device number 55
[ 3017.198017][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3017.219145][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3017.240147][ T3702] usb 5-1: USB disconnect, device number 6
[ 3017.360149][ T3699] usb 1-1: USB disconnect, device number 56
11:26:33 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x2}}}}}}]}}, 0x0)

11:26:33 executing program 2:
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)

11:26:33 executing program 1:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x490080, 0x0)
recvmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/154, 0x9a}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="703274c6000c3e1b9ee786a4f7e7e1f58d165e826cfe6f00d377e7cb4c44277811ce2d952b2c0d41043eb35c3037cf25c556a137e25cac1ec8eaacb23652fc93e0b02125a6dc2c8be2fd282f69458135e061f5a7021c76b44f65d69f97a75df9d9f5df67bcebf3ae010d1ae4a5f1737a90c6f6b2651c4ea0ffd8042e3a40a5903eb4c2b524fc721ac58f5b2c5743", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf253e0000000c0099003f0000002b000000"], 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x800)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x32}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)

11:26:33 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x74}}}}}}]}}, 0x0)

11:26:33 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x1800}}}}}}]}}, 0x0)

11:26:33 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)

11:26:33 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x6c}}}}}}]}}, 0x0)

11:26:33 executing program 1:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x490080, 0x0)
recvmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/154, 0x9a}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="703274c6000c3e1b9ee786a4f7e7e1f58d165e826cfe6f00d377e7cb4c44277811ce2d952b2c0d41043eb35c3037cf25c556a137e25cac1ec8eaacb23652fc93e0b02125a6dc2c8be2fd282f69458135e061f5a7021c76b44f65d69f97a75df9d9f5df67bcebf3ae010d1ae4a5f1737a90c6f6b2651c4ea0ffd8042e3a40a5903eb4c2b524fc721ac58f5b2c5743", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf253e0000000c0099003f0000002b000000"], 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x800)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x32}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x490080, 0x0) (async)
recvmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/154, 0x9a}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="703274c6000c3e1b9ee786a4f7e7e1f58d165e826cfe6f00d377e7cb4c44277811ce2d952b2c0d41043eb35c3037cf25c556a137e25cac1ec8eaacb23652fc93e0b02125a6dc2c8be2fd282f69458135e061f5a7021c76b44f65d69f97a75df9d9f5df67bcebf3ae010d1ae4a5f1737a90c6f6b2651c4ea0ffd8042e3a40a5903eb4c2b524fc721ac58f5b2c5743", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf253e0000000c0099003f0000002b000000"], 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x800) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x32}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

[ 3017.912425][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3017.953979][ T3742] ath9k_htc: Failed to initialize the device
[ 3017.992870][T10021] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
11:26:33 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)

[ 3018.005497][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3018.015481][ T7333] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
11:26:33 executing program 1:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x490080, 0x0)
recvmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/154, 0x9a}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="703274c6000c3e1b9ee786a4f7e7e1f58d165e826cfe6f00d377e7cb4c44277811ce2d952b2c0d41043eb35c3037cf25c556a137e25cac1ec8eaacb23652fc93e0b02125a6dc2c8be2fd282f69458135e061f5a7021c76b44f65d69f97a75df9d9f5df67bcebf3ae010d1ae4a5f1737a90c6f6b2651c4ea0ffd8042e3a40a5903eb4c2b524fc721ac58f5b2c5743", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf253e0000000c0099003f0000002b000000"], 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x800)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x32}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)

[ 3018.057431][ T7333] ath9k_htc: Failed to initialize the device
[ 3018.069024][T10021] ath9k_htc: Failed to initialize the device
[ 3018.092723][ T3702] usb 5-1: ath9k_htc: USB layer deinitialized
11:26:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xd148, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3018.093903][T11233] usb 4-1: ath9k_htc: USB layer deinitialized
11:26:33 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)

[ 3018.240879][ T1043] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3018.261691][ T1043] ath9k_htc: Failed to initialize the device
[ 3018.290410][ T3699] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3018.442934][T31872] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 3018.464894][ T3702] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 3018.572571][T11233] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 3018.672693][ T3699] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 3018.972909][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3018.992506][ T3702] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3019.006118][ T3702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3019.018855][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3019.033375][ T3702] usb 5-1: Product: syz
[ 3019.040299][T31872] usb 6-1: Product: syz
[ 3019.049780][ T3702] usb 5-1: Manufacturer: syz
[ 3019.062704][T31872] usb 6-1: Manufacturer: syz
[ 3019.073250][ T3699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 6144, setting to 1024
[ 3019.102017][ T3702] usb 5-1: SerialNumber: syz
[ 3019.110454][T31872] usb 6-1: SerialNumber: syz
[ 3019.123311][ T3699] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 3019.173631][ T3702] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3019.186853][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3019.233126][T11233] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3019.263062][T11233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3019.293476][T11233] usb 4-1: Product: syz
[ 3019.301264][T11233] usb 4-1: Manufacturer: syz
[ 3019.313344][ T3699] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3019.335071][T11233] usb 4-1: SerialNumber: syz
[ 3019.337352][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3019.383425][T11233] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3019.387230][ T3699] usb 1-1: Product: syz
[ 3019.404311][ T3699] usb 1-1: Manufacturer: syz
[ 3019.411608][ T3699] usb 1-1: SerialNumber: syz
[ 3019.475066][ T3699] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3019.755393][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 3019.765193][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[ 3019.772851][ T3702] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3019.788685][T31872] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3019.995721][T12908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3020.037281][T12908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3020.063102][T11233] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3020.082604][ T3699] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3020.097769][ T3742] usb 6-1: USB disconnect, device number 127
[ 3020.120296][T12913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3020.144232][T12913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3020.206640][T10021] usb 5-1: USB disconnect, device number 7
[ 3020.287838][ T7333] usb 4-1: USB disconnect, device number 56
[ 3020.313589][ T7352] usb 1-1: USB disconnect, device number 57
11:26:36 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x3}}}}}}]}}, 0x0)

11:26:36 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, 0x0)

11:26:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xd148, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xd148, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:26:36 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x7a}}}}}}]}}, 0x0)

11:26:36 executing program 0:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

11:26:36 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

11:26:36 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[ 3020.874605][ T3702] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3020.886866][T31872] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
11:26:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, 0x0, 0x0)

11:26:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xd148, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xd148, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3020.929002][ T3702] ath9k_htc: Failed to initialize the device
[ 3020.943763][T31872] ath9k_htc: Failed to initialize the device
11:26:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, 0x0, 0x0)

[ 3020.973437][T10021] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3020.993192][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
11:26:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, 0x0, 0x0)

11:26:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, 0x0, 0x0)

[ 3021.112682][T11233] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3021.140091][T11233] ath9k_htc: Failed to initialize the device
[ 3021.175023][ T7333] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3021.192646][ T3699] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3021.223039][ T3699] ath9k_htc: Failed to initialize the device
[ 3021.245348][ T7352] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3021.402454][ T3742] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 3021.562505][ T7333] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 3021.972601][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3021.993929][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3022.022513][ T3742] usb 6-1: Product: syz
[ 3022.029524][ T3742] usb 6-1: Manufacturer: syz
[ 3022.036842][ T3742] usb 6-1: SerialNumber: syz
[ 3022.083414][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3022.092806][ T7333] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3022.115380][ T7333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3022.136719][ T7333] usb 4-1: Product: syz
[ 3022.146420][ T7333] usb 4-1: Manufacturer: syz
[ 3022.155059][ T7333] usb 4-1: SerialNumber: syz
[ 3022.214390][ T7333] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3022.809788][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3022.812517][ T7333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3023.008946][T12935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3023.037376][T12935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3023.059054][T11233] usb 4-1: USB disconnect, device number 57
[ 3023.060348][ T3702] usb 6-1: USB disconnect, device number 2
11:26:38 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x4}}}}}}]}}, 0x0)

11:26:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, 0x0, 0x0)

11:26:38 executing program 1:
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:38 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:26:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, 0x0, 0x0)

11:26:38 executing program 0:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

11:26:39 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

11:26:39 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)

11:26:39 executing program 1:
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:39 executing program 1:
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:26:39 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

11:26:39 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)

[ 3023.912293][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3023.912477][ T7333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3023.941361][ T7333] ath9k_htc: Failed to initialize the device
[ 3023.942751][ T3742] ath9k_htc: Failed to initialize the device
[ 3023.977714][T11233] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3024.003555][ T3702] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3024.382349][T11233] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 3024.392994][ T3702] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 3024.932586][ T3702] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3024.958063][ T3702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3024.979104][ T3702] usb 6-1: Product: syz
[ 3024.986621][ T3702] usb 6-1: Manufacturer: syz
[ 3025.001832][ T3702] usb 6-1: SerialNumber: syz
[ 3025.002978][T11233] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3025.042384][T11233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3025.065134][ T3702] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3025.073807][T11233] usb 4-1: Product: syz
[ 3025.090882][T11233] usb 4-1: Manufacturer: syz
[ 3025.113391][T11233] usb 4-1: SerialNumber: syz
[ 3025.173297][T11233] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3025.642591][ T3702] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3025.859498][T12970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3025.879611][T12970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3025.892366][T11233] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3025.897621][ T7333] usb 6-1: USB disconnect, device number 3
[ 3026.097232][ T7352] usb 4-1: USB disconnect, device number 58
11:26:41 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)

11:26:41 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

11:26:41 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x5f)

11:26:41 executing program 0:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

11:26:41 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x5}}}}}}]}}, 0x0)

11:26:41 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x2}}}}}}]}}, 0x0)

11:26:42 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

11:26:42 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80) (rerun: 32)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x5f)

11:26:42 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)

[ 3026.713091][ T3702] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3026.737280][ T3702] ath9k_htc: Failed to initialize the device
[ 3026.759157][ T7333] usb 6-1: ath9k_htc: USB layer deinitialized
11:26:42 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

11:26:42 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)

11:26:42 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x5f)

11:26:42 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

11:26:42 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)

11:26:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x4b)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

[ 3026.962281][T11233] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3026.992373][T11233] ath9k_htc: Failed to initialize the device
[ 3027.034064][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3027.132432][ T7333] usb 6-1: new high-speed USB device number 4 using dummy_hcd
11:26:42 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x4}}}}}}]}}, 0x0)

[ 3027.423018][ T7352] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 3027.483093][ T3699] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 3027.672671][ T7333] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3027.696114][ T7333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3027.717063][ T7333] usb 6-1: Product: syz
[ 3027.727045][ T7333] usb 6-1: Manufacturer: syz
[ 3027.737622][ T7333] usb 6-1: SerialNumber: syz
[ 3027.804597][ T7333] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3027.963005][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3027.989062][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3028.012799][ T3699] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3028.025808][ T7352] usb 4-1: Product: syz
[ 3028.031421][ T7352] usb 4-1: Manufacturer: syz
[ 3028.046341][ T3699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3028.068348][ T7352] usb 4-1: SerialNumber: syz
[ 3028.075004][ T3699] usb 5-1: Product: syz
[ 3028.091717][ T3699] usb 5-1: Manufacturer: syz
[ 3028.099143][ T3699] usb 5-1: SerialNumber: syz
[ 3028.140733][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3028.173509][ T3699] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3028.422948][ T7333] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3028.651586][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3028.666354][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3028.681160][T10021] usb 6-1: USB disconnect, device number 4
[ 3028.732505][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3028.784182][ T3699] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3028.936974][ T3702] usb 4-1: USB disconnect, device number 59
[ 3029.022073][T31872] usb 5-1: USB disconnect, device number 8
11:26:44 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x5f)

11:26:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x4b) (async)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

11:26:44 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x18}}}}}}]}}, 0x0)

11:26:44 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}}}}}]}}, 0x0)

11:26:44 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x6}}}}}}]}}, 0x0)

11:26:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x4b) (async)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

[ 3029.512666][ T7333] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
11:26:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:26:44 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x5f)

[ 3029.553786][ T7333] ath9k_htc: Failed to initialize the device
11:26:44 executing program 1:
socket$inet(0x2, 0xe6ce69f524fdb338, 0x7303)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3029.598654][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
11:26:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:26:45 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x5f)

11:26:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3029.784489][T11233] usb 1-1: new high-speed USB device number 58 using dummy_hcd
11:26:45 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
socket$nl_generic(0x10, 0x3, 0x10)

11:26:45 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)

[ 3029.832798][ T3699] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3029.842716][ T7352] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3029.866277][ T3699] ath9k_htc: Failed to initialize the device
[ 3029.879375][ T7352] ath9k_htc: Failed to initialize the device
[ 3029.905781][ T3702] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3029.915173][T31872] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3029.972428][T10021] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 3030.292493][ T3702] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 3030.484150][T11233] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3030.502260][T11233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3030.522585][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3030.523056][T11233] usb 1-1: Product: syz
[ 3030.550710][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3030.562364][T11233] usb 1-1: Manufacturer: syz
[ 3030.571419][T11233] usb 1-1: SerialNumber: syz
[ 3030.571931][T10021] usb 6-1: Product: syz
[ 3030.591842][T10021] usb 6-1: Manufacturer: syz
[ 3030.597970][T10021] usb 6-1: SerialNumber: syz
[ 3030.613519][T11233] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3030.664508][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3030.823028][ T3702] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3030.841043][ T3702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3030.860723][ T3702] usb 4-1: Product: syz
[ 3030.870243][ T3702] usb 4-1: Manufacturer: syz
[ 3030.885543][ T3702] usb 4-1: SerialNumber: syz
[ 3030.944139][ T3702] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3031.242427][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3031.266759][T11233] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3031.457732][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3031.476438][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3031.489449][ T7352] usb 6-1: USB disconnect, device number 5
[ 3031.514587][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3031.542670][ T3702] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3031.546214][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3031.608913][ T3742] usb 1-1: USB disconnect, device number 58
[ 3031.759051][ T7333] usb 4-1: USB disconnect, device number 60
11:26:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:26:47 executing program 1:
socket$inet(0x2, 0xe6ce69f524fdb338, 0x7303) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:47 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7}}}}}}]}}, 0x0)

11:26:47 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)

11:26:47 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

11:26:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:26:47 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}}}}}]}}, 0x0)

11:26:47 executing program 1:
socket$inet(0x2, 0xe6ce69f524fdb338, 0x7303)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$inet(0x2, 0xe6ce69f524fdb338, 0x7303) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3032.312394][T11233] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3032.316322][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3032.321919][T11233] ath9k_htc: Failed to initialize the device
11:26:47 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)

11:26:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

[ 3032.367210][T10021] ath9k_htc: Failed to initialize the device
11:26:47 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

[ 3032.420464][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3032.431802][ T3742] usb 1-1: ath9k_htc: USB layer deinitialized
11:26:47 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x17d0c21d, <r1=>0x0})
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000001c0)={r1, 0xe8a})
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r3)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xc70a, 0x3, 0x6], 0x3, 0x80000, 0x0, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0)

11:26:47 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))

11:26:47 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)

[ 3032.632892][ T3702] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3032.640570][ T3702] ath9k_htc: Failed to initialize the device
[ 3032.670312][ T7333] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3032.792682][ T7352] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 3033.052805][ T7333] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 3033.316008][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3033.331540][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3033.349417][ T7352] usb 6-1: Product: syz
[ 3033.355734][ T7352] usb 6-1: Manufacturer: syz
[ 3033.361182][ T7352] usb 6-1: SerialNumber: syz
[ 3033.414020][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3033.582736][ T7333] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3033.601457][ T7333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3033.618008][ T7333] usb 4-1: Product: syz
[ 3033.623368][ T7333] usb 4-1: Manufacturer: syz
[ 3033.629442][ T7333] usb 4-1: SerialNumber: syz
[ 3033.684317][ T7333] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3034.012592][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3034.237649][T13060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3034.258662][T13060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3034.271181][ T3702] usb 6-1: USB disconnect, device number 6
[ 3034.286826][ T7333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3034.484993][T10021] usb 4-1: USB disconnect, device number 61
11:26:50 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x17d0c21d, <r1=>0x0})
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000001c0)={r1, 0xe8a}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r3)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xc70a, 0x3, 0x6], 0x3, 0x80000, 0x0, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0)

11:26:50 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

11:26:50 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))

11:26:50 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)

11:26:50 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5}}}}}}]}}, 0x0)

11:26:50 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x9}}}}}}]}}, 0x0)

11:26:50 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))

11:26:50 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)

11:26:50 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

11:26:50 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x17d0c21d, <r1=>0x0})
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000001c0)={r1, 0xe8a})
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r3)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xc70a, 0x3, 0x6], 0x3, 0x80000, 0x0, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x17d0c21d}) (async)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000001c0)={r1, 0xe8a}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r3) (async)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xc70a, 0x3, 0x6], 0x3, 0x80000}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3035.113465][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3035.121177][ T7352] ath9k_htc: Failed to initialize the device
11:26:50 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))

[ 3035.169291][ T3702] usb 6-1: ath9k_htc: USB layer deinitialized
11:26:50 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x7}}}}}}]}}, 0x0)

11:26:50 executing program 2:
socket$netlink(0x10, 0x3, 0x0)

11:26:50 executing program 1:
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4)

11:26:50 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))

11:26:50 executing program 2:
socket$netlink(0x10, 0x3, 0x0)

[ 3035.352600][ T7333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3035.376425][ T7333] ath9k_htc: Failed to initialize the device
[ 3035.418550][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3035.542884][ T3702] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 3035.612363][ T3700] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 3035.782670][T10021] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 3036.062629][ T3702] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3036.086904][ T3702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3036.111039][ T3702] usb 6-1: Product: syz
[ 3036.121359][ T3702] usb 6-1: Manufacturer: syz
[ 3036.138572][ T3702] usb 6-1: SerialNumber: syz
[ 3036.157925][ T3700] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3036.172475][ T3700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3036.186100][ T3702] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3036.198067][ T3700] usb 5-1: Product: syz
[ 3036.207131][ T3700] usb 5-1: Manufacturer: syz
[ 3036.217852][ T3700] usb 5-1: SerialNumber: syz
[ 3036.264737][ T3700] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3036.322698][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3036.341949][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3036.364640][T10021] usb 4-1: Product: syz
[ 3036.370113][T10021] usb 4-1: Manufacturer: syz
[ 3036.386233][T10021] usb 4-1: SerialNumber: syz
[ 3036.443274][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3036.782999][ T3702] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3036.833414][ T3700] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3036.987949][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3037.010410][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3037.021918][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3037.056303][ T7333] usb 6-1: USB disconnect, device number 7
[ 3037.063277][T13120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3037.065230][T13120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3037.133952][ T7352] usb 5-1: USB disconnect, device number 9
[ 3037.226318][ T3699] usb 4-1: USB disconnect, device number 62
11:26:52 executing program 1:
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4)

11:26:53 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x6}}}}}}]}}, 0x0)

11:26:53 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))

11:26:53 executing program 2:
socket$netlink(0x10, 0x3, 0x0)

11:26:53 executing program 1:
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4)

11:26:53 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0xa}}}}}}]}}, 0x0)

11:26:53 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/36, 0x0)

11:26:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, 0x0)

11:26:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (fail_nth: 1)

11:26:53 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x16)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:26:53 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (fail_nth: 1)

[ 3037.832623][ T3702] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3037.863808][ T3702] ath9k_htc: Failed to initialize the device
[ 3037.902147][ T7333] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3037.913100][ T3700] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3037.920967][ T3700] ath9k_htc: Failed to initialize the device
[ 3037.928131][T13148] FAULT_INJECTION: forcing a failure.
[ 3037.928131][T13148] name failslab, interval 1, probability 0, space 0, times 0
[ 3037.952069][T13149] FAULT_INJECTION: forcing a failure.
[ 3037.952069][T13149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3037.964884][ T7352] usb 5-1: ath9k_htc: USB layer deinitialized
11:26:53 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x16)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x16) (async)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async)

11:26:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, 0x0)

[ 3038.017787][T13149] CPU: 1 PID: 13149 Comm: syz-executor.4 Not tainted 6.1.0-syzkaller #0
[ 3038.029514][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 3038.041622][T13149] Call Trace:
[ 3038.045988][T13149]  <TASK>
[ 3038.051305][T13149]  dump_stack_lvl+0xd1/0x138
[ 3038.058015][T13149]  should_fail_ex.cold+0x5/0xa
[ 3038.064119][T13149]  _copy_to_user+0x2e/0x150
[ 3038.071198][T13149]  simple_read_from_buffer+0xd0/0x160
[ 3038.072442][T10021] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3038.077590][T13149]  proc_fail_nth_read+0x18b/0x220
[ 3038.077641][T13149]  ? proc_fault_inject_read+0x220/0x220
[ 3038.077669][T13149]  ? security_file_permission+0xaf/0xd0
[ 3038.077707][T13149]  vfs_read+0x25b/0x930
[ 3038.111575][T13149]  ? proc_fault_inject_read+0x220/0x220
[ 3038.117470][T13149]  ? kernel_read+0x1c0/0x1c0
[ 3038.124061][T13149]  ? __fget_files+0x26a/0x440
[ 3038.130459][T13149]  ksys_read+0x12b/0x250
[ 3038.135695][T13149]  ? vfs_write+0xdd0/0xdd0
[ 3038.141401][T13149]  ? syscall_enter_from_user_mode+0x26/0xb0
[ 3038.149516][T13149]  do_syscall_64+0x39/0xb0
[ 3038.155333][T13149]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3038.162591][T13149] RIP: 0033:0x7fbfc423defc
[ 3038.168854][T13149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3038.196097][T13149] RSP: 002b:00007fbfc5012160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3038.206945][T13149] RAX: ffffffffffffffda RBX: 00007fbfc43abf80 RCX: 00007fbfc423defc
[ 3038.216178][T13149] RDX: 000000000000000f RSI: 00007fbfc50121e0 RDI: 0000000000000004
[ 3038.225214][T13149] RBP: 00007fbfc50121d0 R08: 0000000000000000 R09: 0000000000000000
[ 3038.233929][T13149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3038.243121][T13149] R13: 00007fff88a3ac5f R14: 00007fbfc5012300 R15: 0000000000022000
[ 3038.251970][T13149]  </TASK>
[ 3038.256731][T10021] ath9k_htc: Failed to initialize the device
[ 3038.266546][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3038.295773][T13148] CPU: 0 PID: 13148 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller #0
[ 3038.305462][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 3038.316208][T13148] Call Trace:
[ 3038.320098][T13148]  <TASK>
[ 3038.323349][T13148]  dump_stack_lvl+0xd1/0x138
[ 3038.330170][T13148]  should_fail_ex.cold+0x5/0xa
[ 3038.335150][T13148]  should_failslab+0x9/0x20
[ 3038.340074][T13148]  kmem_cache_alloc_lru+0x64/0x740
[ 3038.346146][T13148]  ? sock_alloc_inode+0x27/0x1d0
[ 3038.352303][T13148]  sock_alloc_inode+0x27/0x1d0
[ 3038.357430][T13148]  ? sock_free_inode+0x30/0x30
[ 3038.362779][T13148]  alloc_inode+0x61/0x230
[ 3038.367336][T13148]  new_inode_pseudo+0x17/0x80
[ 3038.372663][T13148]  sock_alloc+0x40/0x260
[ 3038.377590][T13148]  __sock_create+0xbd/0x790
[ 3038.383638][T13148]  __sys_socket+0x133/0x250
[ 3038.389188][T13148]  ? __sys_socket_file+0x1f0/0x1f0
[ 3038.395968][T13148]  __x64_sys_socket+0x73/0xb0
[ 3038.402202][T13148]  do_syscall_64+0x39/0xb0
[ 3038.407238][T13148]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3038.414458][T13148] RIP: 0033:0x7f4631e8c0d9
[ 3038.420762][T13148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 3038.443926][T13148] RSP: 002b:00007f4632b95168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 3038.454129][T13148] RAX: ffffffffffffffda RBX: 00007f4631fabf80 RCX: 00007f4631e8c0d9
[ 3038.464465][T13148] RDX: ac7fa969595a8556 RSI: 0000000000000003 RDI: 0000000000000010
[ 3038.476413][T13148] RBP: 00007f4632b951d0 R08: 0000000000000000 R09: 0000000000000000
[ 3038.488353][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3038.497883][T13148] R13: 00007ffec2a95fef R14: 00007f4632b95300 R15: 0000000000022000
[ 3038.507063][T13148]  </TASK>
[ 3038.535785][T13148] socket: no more sockets
[ 3038.712545][ T7333] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 3038.812463][ T3699] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 3039.253037][ T7333] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3039.272059][ T7333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3039.289994][ T7333] usb 6-1: Product: syz
[ 3039.295248][ T7333] usb 6-1: Manufacturer: syz
[ 3039.300901][ T7333] usb 6-1: SerialNumber: syz
[ 3039.355275][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3039.369311][ T7333] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3039.381662][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3039.393848][ T3699] usb 4-1: Product: syz
[ 3039.398368][ T3699] usb 4-1: Manufacturer: syz
[ 3039.404232][ T3699] usb 4-1: SerialNumber: syz
[ 3039.446094][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3039.963190][ T7333] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3040.032508][ T3699] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3040.180450][T13141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3040.200516][T13141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3040.221788][T10021] usb 6-1: USB disconnect, device number 8
[ 3040.260448][ T7352] usb 4-1: USB disconnect, device number 63
11:26:56 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x7}}}}}}]}}, 0x0)

11:26:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, 0x0)

11:26:56 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (fail_nth: 2)

11:26:56 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x16)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:26:56 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0xf}}}}}}]}}, 0x0)

11:26:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:26:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x119042, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x80, 0xa0], 0x2, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0))
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20a2a0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (fail_nth: 1)

11:26:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x2, 0x0, 0x0)

[ 3040.808124][T13169] FAULT_INJECTION: forcing a failure.
[ 3040.808124][T13169] name failslab, interval 1, probability 0, space 0, times 0
[ 3040.897278][T13169] CPU: 0 PID: 13169 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller #0
[ 3040.907826][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 3040.919329][T13169] Call Trace:
[ 3040.922919][T13169]  <TASK>
[ 3040.926069][T13169]  dump_stack_lvl+0xd1/0x138
[ 3040.926217][T13175] FAULT_INJECTION: forcing a failure.
[ 3040.926217][T13175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3040.931800][T13169]  should_fail_ex.cold+0x5/0xa
[ 3040.931990][T13169]  ? security_inode_alloc+0x38/0x160
[ 3040.932044][T13169]  should_failslab+0x9/0x20
[ 3040.932067][T13169]  kmem_cache_alloc+0x5a/0x3d0
[ 3040.932097][T13169]  security_inode_alloc+0x38/0x160
[ 3040.976385][T13169]  inode_init_always+0xbfa/0xef0
[ 3040.983062][T13169]  alloc_inode+0x82/0x230
[ 3040.987826][T13169]  new_inode_pseudo+0x17/0x80
[ 3040.993209][T13169]  sock_alloc+0x40/0x260
[ 3040.997982][T13169]  __sock_create+0xbd/0x790
[ 3041.003631][T13169]  __sys_socket+0x133/0x250
[ 3041.008647][T13169]  ? __sys_socket_file+0x1f0/0x1f0
[ 3041.014302][T13169]  __x64_sys_socket+0x73/0xb0
[ 3041.019859][T13169]  do_syscall_64+0x39/0xb0
[ 3041.025525][T13169]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3041.032812][T13169] RIP: 0033:0x7f4631e8c0d9
11:26:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x119042, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x80, 0xa0], 0x2, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20a2a0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x3, 0x0, 0x0)

[ 3041.038363][T13169] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 3041.061479][T13169] RSP: 002b:00007f4632b95168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 3041.071190][T13169] RAX: ffffffffffffffda RBX: 00007f4631fabf80 RCX: 00007f4631e8c0d9
[ 3041.080319][T13169] RDX: ac7fa969595a8556 RSI: 0000000000000003 RDI: 0000000000000010
[ 3041.088975][T13169] RBP: 00007f4632b951d0 R08: 0000000000000000 R09: 0000000000000000
[ 3041.098925][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3041.109395][T13169] R13: 00007ffec2a95fef R14: 00007f4632b95300 R15: 0000000000022000
[ 3041.119323][T13169]  </TASK>
[ 3041.130591][ T7333] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3041.140466][ T3699] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3041.142384][T13175] CPU: 1 PID: 13175 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller #0
[ 3041.159867][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 3041.173833][T13175] Call Trace:
[ 3041.178723][T13175]  <TASK>
[ 3041.182717][T13175]  dump_stack_lvl+0xd1/0x138
[ 3041.187616][T13175]  should_fail_ex.cold+0x5/0xa
[ 3041.193206][T13175]  _copy_to_user+0x2e/0x150
[ 3041.199102][T13175]  simple_read_from_buffer+0xd0/0x160
[ 3041.205476][T13175]  proc_fail_nth_read+0x18b/0x220
[ 3041.210713][T13175]  ? proc_fault_inject_read+0x220/0x220
[ 3041.218130][T13175]  ? security_file_permission+0xaf/0xd0
[ 3041.224212][T13175]  vfs_read+0x25b/0x930
[ 3041.229321][T13175]  ? proc_fault_inject_read+0x220/0x220
[ 3041.236249][T13175]  ? kernel_read+0x1c0/0x1c0
[ 3041.241812][T13175]  ? __fget_files+0x26a/0x440
[ 3041.246987][T13175]  ksys_read+0x12b/0x250
[ 3041.252154][T13175]  ? vfs_write+0xdd0/0xdd0
[ 3041.257064][T13175]  ? syscall_enter_from_user_mode+0x26/0xb0
[ 3041.263657][T13175]  do_syscall_64+0x39/0xb0
[ 3041.268373][T13175]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3041.275474][T13175] RIP: 0033:0x7f1fbd23defc
[ 3041.281036][T13175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3041.303617][T13175] RSP: 002b:00007f1fbe0c9160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3041.313834][T13175] RAX: ffffffffffffffda RBX: 00007f1fbd3abf80 RCX: 00007f1fbd23defc
[ 3041.324168][T13175] RDX: 000000000000000f RSI: 00007f1fbe0c91e0 RDI: 0000000000000004
[ 3041.333101][T13175] RBP: 00007f1fbe0c91d0 R08: 0000000000000000 R09: 0000000000000000
[ 3041.341878][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
11:26:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x119042, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x80, 0xa0], 0x2, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0))
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20a2a0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x119042, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x80, 0xa0], 0x2, 0x80000}) (async)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) (async)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20a2a0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3041.350955][T13175] R13: 00007ffe302c744f R14: 00007f1fbe0c9300 R15: 0000000000022000
[ 3041.359831][T13175]  </TASK>
[ 3041.367184][T13169] socket: no more sockets
[ 3041.372006][ T3699] ath9k_htc: Failed to initialize the device
[ 3041.380150][ T7333] ath9k_htc: Failed to initialize the device
[ 3041.388938][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3041.403148][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3041.772567][T10021] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 3041.781304][ T7352] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 3042.293258][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3042.311952][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3042.322695][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3042.337804][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3042.350514][T10021] usb 6-1: Product: syz
[ 3042.359557][ T7352] usb 4-1: Product: syz
[ 3042.369354][T10021] usb 6-1: Manufacturer: syz
[ 3042.376645][ T7352] usb 4-1: Manufacturer: syz
[ 3042.385060][T10021] usb 6-1: SerialNumber: syz
[ 3042.393100][ T7352] usb 4-1: SerialNumber: syz
[ 3042.443457][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3042.456098][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3043.033191][ T7333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3043.045144][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3043.238252][T13172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3043.268145][ T3699] usb 4-1: USB disconnect, device number 64
[ 3043.285075][T13172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3043.306651][ T7352] usb 6-1: USB disconnect, device number 9
11:26:59 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x18}}}}}}]}}, 0x0)

11:26:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:59 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (fail_nth: 3)

11:26:59 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0x0, 0x10000], 0x3, 0x80000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:26:59 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x18}}}}}}]}}, 0x0)

11:26:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))

11:26:59 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0x0, 0x10000], 0x3, 0x80000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:26:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x5, 0x0, 0x0)

[ 3043.911707][T13200] FAULT_INJECTION: forcing a failure.
[ 3043.911707][T13200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3043.956322][T13200] CPU: 1 PID: 13200 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller #0
[ 3043.968405][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 3043.981265][T13200] Call Trace:
[ 3043.985034][T13200]  <TASK>
[ 3043.988173][T13200]  dump_stack_lvl+0xd1/0x138
[ 3043.993146][T13200]  should_fail_ex.cold+0x5/0xa
[ 3043.998353][T13200]  _copy_to_user+0x2e/0x150
[ 3044.004244][T13200]  simple_read_from_buffer+0xd0/0x160
[ 3044.010334][T13200]  proc_fail_nth_read+0x18b/0x220
[ 3044.017522][T13200]  ? proc_fault_inject_read+0x220/0x220
[ 3044.024438][T13200]  ? security_file_permission+0xaf/0xd0
[ 3044.032721][T13200]  vfs_read+0x25b/0x930
[ 3044.039103][T13200]  ? proc_fault_inject_read+0x220/0x220
[ 3044.045899][T13200]  ? kernel_read+0x1c0/0x1c0
11:26:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x8, 0x0, 0x0)

[ 3044.053196][T13200]  ? __fget_files+0x26a/0x440
[ 3044.062036][T13200]  ksys_read+0x12b/0x250
[ 3044.066872][T13200]  ? vfs_write+0xdd0/0xdd0
[ 3044.073976][T13200]  ? syscall_enter_from_user_mode+0x26/0xb0
[ 3044.081422][T13200]  do_syscall_64+0x39/0xb0
[ 3044.081487][ T7333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3044.086383][T13200]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
11:26:59 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0x0, 0x10000], 0x3, 0x80000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3044.086531][T13200] RIP: 0033:0x7f4631e3defc
[ 3044.086568][T13200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3044.086600][T13200] RSP: 002b:00007f4632b95160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3044.086640][T13200] RAX: ffffffffffffffda RBX: 00007f4631fabf80 RCX: 00007f4631e3defc
[ 3044.086662][T13200] RDX: 000000000000000f RSI: 00007f4632b951e0 RDI: 0000000000000003
[ 3044.086682][T13200] RBP: 00007f4632b951d0 R08: 0000000000000000 R09: 0000000000000000
[ 3044.086698][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3044.086715][T13200] R13: 00007ffec2a95fef R14: 00007f4632b95300 R15: 0000000000022000
[ 3044.086743][T13200]  </TASK>
11:26:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)) (async)

[ 3044.202154][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3044.237018][T10021] ath9k_htc: Failed to initialize the device
[ 3044.258526][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3044.315232][ T7333] ath9k_htc: Failed to initialize the device
[ 3044.325539][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3044.663042][ T7352] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 3044.692441][ T3699] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 3045.182658][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3045.205800][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3045.225968][ T7352] usb 6-1: Product: syz
[ 3045.231244][ T7352] usb 6-1: Manufacturer: syz
[ 3045.240141][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3045.257786][ T7352] usb 6-1: SerialNumber: syz
[ 3045.265455][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3045.288823][ T3699] usb 4-1: Product: syz
[ 3045.300751][ T3699] usb 4-1: Manufacturer: syz
[ 3045.310405][ T3699] usb 4-1: SerialNumber: syz
[ 3045.323317][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3045.373699][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3045.902684][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3045.952735][ T7333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3046.138611][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3046.158245][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3046.186512][ T3699] usb 4-1: USB disconnect, device number 65
[ 3046.200270][ T8147] usb 6-1: USB disconnect, device number 10
11:27:02 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3e}}}}}}]}}, 0x0)

11:27:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, 0x0, 0x0)

11:27:02 executing program 1:
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:27:02 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

11:27:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)) (async)

11:27:02 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x1d}}}}}}]}}, 0x0)

11:27:02 executing program 1:
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$LOOP_CLR_FD(r0, 0x4c01) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:27:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)={'wg0\x00', 0x400})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1)
clock_gettime(0x0, &(0x7f0000000180))
pipe2$watch_queue(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000002c0)={0x80})
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000280)={<r7=>0x0, 0x1, r6})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000400)={r7})
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRES64=0x77359400, @ANYRESOCT=r3, @ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="0200004001000000000000e011010000868e5ef1a096d201ea4bbe8ca82f5162e8c327457b8d56a0d10d58a8dd6b3bd86036917a55e8f576c533722966de8bdb1d9681d1805eb36662a0b81685a1"], 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x24048858)

11:27:02 executing program 2:
socket$netlink(0x2, 0x3, 0xac7fa969595a8556)

11:27:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, 0x0, 0x0)

11:27:02 executing program 2:
socket$netlink(0x2d, 0x3, 0xac7fa969595a8556)

11:27:02 executing program 1:
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$LOOP_CLR_FD(r0, 0x4c01) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3046.952746][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3046.988442][T10021] ath9k_htc: Failed to initialize the device
[ 3047.031173][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3047.034803][ T7333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3047.070720][ T7333] ath9k_htc: Failed to initialize the device
[ 3047.096485][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3047.442492][ T8147] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 3047.473264][ T3699] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 3048.002624][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3048.026805][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3048.047135][ T3699] usb 4-1: Product: syz
[ 3048.058949][ T3699] usb 4-1: Manufacturer: syz
[ 3048.072686][ T3699] usb 4-1: SerialNumber: syz
[ 3048.095899][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3048.123222][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3048.140874][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3048.143872][ T8147] usb 6-1: Product: syz
[ 3048.193202][ T8147] usb 6-1: Manufacturer: syz
[ 3048.198968][ T8147] usb 6-1: SerialNumber: syz
[ 3048.254372][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3048.733031][ T3699] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3048.951831][T10021] usb 4-1: USB disconnect, device number 66
[ 3048.982717][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3049.201170][T13235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3049.223142][T13235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3049.247363][ T7352] usb 6-1: USB disconnect, device number 11
11:27:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x3)

11:27:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)={'wg0\x00', 0x400})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1)
clock_gettime(0x0, &(0x7f0000000180))
pipe2$watch_queue(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000002c0)={0x80})
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000280)={<r7=>0x0, 0x1, r6})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000400)={r7})
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRES64=0x77359400, @ANYRESOCT=r3, @ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="0200004001000000000000e011010000868e5ef1a096d201ea4bbe8ca82f5162e8c327457b8d56a0d10d58a8dd6b3bd86036917a55e8f576c533722966de8bdb1d9681d1805eb36662a0b81685a1"], 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x24048858)
socket$netlink(0x10, 0x3, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)={'wg0\x00', 0x400}) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000002c0)={0x80}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000400)={r7}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async)
sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRES64=0x77359400, @ANYRESOCT=r3, @ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="0200004001000000000000e011010000868e5ef1a096d201ea4bbe8ca82f5162e8c327457b8d56a0d10d58a8dd6b3bd86036917a55e8f576c533722966de8bdb1d9681d1805eb36662a0b81685a1"], 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x24048858) (async)

11:27:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x40200)

11:27:05 executing program 2:
socket$netlink(0x10, 0x2, 0xac7fa969595a8556)

11:27:05 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x3e}}}}}}]}}, 0x0)

11:27:05 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x48}}}}}}]}}, 0x0)

11:27:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x40200)

11:27:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x300)

11:27:05 executing program 2:
socket$netlink(0x10, 0xa, 0xac7fa969595a8556)

[ 3049.832726][ T3699] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3049.870562][ T3699] ath9k_htc: Failed to initialize the device
[ 3049.902413][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
11:27:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)={'wg0\x00', 0x400})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1)
clock_gettime(0x0, &(0x7f0000000180))
pipe2$watch_queue(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000002c0)={0x80})
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000280)={<r7=>0x0, 0x1, r6})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000400)={r7})
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRES64=0x77359400, @ANYRESOCT=r3, @ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="0200004001000000000000e011010000868e5ef1a096d201ea4bbe8ca82f5162e8c327457b8d56a0d10d58a8dd6b3bd86036917a55e8f576c533722966de8bdb1d9681d1805eb36662a0b81685a1"], 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x24048858)
socket$netlink(0x10, 0x3, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)={'wg0\x00', 0x400}) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000002c0)={0x80}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000400)={r7}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async)
sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRES64=0x77359400, @ANYRESOCT=r3, @ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="0200004001000000000000e011010000868e5ef1a096d201ea4bbe8ca82f5162e8c327457b8d56a0d10d58a8dd6b3bd86036917a55e8f576c533722966de8bdb1d9681d1805eb36662a0b81685a1"], 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x24048858) (async)

11:27:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x3000000)

11:27:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xf04, 0x4)

11:27:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x40200)

11:27:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xf04, 0x4)

11:27:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x300000000000000)

[ 3050.072471][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3050.081487][ T8147] ath9k_htc: Failed to initialize the device
11:27:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x1a, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc)

[ 3050.123112][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3050.282950][T10021] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 3050.502570][ T7352] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 3050.802737][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3050.817198][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3050.836828][T10021] usb 4-1: Product: syz
[ 3050.846316][T10021] usb 4-1: Manufacturer: syz
[ 3050.851912][T10021] usb 4-1: SerialNumber: syz
[ 3050.903533][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3051.033114][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3051.060584][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3051.082530][ T7352] usb 6-1: Product: syz
[ 3051.093396][ T7352] usb 6-1: Manufacturer: syz
[ 3051.103628][ T7352] usb 6-1: SerialNumber: syz
[ 3051.157516][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3051.512988][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3051.733738][ T7333] usb 4-1: USB disconnect, device number 67
[ 3051.742584][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3051.964890][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3051.986967][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3052.012825][ T3699] usb 6-1: USB disconnect, device number 12
11:27:07 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x48}}}}}}]}}, 0x0)

11:27:07 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4c}}}}}}]}}, 0x0)

11:27:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'ipvlan0\x00', 0x600})

11:27:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401140}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:27:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xf04, 0x4)

11:27:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x1a, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x1a, 0x4) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) (async)

[ 3052.557897][T10021] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
11:27:07 executing program 2:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r1, r2], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r0, r1], &(0x7f0000000080)=[0x7, 0x2, 0xfffffffffffffffa, 0x5], 0x87, 0x3, 0x3})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[r1, r1, 0x0, r2], &(0x7f00000001c0)=[0x4, 0x6, 0x0], 0xfffffffffffffffa, 0x4, 0x6})

11:27:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 64)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'ipvlan0\x00', 0x600}) (rerun: 64)

[ 3052.617132][T10021] ath9k_htc: Failed to initialize the device
11:27:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401140}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:27:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 32)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x1a, 0x4) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc)

[ 3052.659091][ T7333] usb 4-1: ath9k_htc: USB layer deinitialized
11:27:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401140}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:27:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'ipvlan0\x00', 0x600})

[ 3052.792822][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3052.814918][ T7352] ath9k_htc: Failed to initialize the device
[ 3052.845290][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3053.072632][ T7333] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 3053.232534][ T3699] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 3053.602592][ T7333] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3053.618381][ T7333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3053.645266][ T7333] usb 4-1: Product: syz
[ 3053.650705][ T7333] usb 4-1: Manufacturer: syz
[ 3053.664801][ T7333] usb 4-1: SerialNumber: syz
[ 3053.723749][ T7333] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3053.789524][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3053.802465][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3053.812097][ T3699] usb 6-1: Product: syz
[ 3053.819758][ T3699] usb 6-1: Manufacturer: syz
[ 3053.827231][ T3699] usb 6-1: SerialNumber: syz
[ 3053.873526][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3054.292565][ T7333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3054.443578][ T3699] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3054.514686][ T7352] usb 4-1: USB disconnect, device number 68
[ 3054.663089][T13313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3054.681278][T13313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3054.703319][T10021] usb 6-1: USB disconnect, device number 13
11:27:10 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x4c}}}}}}]}}, 0x0)

11:27:10 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x60}}}}}}]}}, 0x0)

11:27:10 executing program 2:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r1, r2], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r0, r1], &(0x7f0000000080)=[0x7, 0x2, 0xfffffffffffffffa, 0x5], 0x87, 0x3, 0x3})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[r1, r1, 0x0, r2], &(0x7f00000001c0)=[0x4, 0x6, 0x0], 0xfffffffffffffffa, 0x4, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r1, r2], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r0, r1], &(0x7f0000000080)=[0x7, 0x2, 0xfffffffffffffffa, 0x5], 0x87, 0x3, 0x3}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[r1, r1, 0x0, r2], &(0x7f00000001c0)=[0x4, 0x6, 0x0], 0xfffffffffffffffa, 0x4, 0x6}) (async)

11:27:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socketpair(0x27, 0x80000, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

11:27:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)

11:27:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)

11:27:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socketpair(0x27, 0x80000, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

11:27:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) (async)

11:27:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (rerun: 64)

11:27:10 executing program 2:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r1, r2], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r0, r1], &(0x7f0000000080)=[0x7, 0x2, 0xfffffffffffffffa, 0x5], 0x87, 0x3, 0x3})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[r1, r1, 0x0, r2], &(0x7f00000001c0)=[0x4, 0x6, 0x0], 0xfffffffffffffffa, 0x4, 0x6})

[ 3055.352477][ T7333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3055.377800][ T7333] ath9k_htc: Failed to initialize the device
11:27:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async, rerun: 32)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) (rerun: 32)

11:27:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socketpair(0x27, 0x80000, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

[ 3055.411152][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3055.512456][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3055.541533][ T3699] ath9k_htc: Failed to initialize the device
[ 3055.580058][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3055.802485][ T7352] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 3055.962594][T10021] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 3056.342549][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3056.367886][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3056.389754][ T7352] usb 4-1: Product: syz
[ 3056.398734][ T7352] usb 4-1: Manufacturer: syz
[ 3056.414398][ T7352] usb 4-1: SerialNumber: syz
[ 3056.464210][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3056.502689][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3056.524676][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3056.546202][T10021] usb 6-1: Product: syz
[ 3056.559909][T10021] usb 6-1: Manufacturer: syz
[ 3056.571444][T10021] usb 6-1: SerialNumber: syz
[ 3056.623387][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3057.042805][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3057.212544][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3057.250711][ T3699] usb 4-1: USB disconnect, device number 69
[ 3057.433296][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3057.457030][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3057.481785][ T7333] usb 6-1: USB disconnect, device number 14
11:27:13 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x68}}}}}}]}}, 0x0)

11:27:13 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x68}}}}}}]}}, 0x0)

11:27:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4)

11:27:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)

11:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x801c2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x46e, 0x200, 0x1, 0x9, 0x3, 0x20})

11:27:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4) (async)

11:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x801c2, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x46e, 0x200, 0x1, 0x9, 0x3, 0x20})

11:27:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4) (async)

[ 3058.152651][ T7352] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3058.161457][ T7352] ath9k_htc: Failed to initialize the device
[ 3058.186546][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
11:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x801c2, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x46e, 0x200, 0x1, 0x9, 0x3, 0x20})

[ 3058.320099][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3058.349204][T10021] ath9k_htc: Failed to initialize the device
[ 3058.366717][ T7333] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3058.552393][ T3699] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 3058.722538][ T7333] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 3059.072554][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3059.088846][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3059.117362][ T3699] usb 4-1: Product: syz
[ 3059.129437][ T3699] usb 4-1: Manufacturer: syz
[ 3059.141176][ T3699] usb 4-1: SerialNumber: syz
[ 3059.193495][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3059.242961][ T7333] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3059.258361][ T7333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3059.278702][ T7333] usb 6-1: Product: syz
[ 3059.289127][ T7333] usb 6-1: Manufacturer: syz
[ 3059.301023][ T7333] usb 6-1: SerialNumber: syz
[ 3059.366082][ T7333] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3059.783370][ T3699] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3059.952519][ T7333] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3059.998783][T11233] usb 4-1: USB disconnect, device number 70
[ 3060.161357][T13377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3060.172783][T13377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3060.191687][T10021] usb 6-1: USB disconnect, device number 15
11:27:15 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x6c}}}}}}]}}, 0x0)

11:27:16 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x6c}}}}}}]}}, 0x0)

11:27:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:16 executing program 2:
socket$netlink(0x10, 0x3, 0x4)

11:27:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x63}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:27:16 executing program 2:
socket$netlink(0x10, 0x3, 0x4)

11:27:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3c5b], 0x1, 0x0, 0x0, <r1=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000240), &(0x7f0000000180)=[0xfffffffffffffffd], 0x4})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0x7, 0x7cfe1f16, 0xfff}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x63}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3060.872714][ T3699] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3060.896717][ T3699] ath9k_htc: Failed to initialize the device
11:27:16 executing program 2:
socket$netlink(0x10, 0x3, 0x4)

11:27:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3c5b], 0x1, 0x0, 0x0, <r1=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000240), &(0x7f0000000180)=[0xfffffffffffffffd], 0x4})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0x7, 0x7cfe1f16, 0xfff}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3c5b], 0x1}) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000240), &(0x7f0000000180)=[0xfffffffffffffffd], 0x4}) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0x7, 0x7cfe1f16, 0xfff}, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3060.931721][T11233] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3061.032752][ T7333] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3061.065920][ T7333] ath9k_htc: Failed to initialize the device
[ 3061.084304][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3061.342366][T11233] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 3061.452311][T10021] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 3061.962818][T11233] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3061.972610][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3061.982731][T11233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3062.007982][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3062.020288][T11233] usb 4-1: Product: syz
[ 3062.028366][T10021] usb 6-1: Product: syz
[ 3062.034164][T11233] usb 4-1: Manufacturer: syz
[ 3062.034850][T10021] usb 6-1: Manufacturer: syz
[ 3062.040271][T11233] usb 4-1: SerialNumber: syz
[ 3062.057516][T10021] usb 6-1: SerialNumber: syz
[ 3062.103730][T11233] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3062.103741][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3062.662581][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3062.842574][T11233] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3062.881275][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3062.893474][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3062.906629][ T7333] usb 6-1: USB disconnect, device number 16
[ 3063.048468][ T3742] usb 4-1: USB disconnect, device number 71
11:27:18 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x74}}}}}}]}}, 0x0)

11:27:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x8001, 0x20}, 0xfffffe45)

11:27:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3c5b], 0x1, 0x0, 0x0, <r1=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000240), &(0x7f0000000180)=[0xfffffffffffffffd], 0x4})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0x7, 0x7cfe1f16, 0xfff}, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x1e, 0x4)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fddbdf2504000000080039003300000005002f000000000008000300", @ANYRES32=0x0, @ANYBLOB="080032000180000005002f0001000000080006008a66006c963fd0ff1d71a0989f5651cc998661b87cb8ffdb4fb261af1759e2df30d0a84ae4d678ab9185fdf54efc1029f0fc", @ANYRES32=0x0, @ANYBLOB="bab103cc6d63241f"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x44040)

11:27:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x63}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:27:18 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x74}}}}}}]}}, 0x0)

11:27:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0xfc2, @empty, 0x200}}}, 0x32)

11:27:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x8001, 0x20}, 0xfffffe45)

11:27:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x17, 0x4)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/73, &(0x7f0000000080)=0x49)

11:27:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x1e, 0x4) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fddbdf2504000000080039003300000005002f000000000008000300", @ANYRES32=0x0, @ANYBLOB="080032000180000005002f0001000000080006008a66006c963fd0ff1d71a0989f5651cc998661b87cb8ffdb4fb261af1759e2df30d0a84ae4d678ab9185fdf54efc1029f0fc", @ANYRES32=0x0, @ANYBLOB="bab103cc6d63241f"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x44040)

11:27:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0xfc2, @empty, 0x200}}}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000080), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0xfc2, @empty, 0x200}}}, 0x32) (async)

11:27:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x8001, 0x20}, 0xfffffe45)

[ 3063.759383][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3063.780534][T10021] ath9k_htc: Failed to initialize the device
[ 3063.823158][ T7333] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3063.913050][T11233] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3063.937717][T11233] ath9k_htc: Failed to initialize the device
[ 3063.970282][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3064.202430][ T7333] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 3064.352423][ T3742] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 3064.742522][ T7333] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3064.767436][ T7333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3064.787317][ T7333] usb 6-1: Product: syz
[ 3064.796761][ T7333] usb 6-1: Manufacturer: syz
[ 3064.808246][ T7333] usb 6-1: SerialNumber: syz
[ 3064.863492][ T7333] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3064.912688][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3064.932316][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3064.964465][ T3742] usb 4-1: Product: syz
[ 3064.969250][ T3742] usb 4-1: Manufacturer: syz
[ 3064.985594][ T3742] usb 4-1: SerialNumber: syz
[ 3065.043476][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3065.442781][ T7333] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3065.663574][T13433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3065.690979][T13433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3065.712017][ T3742] usb 6-1: USB disconnect, device number 17
[ 3065.732513][T11233] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3065.938502][ T7352] usb 4-1: USB disconnect, device number 72
11:27:21 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7a}}}}}}]}}, 0x0)

11:27:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0xfc2, @empty, 0x200}}}, 0x32)

11:27:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x17, 0x4) (async)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/73, &(0x7f0000000080)=0x49)

11:27:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x1e, 0x4)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fddbdf2504000000080039003300000005002f000000000008000300", @ANYRES32=0x0, @ANYBLOB="080032000180000005002f0001000000080006008a66006c963fd0ff1d71a0989f5651cc998661b87cb8ffdb4fb261af1759e2df30d0a84ae4d678ab9185fdf54efc1029f0fc", @ANYRES32=0x0, @ANYBLOB="bab103cc6d63241f"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x44040)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x1e, 0x4) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fddbdf2504000000080039003300000005002f000000000008000300", @ANYRES32=0x0, @ANYBLOB="080032000180000005002f0001000000080006008a66006c963fd0ff1d71a0989f5651cc998661b87cb8ffdb4fb261af1759e2df30d0a84ae4d678ab9185fdf54efc1029f0fc", @ANYRES32=0x0, @ANYBLOB="bab103cc6d63241f"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) (async)

11:27:21 executing program 0:
socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4)

11:27:21 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x7a}}}}}}]}}, 0x0)

[ 3066.475810][ T7333] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
11:27:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x17, 0x4) (async, rerun: 32)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/73, &(0x7f0000000080)=0x49)

11:27:21 executing program 4:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/95, 0x5f}], 0x6}, 0x40000042)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r1, 0x4, r2}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r4=>0x0})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x18)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3, r4], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r6, r7], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={<r8=>0x0, 0x1, r2})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r6, 0x0, 0x0, r8, 0x0], &(0x7f0000000140)=[0x0, 0xffffffff], 0x8})

11:27:21 executing program 0:
socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4)

11:27:21 executing program 2:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0x0, 0xbce, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0x1]}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x6, 0x8, 0x3, 0x208, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xb}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x1c, 0x1, 0x4, 0x0, 0x808, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000019c0)=""/215, 0x20d, 0xd7}, 0x20)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001b80), 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001780)={r4, 0x1f, {0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0xa, 0x0, 0x1c, "119671b817bb0678cfe117d631c9515ef7c139ad951b0fb0ab2583c2fe3904234b09a92b2f4add8f15c1f3f83921ee64f94ae74f960b77e39028de53e18c022e", "9f18b871fb7928552bdc5f249212040d6069a1f99c58da00da8288bee00357b1cab7041dfd4f6ae128240ea470b25e58297f21b3f4f0cc96808c74f4d8cb78b5", "b2f3e17f7e50f7bbb0feec29df30e53dce745143b08cb37cba9116156166715d", [0xfc9, 0x6]}})
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1d, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="183400000500000000000000000000001846000006000000000000000000000018600000090000000000000000000000180000000800000000000000000000c085000000990000001856000003000000000000003f00000002b001000100000018000000010000000000000000100000"], &(0x7f0000001740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0xe, r2, 0x8, &(0x7f0000001b00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xd, 0x8000, 0x6}, 0x10, 0xffffffffffffffff, r3}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r0, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x101200, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001600))
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001640)={0x0, @local, @initdev}, &(0x7f0000001680)=0xc)

[ 3066.529524][ T7333] ath9k_htc: Failed to initialize the device
[ 3066.557584][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0xa, 0x5, 0x9, &(0x7f0000000000))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:22 executing program 4:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/95, 0x5f}], 0x6}, 0x40000042) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r1, 0x4, r2}, 0x10) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r4=>0x0}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x18) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3, r4], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)={r4}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r6, r7], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={<r8=>0x0, 0x1, r2})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r6, 0x0, 0x0, r8, 0x0], &(0x7f0000000140)=[0x0, 0xffffffff], 0x8})

[ 3066.792768][T11233] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3066.806514][T11233] ath9k_htc: Failed to initialize the device
[ 3066.828672][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3066.952485][ T3742] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 3067.192487][ T7352] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 3067.542566][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3067.557253][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3067.568202][ T3742] usb 6-1: Product: syz
[ 3067.573907][ T3742] usb 6-1: Manufacturer: syz
[ 3067.588889][ T3742] usb 6-1: SerialNumber: syz
[ 3067.643216][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3067.712533][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3067.727838][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3067.748695][ T7352] usb 4-1: Product: syz
[ 3067.757306][ T7352] usb 4-1: Manufacturer: syz
[ 3067.768200][ T7352] usb 4-1: SerialNumber: syz
[ 3067.828138][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3068.352389][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3068.412606][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3068.562727][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3068.584188][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3068.606438][ T1043] usb 6-1: USB disconnect, device number 18
[ 3068.630271][T10021] usb 4-1: USB disconnect, device number 73
11:27:24 executing program 2:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0x0, 0xbce, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0x1]}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x6, 0x8, 0x3, 0x208, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xb}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x1c, 0x1, 0x4, 0x0, 0x808, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000019c0)=""/215, 0x20d, 0xd7}, 0x20)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001b80), 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001780)={r4, 0x1f, {0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0xa, 0x0, 0x1c, "119671b817bb0678cfe117d631c9515ef7c139ad951b0fb0ab2583c2fe3904234b09a92b2f4add8f15c1f3f83921ee64f94ae74f960b77e39028de53e18c022e", "9f18b871fb7928552bdc5f249212040d6069a1f99c58da00da8288bee00357b1cab7041dfd4f6ae128240ea470b25e58297f21b3f4f0cc96808c74f4d8cb78b5", "b2f3e17f7e50f7bbb0feec29df30e53dce745143b08cb37cba9116156166715d", [0xfc9, 0x6]}})
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1d, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="183400000500000000000000000000001846000006000000000000000000000018600000090000000000000000000000180000000800000000000000000000c085000000990000001856000003000000000000003f00000002b001000100000018000000010000000000000000100000"], &(0x7f0000001740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0xe, r2, 0x8, &(0x7f0000001b00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xd, 0x8000, 0x6}, 0x10, 0xffffffffffffffff, r3}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r0, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x101200, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001600))
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001640)={0x0, @local, @initdev}, &(0x7f0000001680)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0x0, 0xbce, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0x1]}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x6, 0x8, 0x3, 0x208, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xb}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x1c, 0x1, 0x4, 0x0, 0x808, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000019c0)=""/215, 0x20d, 0xd7}, 0x20) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000001b80), 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001780)={r4, 0x1f, {0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0xa, 0x0, 0x1c, "119671b817bb0678cfe117d631c9515ef7c139ad951b0fb0ab2583c2fe3904234b09a92b2f4add8f15c1f3f83921ee64f94ae74f960b77e39028de53e18c022e", "9f18b871fb7928552bdc5f249212040d6069a1f99c58da00da8288bee00357b1cab7041dfd4f6ae128240ea470b25e58297f21b3f4f0cc96808c74f4d8cb78b5", "b2f3e17f7e50f7bbb0feec29df30e53dce745143b08cb37cba9116156166715d", [0xfc9, 0x6]}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1d, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="183400000500000000000000000000001846000006000000000000000000000018600000090000000000000000000000180000000800000000000000000000c085000000990000001856000003000000000000003f00000002b001000100000018000000010000000000000000100000"], &(0x7f0000001740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0xe, r2, 0x8, &(0x7f0000001b00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xd, 0x8000, 0x6}, 0x10, 0xffffffffffffffff, r3}, 0x80) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r0, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x101200, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001600)) (async)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001640)={0x0, @local, @initdev}, &(0x7f0000001680)=0xc) (async)

11:27:24 executing program 0:
socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4)
socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)) (async)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) (async)

11:27:24 executing program 4:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/95, 0x5f}], 0x6}, 0x40000042)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r1, 0x4, r2}, 0x10) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r4=>0x0}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x18)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3, r4], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r6=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r6, r7], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={<r8=>0x0, 0x1, r2})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r6, 0x0, 0x0, r8, 0x0], &(0x7f0000000140)=[0x0, 0xffffffff], 0x8})

11:27:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0xa, 0x5, 0x9, &(0x7f0000000000)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:24 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:27:24 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:27:24 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socketpair(0xa, 0xa, 0x3, &(0x7f00000000c0))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x1, 0x4)

11:27:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x400201, 0xaf)
r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="0690d1f8239a3d0325b9f0eb39377a8e7c4327b10c0a308ab3fff3e0fb5101ee966c10fa087d81cda8f52a8f25e7f663649dadb58c877428d0804c050c0b7f4fa3deafb972bbd649a00fdd227a1e00e5b92d591b88c4fee0236b002c95bf02d394989de128c3d271b0975dd41e56416c530ed7d536bd22614e112ff140c8a5f744e1e7488a2d6ac05d48479fc1ecfc9b09bd4946d21d6600762fc0bd2f672daeb8b7246110a0824278e4690b72f3684660b0ac7403bbd861beaca6f3f9b02861407299599671b388f4c80bdeed", 0xcd, 0xfffffffffffffff9)
keyctl$assume_authority(0x10, r2)
write$damon_contexts(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="202e2f84696c6530202e2f66696c65202e2f66696c6530202e2f66696c653000"], 0x4)

11:27:24 executing program 2:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0x0, 0xbce, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0x1]}, 0x80) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x6, 0x8, 0x3, 0x208, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xb}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x1c, 0x1, 0x4, 0x0, 0x808, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000019c0)=""/215, 0x20d, 0xd7}, 0x20) (async)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001b80), 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001780)={r4, 0x1f, {0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0xa, 0x0, 0x1c, "119671b817bb0678cfe117d631c9515ef7c139ad951b0fb0ab2583c2fe3904234b09a92b2f4add8f15c1f3f83921ee64f94ae74f960b77e39028de53e18c022e", "9f18b871fb7928552bdc5f249212040d6069a1f99c58da00da8288bee00357b1cab7041dfd4f6ae128240ea470b25e58297f21b3f4f0cc96808c74f4d8cb78b5", "b2f3e17f7e50f7bbb0feec29df30e53dce745143b08cb37cba9116156166715d", [0xfc9, 0x6]}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1d, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="183400000500000000000000000000001846000006000000000000000000000018600000090000000000000000000000180000000800000000000000000000c085000000990000001856000003000000000000003f00000002b001000100000018000000010000000000000000100000"], &(0x7f0000001740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0xe, r2, 0x8, &(0x7f0000001b00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xd, 0x8000, 0x6}, 0x10, 0xffffffffffffffff, r3}, 0x80) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r0, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x101200, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001600))
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001640)={0x0, @local, @initdev}, &(0x7f0000001680)=0xc)

[ 3069.443139][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3069.476477][ T3742] ath9k_htc: Failed to initialize the device
11:27:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0) (async, rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async, rerun: 64)
r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x400201, 0xaf) (async)
r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="0690d1f8239a3d0325b9f0eb39377a8e7c4327b10c0a308ab3fff3e0fb5101ee966c10fa087d81cda8f52a8f25e7f663649dadb58c877428d0804c050c0b7f4fa3deafb972bbd649a00fdd227a1e00e5b92d591b88c4fee0236b002c95bf02d394989de128c3d271b0975dd41e56416c530ed7d536bd22614e112ff140c8a5f744e1e7488a2d6ac05d48479fc1ecfc9b09bd4946d21d6600762fc0bd2f672daeb8b7246110a0824278e4690b72f3684660b0ac7403bbd861beaca6f3f9b02861407299599671b388f4c80bdeed", 0xcd, 0xfffffffffffffff9)
keyctl$assume_authority(0x10, r2) (async)
write$damon_contexts(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="202e2f84696c6530202e2f66696c65202e2f66696c6530202e2f66696c653000"], 0x4)

11:27:24 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xc, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x13, 0x4)
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x3)

[ 3069.511779][ T1043] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3069.515623][ T7352] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3069.557271][ T7352] ath9k_htc: Failed to initialize the device
[ 3069.597149][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
11:27:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xc, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x13, 0x4)
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x3)

11:27:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async, rerun: 32)
r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x400201, 0xaf) (async, rerun: 32)
r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="0690d1f8239a3d0325b9f0eb39377a8e7c4327b10c0a308ab3fff3e0fb5101ee966c10fa087d81cda8f52a8f25e7f663649dadb58c877428d0804c050c0b7f4fa3deafb972bbd649a00fdd227a1e00e5b92d591b88c4fee0236b002c95bf02d394989de128c3d271b0975dd41e56416c530ed7d536bd22614e112ff140c8a5f744e1e7488a2d6ac05d48479fc1ecfc9b09bd4946d21d6600762fc0bd2f672daeb8b7246110a0824278e4690b72f3684660b0ac7403bbd861beaca6f3f9b02861407299599671b388f4c80bdeed", 0xcd, 0xfffffffffffffff9)
keyctl$assume_authority(0x10, r2)
write$damon_contexts(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="202e2f84696c6530202e2f66696c65202e2f66696c6530202e2f66696c653000"], 0x4)

11:27:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xc, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x13, 0x4) (async)
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x3)

11:27:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0xa, 0x5, 0x9, &(0x7f0000000000))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair(0xa, 0x5, 0x9, &(0x7f0000000000)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:27:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3069.932717][ T1043] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 3069.993140][T10021] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 3070.492652][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3070.509083][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3070.527972][ T1043] usb 6-1: Product: syz
[ 3070.537744][ T1043] usb 6-1: Manufacturer: syz
[ 3070.543628][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3070.547975][ T1043] usb 6-1: SerialNumber: syz
[ 3070.567916][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3070.579202][T10021] usb 4-1: Product: syz
[ 3070.587400][T10021] usb 4-1: Manufacturer: syz
[ 3070.601336][T10021] usb 4-1: SerialNumber: syz
[ 3070.614090][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3070.653379][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3071.232750][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3071.292473][ T1043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3071.450744][ T3742] usb 4-1: USB disconnect, device number 74
[ 3071.499648][T13508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3071.516707][T13508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3071.528886][ T3699] usb 6-1: USB disconnect, device number 19
11:27:27 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x2}}}}}}]}}, 0x0)

11:27:27 executing program 0:
socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socketpair(0xa, 0xa, 0x3, &(0x7f00000000c0)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x1, 0x4)

11:27:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))

11:27:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4)
socket$netlink(0x10, 0x3, 0x8)

11:27:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:27:27 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x2}}}}}}]}}, 0x0)

11:27:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async)

11:27:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) (async)
socket$netlink(0x10, 0x3, 0x8)

11:27:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:27:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))

11:27:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async, rerun: 64)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) (rerun: 64)
socket$netlink(0x10, 0x3, 0x8)

11:27:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x7)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3072.312755][ T1043] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3072.312809][T10021] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3072.325793][ T1043] ath9k_htc: Failed to initialize the device
[ 3072.363160][T10021] ath9k_htc: Failed to initialize the device
[ 3072.396697][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3072.407400][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3072.762336][ T3699] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 3072.812318][ T3742] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 3073.292726][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3073.307554][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3073.321839][ T3699] usb 6-1: Product: syz
[ 3073.328679][ T3699] usb 6-1: Manufacturer: syz
[ 3073.337421][ T3699] usb 6-1: SerialNumber: syz
[ 3073.383311][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3073.402749][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3073.432277][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3073.445565][ T3742] usb 4-1: Product: syz
[ 3073.453764][ T3742] usb 4-1: Manufacturer: syz
[ 3073.459490][ T3742] usb 4-1: SerialNumber: syz
[ 3073.525022][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3073.972488][ T3699] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3074.191500][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3074.212019][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3074.212354][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3074.234926][ T7352] usb 6-1: USB disconnect, device number 20
[ 3074.427248][T10021] usb 4-1: USB disconnect, device number 75
11:27:30 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x3}}}}}}]}}, 0x0)

11:27:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/74, 0x4a}, &(0x7f00000000c0), 0x6a}, 0x20)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

11:27:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)

11:27:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x7)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x7) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:27:30 executing program 0:
socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socketpair(0xa, 0xa, 0x3, &(0x7f00000000c0))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
getsockname$netlink(r1, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x1, 0x4)

11:27:30 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x3}}}}}}]}}, 0x0)

11:27:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/74, 0x4a}, &(0x7f00000000c0), 0x6a}, 0x20) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async, rerun: 32)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (rerun: 32)

11:27:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) (async)

11:27:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r2)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84d7, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0x3, 0xa, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0x0, 0xa, 0x8, 0x8}, @generic={0x5, 0x7, 0x6, 0x6, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0xc6, 0xcd, &(0x7f00000003c0)=""/205, 0x40f00, 0x14, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x3f, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r1, r2, r2, r0, r2, r2, r1]}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x2], 0x1, 0x40000, 0x0, <r4=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r2, r3, 0x0, r4}, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'geneve1\x00', @multicast})
r6 = socket$netlink(0x10, 0x3, 0x13)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x3], 0x1, 0xc00, 0x0, <r8=>0xffffffffffffffff})
ioctl$VFIO_SET_IOMMU(r8, 0x3b66, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x14, r9, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="207c18c1", @ANYRES16=r9, @ANYBLOB="00022cbd7000fcdbdf253e0000000c0099000500000023000000"], 0x20}, 0x1, 0x0, 0x0, 0x240008c1}, 0x80004)
getsockname$netlink(r6, 0x0, &(0x7f0000000000)=0x97)

11:27:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x7) (rerun: 64)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3075.032417][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3075.040815][ T3699] ath9k_htc: Failed to initialize the device
11:27:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) (async)

11:27:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/74, 0x4a}, &(0x7f00000000c0), 0x6a}, 0x20) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

[ 3075.088414][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3075.272462][ T3742] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3075.290762][ T3742] ath9k_htc: Failed to initialize the device
[ 3075.326350][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3075.512342][ T7352] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 3075.752403][T10021] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 3076.052710][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3076.070663][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3076.093403][ T7352] usb 6-1: Product: syz
[ 3076.098741][ T7352] usb 6-1: Manufacturer: syz
[ 3076.106816][ T7352] usb 6-1: SerialNumber: syz
[ 3076.160076][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3076.282574][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3076.308712][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3076.330103][T10021] usb 4-1: Product: syz
[ 3076.336076][T10021] usb 4-1: Manufacturer: syz
[ 3076.341439][T10021] usb 4-1: SerialNumber: syz
[ 3076.393646][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3076.752610][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3076.969985][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3076.981237][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3077.006491][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3077.030900][ T3699] usb 6-1: USB disconnect, device number 21
[ 3077.187439][T22270] usb 4-1: USB disconnect, device number 76
11:27:32 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x4}}}}}}]}}, 0x0)

11:27:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25020000000800020002000000080001000200020000400800010000000000080001000200000008007c1bcd247c92f3bc778d2ed95826c21e65a5752c2e2631d60e8aa13c8ac35048676cfb106da6ff360352f0df55154940457cb81d5398fff9cb5f900af2490c46b92028e713c426c5b165305c5a7d955c5bebebab7e52500b1977c4ac9c399f51b4e574f388368206dcf3576816676016bd8c640d6600"/183], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20010040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400)

11:27:32 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000200000000000000250400000008000600c1aa9332e4444a64d76d4b0277b78ff24dfd309bda513ae01dfe9563f8a80ffa60344f9ce5eddbff4691fda34037e5d37793fb775595e5fd17bd2113ce116b4d505c8b4ad49fa5d229a1ace0142b5c2353e36807ddd184f10d", @ANYRES32=0x0, @ANYBLOB="050037000000000005002a0000000000050038000000000008003c004000000008000600", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x80)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000001c0)=<r5=>0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000480)={0x3, <r6=>0x0, 0x10001})
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x2, 0x2}}, 0x2e)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000004c0)={r6, 0x2})
setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000100)={@nfc={0x27, r5, 0x1, 0x1}, {&(0x7f0000000040)=""/67, 0x43}, &(0x7f00000000c0), 0x2}, 0xa0)

11:27:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r2) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84d7, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0x3, 0xa, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0x0, 0xa, 0x8, 0x8}, @generic={0x5, 0x7, 0x6, 0x6, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0xc6, 0xcd, &(0x7f00000003c0)=""/205, 0x40f00, 0x14, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x3f, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r1, r2, r2, r0, r2, r2, r1]}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x2], 0x1, 0x40000, 0x0, <r4=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r2, r3, 0x0, r4}, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'geneve1\x00', @multicast}) (async)
r6 = socket$netlink(0x10, 0x3, 0x13)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x3], 0x1, 0xc00, 0x0, <r8=>0xffffffffffffffff})
ioctl$VFIO_SET_IOMMU(r8, 0x3b66, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x14, r9, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="207c18c1", @ANYRES16=r9, @ANYBLOB="00022cbd7000fcdbdf253e0000000c0099000500000023000000"], 0x20}, 0x1, 0x0, 0x0, 0x240008c1}, 0x80004)
getsockname$netlink(r6, 0x0, &(0x7f0000000000)=0x97)

11:27:33 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x4}}}}}}]}}, 0x0)

11:27:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:33 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000200000000000000250400000008000600c1aa9332e4444a64d76d4b0277b78ff24dfd309bda513ae01dfe9563f8a80ffa60344f9ce5eddbff4691fda34037e5d37793fb775595e5fd17bd2113ce116b4d505c8b4ad49fa5d229a1ace0142b5c2353e36807ddd184f10d", @ANYRES32=0x0, @ANYBLOB="050037000000000005002a0000000000050038000000000008003c004000000008000600", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x80)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000001c0)=<r5=>0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000480)={0x3, <r6=>0x0, 0x10001})
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x2, 0x2}}, 0x2e)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000004c0)={r6, 0x2})
setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000100)={@nfc={0x27, r5, 0x1, 0x1}, {&(0x7f0000000040)=""/67, 0x43}, &(0x7f00000000c0), 0x2}, 0xa0)
socket$netlink(0x10, 0x3, 0x8) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000200000000000000250400000008000600c1aa9332e4444a64d76d4b0277b78ff24dfd309bda513ae01dfe9563f8a80ffa60344f9ce5eddbff4691fda34037e5d37793fb775595e5fd17bd2113ce116b4d505c8b4ad49fa5d229a1ace0142b5c2353e36807ddd184f10d", @ANYRES32=0x0, @ANYBLOB="050037000000000005002a0000000000050038000000000008003c004000000008000600", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000480)={0x3, 0x0, 0x10001}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) (async)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x2, 0x2}}, 0x2e) (async)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000004c0)={r6, 0x2}) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000100)={@nfc={0x27, r5, 0x1, 0x1}, {&(0x7f0000000040)=""/67, 0x43}, &(0x7f00000000c0), 0x2}, 0xa0) (async)

11:27:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async, rerun: 32)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25020000000800020002000000080001000200020000400800010000000000080001000200000008007c1bcd247c92f3bc778d2ed95826c21e65a5752c2e2631d60e8aa13c8ac35048676cfb106da6ff360352f0df55154940457cb81d5398fff9cb5f900af2490c46b92028e713c426c5b165305c5a7d955c5bebebab7e52500b1977c4ac9c399f51b4e574f388368206dcf3576816676016bd8c640d6600"/183], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20010040) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400)

11:27:33 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r2)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84d7, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0x3, 0xa, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0x0, 0xa, 0x8, 0x8}, @generic={0x5, 0x7, 0x6, 0x6, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0xc6, 0xcd, &(0x7f00000003c0)=""/205, 0x40f00, 0x14, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x3f, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r1, r2, r2, r0, r2, r2, r1]}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x2], 0x1, 0x40000, 0x0, <r4=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r2, r3, 0x0, r4}, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'geneve1\x00', @multicast}) (async)
r6 = socket$netlink(0x10, 0x3, 0x13) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x3], 0x1, 0xc00, 0x0, <r8=>0xffffffffffffffff})
ioctl$VFIO_SET_IOMMU(r8, 0x3b66, 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x14, r9, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="207c18c1", @ANYRES16=r9, @ANYBLOB="00022cbd7000fcdbdf253e0000000c0099000500000023000000"], 0x20}, 0x1, 0x0, 0x0, 0x240008c1}, 0x80004) (async)
getsockname$netlink(r6, 0x0, &(0x7f0000000000)=0x97)

11:27:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25020000000800020002000000080001000200020000400800010000000000080001000200000008007c1bcd247c92f3bc778d2ed95826c21e65a5752c2e2631d60e8aa13c8ac35048676cfb106da6ff360352f0df55154940457cb81d5398fff9cb5f900af2490c46b92028e713c426c5b165305c5a7d955c5bebebab7e52500b1977c4ac9c399f51b4e574f388368206dcf3576816676016bd8c640d6600"/183], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20010040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400)

[ 3077.832442][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3077.840337][ T7352] ath9k_htc: Failed to initialize the device
[ 3077.886403][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3078.072647][T10021] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3078.093709][T10021] ath9k_htc: Failed to initialize the device
[ 3078.110573][T22270] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3078.292371][ T3699] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 3078.502579][T22270] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 3078.812932][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3078.833631][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3078.854028][ T3699] usb 6-1: Product: syz
[ 3078.859044][ T3699] usb 6-1: Manufacturer: syz
[ 3078.876457][ T3699] usb 6-1: SerialNumber: syz
[ 3078.933734][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3079.092540][T22270] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3079.110001][T22270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3079.119988][T22270] usb 4-1: Product: syz
[ 3079.126871][T22270] usb 4-1: Manufacturer: syz
[ 3079.131590][T22270] usb 4-1: SerialNumber: syz
[ 3079.173742][T22270] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3079.512796][ T3699] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3079.718478][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3079.737755][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3079.759151][ T1043] usb 6-1: USB disconnect, device number 22
[ 3079.805182][T22270] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3080.017960][ T8147] usb 4-1: USB disconnect, device number 77
11:27:35 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x5}}}}}}]}}, 0x0)

11:27:35 executing program 0:
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x3, "45f60b"}, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:35 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000200000000000000250400000008000600c1aa9332e4444a64d76d4b0277b78ff24dfd309bda513ae01dfe9563f8a80ffa60344f9ce5eddbff4691fda34037e5d37793fb775595e5fd17bd2113ce116b4d505c8b4ad49fa5d229a1ace0142b5c2353e36807ddd184f10d", @ANYRES32=0x0, @ANYBLOB="050037000000000005002a0000000000050038000000000008003c004000000008000600", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x80) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000001c0)=<r5=>0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000480)={0x3, <r6=>0x0, 0x10001}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) (async, rerun: 64)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x2, 0x2}}, 0x2e) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000004c0)={r6, 0x2})
setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000100)={@nfc={0x27, r5, 0x1, 0x1}, {&(0x7f0000000040)=""/67, 0x43}, &(0x7f00000000c0), 0x2}, 0xa0)

11:27:35 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:27:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc)

11:27:35 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x5}}}}}}]}}, 0x0)

11:27:35 executing program 0:
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x3, "45f60b"}, 0x4) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) (async)

11:27:35 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) (async)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:27:35 executing program 2:
socket$netlink(0x10, 0x3, 0x13)

[ 3080.572681][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3080.580920][ T3699] ath9k_htc: Failed to initialize the device
11:27:35 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (rerun: 32)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) (async)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:27:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) (async)

[ 3080.614666][ T1043] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3080.882486][T22270] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3080.897515][T22270] ath9k_htc: Failed to initialize the device
[ 3080.908407][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3081.022416][ T1043] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 3081.193609][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 3081.200250][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[ 3081.292445][ T8147] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 3081.636577][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3081.651896][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3081.674227][ T1043] usb 6-1: Product: syz
[ 3081.680547][ T1043] usb 6-1: Manufacturer: syz
[ 3081.688768][ T1043] usb 6-1: SerialNumber: syz
[ 3081.743960][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3081.873035][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3081.893728][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3081.921626][ T8147] usb 4-1: Product: syz
[ 3081.940973][ T8147] usb 4-1: Manufacturer: syz
[ 3081.962891][ T8147] usb 4-1: SerialNumber: syz
[ 3082.033325][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3082.392644][ T1043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3082.616709][T13710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3082.638351][T13710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3082.652302][ T3742] usb 6-1: USB disconnect, device number 23
[ 3082.722479][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3082.938687][ T7352] usb 4-1: USB disconnect, device number 78
11:27:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000001c0)=0x2)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000240)={0x8, 0x3, 0x1})
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@in6={0xa, 0x4e24, 0x200, @mcast2, 0x81}, {&(0x7f0000000000)=""/167, 0xa7}, &(0x7f00000000c0), 0x10}, 0xa0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000400)={0xa, &(0x7f0000000380)=[{0x0, 0x40, 0x3, 0x100}, {0x1, 0xf4, 0x8, 0x6}, {0xb56f, 0x5, 0x40, 0x10001}, {0x75d, 0x5c, 0x40, 0x400}, {0x6, 0xf, 0x2, 0x1779}, {0x5, 0xaa}, {0x5, 0x5, 0x81, 0x9}, {0x4, 0x8, 0x20, 0x7}, {0x1000, 0x3f, 0x1, 0x1ff}, {0x0, 0xdd, 0x3, 0x2}]})

11:27:38 executing program 0:
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x3, "45f60b"}, 0x4) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:27:38 executing program 2:
socket$netlink(0x10, 0x3, 0x13)

11:27:38 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x6}}}}}}]}}, 0x0)

11:27:38 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x6}}}}}}]}}, 0x0)

11:27:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x1f, <r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x80000001, r1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r2, r3], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r4, r5], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r3, r5], 0x3})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000001c0)=0x2) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000240)={0x8, 0x3, 0x1}) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@in6={0xa, 0x4e24, 0x200, @mcast2, 0x81}, {&(0x7f0000000000)=""/167, 0xa7}, &(0x7f00000000c0), 0x10}, 0xa0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000400)={0xa, &(0x7f0000000380)=[{0x0, 0x40, 0x3, 0x100}, {0x1, 0xf4, 0x8, 0x6}, {0xb56f, 0x5, 0x40, 0x10001}, {0x75d, 0x5c, 0x40, 0x400}, {0x6, 0xf, 0x2, 0x1779}, {0x5, 0xaa}, {0x5, 0x5, 0x81, 0x9}, {0x4, 0x8, 0x20, 0x7}, {0x1000, 0x3f, 0x1, 0x1ff}, {0x0, 0xdd, 0x3, 0x2}]})

11:27:38 executing program 2:
socket$netlink(0x10, 0x3, 0x13)

11:27:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

[ 3083.439118][ T1043] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
11:27:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async, rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (rerun: 64)

11:27:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x1f, <r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x80000001, r1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r2=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r2, r3], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r4, r5], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r3, r5], 0x3}) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

[ 3083.484359][ T1043] ath9k_htc: Failed to initialize the device
[ 3083.524303][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000001c0)=0x2) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000240)={0x8, 0x3, 0x1}) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@in6={0xa, 0x4e24, 0x200, @mcast2, 0x81}, {&(0x7f0000000000)=""/167, 0xa7}, &(0x7f00000000c0), 0x10}, 0xa0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000400)={0xa, &(0x7f0000000380)=[{0x0, 0x40, 0x3, 0x100}, {0x1, 0xf4, 0x8, 0x6}, {0xb56f, 0x5, 0x40, 0x10001}, {0x75d, 0x5c, 0x40, 0x400}, {0x6, 0xf, 0x2, 0x1779}, {0x5, 0xaa}, {0x5, 0x5, 0x81, 0x9}, {0x4, 0x8, 0x20, 0x7}, {0x1000, 0x3f, 0x1, 0x1ff}, {0x0, 0xdd, 0x3, 0x2}]})

11:27:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x1f, <r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x80000001, r1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r2=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r2, r3], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r4=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r4, r5], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r3, r5], 0x3})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:39 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:27:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80000, 0x5)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast1}, &(0x7f0000000040)=0xc)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000000c0)={{0x4, 0x101}, 0x10}, 0x10)

[ 3083.760502][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3083.771391][ T8147] ath9k_htc: Failed to initialize the device
[ 3083.787695][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3083.924009][ T3742] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 3084.162338][ T7352] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 3084.519837][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3084.533910][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3084.545797][ T3742] usb 6-1: Product: syz
[ 3084.553271][ T3742] usb 6-1: Manufacturer: syz
[ 3084.560016][ T3742] usb 6-1: SerialNumber: syz
[ 3084.604128][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3084.702963][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3084.719387][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3084.729949][ T7352] usb 4-1: Product: syz
[ 3084.735316][ T7352] usb 4-1: Manufacturer: syz
[ 3084.741245][ T7352] usb 4-1: SerialNumber: syz
[ 3084.783220][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3085.242553][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3085.372495][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3085.457620][T13744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3085.477128][T13744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3085.495921][ T1043] usb 6-1: USB disconnect, device number 24
[ 3085.578211][ T8147] usb 4-1: USB disconnect, device number 79
11:27:41 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x7}}}}}}]}}, 0x0)

11:27:41 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7}}}}}}]}}, 0x0)

11:27:41 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$inet(0x2, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x80, 0x4)

11:27:41 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:27:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x80000, 0x5)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast1}, &(0x7f0000000040)=0xc)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000000c0)={{0x4, 0x101}, 0x10}, 0x10)

11:27:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0xc) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:27:41 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:27:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

[ 3086.312510][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3086.321374][ T3742] ath9k_htc: Failed to initialize the device
11:27:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc)
syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x440000)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x4, r2}, 0x10)
connect$netlink(r3, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2)
socketpair(0x26, 0x80000, 0x2, &(0x7f0000000080))

[ 3086.364845][ T1043] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x1)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x482240, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100))
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8280, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1})

[ 3086.472497][ T7352] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3086.495212][ T7352] ath9k_htc: Failed to initialize the device
[ 3086.536000][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
11:27:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc)
syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x440000)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x4, r2}, 0x10)
connect$netlink(r3, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2)
socketpair(0x26, 0x80000, 0x2, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) (async)
syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x440000) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x4, r2}, 0x10) (async)
connect$netlink(r3, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) (async)
socketpair(0x26, 0x80000, 0x2, &(0x7f0000000080)) (async)

[ 3086.742524][ T1043] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 3086.952674][ T8147] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 3087.312644][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3087.335580][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3087.352061][ T1043] usb 6-1: Product: syz
[ 3087.365849][ T1043] usb 6-1: Manufacturer: syz
[ 3087.376849][ T1043] usb 6-1: SerialNumber: syz
[ 3087.443301][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3087.543095][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3087.557806][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3087.568769][ T8147] usb 4-1: Product: syz
[ 3087.576576][ T8147] usb 4-1: Manufacturer: syz
[ 3087.588538][ T8147] usb 4-1: SerialNumber: syz
[ 3087.644382][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3088.062558][ T1043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3088.262526][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3088.294916][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3088.322894][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3088.340798][ T3742] usb 6-1: USB disconnect, device number 25
[ 3088.479060][T11233] usb 4-1: USB disconnect, device number 80
11:27:44 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x18}}}}}}]}}, 0x0)

11:27:44 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x9}}}}}}]}}, 0x0)

11:27:44 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$inet(0x2, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x80, 0x4)

11:27:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x80000, 0x5)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast1}, &(0x7f0000000040)=0xc) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000000c0)={{0x4, 0x101}, 0x10}, 0x10)

11:27:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x1)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x482240, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100))
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8280, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1})
socket$netlink(0x10, 0x3, 0x1) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x482240, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8280, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) (async)

11:27:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) (async)
syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x440000)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) (async)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x4, r2}, 0x10) (async)
connect$netlink(r3, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) (async, rerun: 32)
socketpair(0x26, 0x80000, 0x2, &(0x7f0000000080)) (rerun: 32)

[ 3089.115261][ T1043] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3089.145424][ T1043] ath9k_htc: Failed to initialize the device
11:27:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x1)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x482240, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100))
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8280, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1})

[ 3089.195684][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="002501000000fedbdf25040000000508380000000000"], 0x1c}}, 0x4000004)

[ 3089.352687][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3089.378463][ T8147] ath9k_htc: Failed to initialize the device
11:27:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="002501000000fedbdf25040000000508380000000000"], 0x1c}}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="002501000000fedbdf25040000000508380000000000"], 0x1c}}, 0x4000004) (async)

[ 3089.415562][T11233] usb 4-1: ath9k_htc: USB layer deinitialized
11:27:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)

11:27:44 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$inet(0x2, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x80, 0x4)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$inet(0x2, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x80, 0x4) (async)

11:27:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="002501000000fedbdf25040000000508380000000000"], 0x1c}}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="002501000000fedbdf25040000000508380000000000"], 0x1c}}, 0x4000004) (async)

[ 3089.612355][ T3742] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 3089.844008][T11233] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 3090.202664][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3090.226498][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3090.252724][ T3742] usb 6-1: Product: syz
[ 3090.264080][ T3742] usb 6-1: Manufacturer: syz
[ 3090.274002][ T3742] usb 6-1: SerialNumber: syz
[ 3090.329425][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3090.481244][T11233] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3090.500824][T11233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3090.511591][T11233] usb 4-1: Product: syz
[ 3090.524699][T11233] usb 4-1: Manufacturer: syz
[ 3090.530389][T11233] usb 4-1: SerialNumber: syz
[ 3090.583385][T11233] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3090.952729][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3091.183466][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3091.194071][T11233] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3091.211092][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3091.231151][T10021] usb 6-1: USB disconnect, device number 26
[ 3091.398498][ T8147] usb 4-1: USB disconnect, device number 81
11:27:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)

11:27:47 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xa}}}}}}]}}, 0x0)

11:27:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}], 0x2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x1, 0x78a, 0x6}, 0x10)

11:27:47 executing program 2:
socket$netlink(0x10, 0x3, 0x1)

11:27:47 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x3e}}}}}}]}}, 0x0)

11:27:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) (async)

11:27:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0x4)

11:27:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}], 0x2) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x1, 0x78a, 0x6}, 0x10)

[ 3092.003070][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3092.011780][ T3742] ath9k_htc: Failed to initialize the device
[ 3092.048002][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0x4)

11:27:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}], 0x2) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x1, 0x78a, 0x6}, 0x10)

11:27:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3092.238716][T11233] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3092.253912][T11233] ath9k_htc: Failed to initialize the device
[ 3092.278643][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3092.423363][T10021] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 3092.712782][ T8147] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 3092.953347][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3092.973168][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3092.995020][T10021] usb 6-1: Product: syz
[ 3093.000171][T10021] usb 6-1: Manufacturer: syz
[ 3093.022360][T10021] usb 6-1: SerialNumber: syz
[ 3093.063177][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3093.273083][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3093.290598][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3093.302982][ T8147] usb 4-1: Product: syz
[ 3093.308152][ T8147] usb 4-1: Manufacturer: syz
[ 3093.322526][ T8147] usb 4-1: SerialNumber: syz
[ 3093.373328][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3093.642604][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3093.859467][T13888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3093.872635][T13888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3093.884304][T11233] usb 6-1: USB disconnect, device number 27
[ 3094.042360][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3094.251511][ T3742] usb 4-1: USB disconnect, device number 82
[ 3094.712550][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3094.720751][T10021] ath9k_htc: Failed to initialize the device
[ 3094.730210][T11233] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:50 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xf}}}}}}]}}, 0x0)

11:27:50 executing program 2:
socket$netlink(0x10, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x1) (async)

11:27:50 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0x4)

11:27:50 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x561000, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x80000000, 0x6, 0x1, 0xe0, 0x6, 0xe04], 0x6, 0x800, 0x0, <r3=>0xffffffffffffffff})
recvmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@x25={0x9, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/72, 0x48}], 0x8}, 0x2000)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0xfffffffffffffd32)

11:27:50 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x48}}}}}}]}}, 0x0)

11:27:50 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x10001, 0x3ff, 0x7e1], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x7, 0x4)

11:27:50 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x561000, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x80000000, 0x6, 0x1, 0xe0, 0x6, 0xe04], 0x6, 0x800, 0x0, <r3=>0xffffffffffffffff})
recvmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@x25={0x9, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/72, 0x48}], 0x8}, 0x2000) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0xfffffffffffffd32)

11:27:50 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:27:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x10001, 0x3ff, 0x7e1], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x7, 0x4)

11:27:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x10001, 0x3ff, 0x7e1], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x7, 0x4)

[ 3095.112371][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3095.127699][ T8147] ath9k_htc: Failed to initialize the device
[ 3095.166832][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3095.232417][T11233] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 3095.542493][ T3742] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 3095.823222][T11233] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3095.844068][T11233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3095.863340][T11233] usb 6-1: Product: syz
[ 3095.868652][T11233] usb 6-1: Manufacturer: syz
[ 3095.885178][T11233] usb 6-1: SerialNumber: syz
[ 3095.953502][T11233] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3096.162736][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3096.186165][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3096.207000][ T3742] usb 4-1: Product: syz
[ 3096.216703][ T3742] usb 4-1: Manufacturer: syz
[ 3096.223798][ T3742] usb 4-1: SerialNumber: syz
[ 3096.273229][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3096.612517][T11233] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3096.831031][T13924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3096.846576][T13924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3096.860447][ T1043] usb 6-1: USB disconnect, device number 28
[ 3096.922504][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3097.140558][T28889] usb 4-1: USB disconnect, device number 83
11:27:52 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x18}}}}}}]}}, 0x0)

11:27:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:52 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x561000, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x80000000, 0x6, 0x1, 0xe0, 0x6, 0xe04], 0x6, 0x800, 0x0, <r3=>0xffffffffffffffff})
recvmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@x25={0x9, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/72, 0x48}], 0x8}, 0x2000) (async, rerun: 32)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async, rerun: 64)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080), 0x4) (async, rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0xfffffffffffffd32)

11:27:52 executing program 2:
socket$netlink(0x10, 0x3, 0x1)

11:27:52 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x8000, 0x200, 0x1}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)

11:27:52 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x4c}}}}}}]}}, 0x0)

11:27:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3097.682996][T11233] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3097.690599][T11233] ath9k_htc: Failed to initialize the device
11:27:53 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x8000, 0x200, 0x1}, 0x10) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)

[ 3097.744311][ T1043] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:53 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1e, 0x800, 0x5, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0x1d)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02064c3, &(0x7f00000000c0)={&(0x7f0000000080)=[r4, 0x0], 0x80000, 0x2, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xffffffffffffff6d)

11:27:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:53 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x8000, 0x200, 0x1}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x8000, 0x200, 0x1}, 0x10) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)

11:27:53 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x4, 0x8, 0x200, 'syz1\x00', 0x7fff})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
socket$netlink(0x10, 0x3, 0xf)

[ 3098.001951][ T3742] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3098.011421][ T3742] ath9k_htc: Failed to initialize the device
[ 3098.020646][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3098.152672][ T1043] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 3098.403584][T28889] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 3098.732730][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3098.757677][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3098.770669][ T1043] usb 6-1: Product: syz
[ 3098.784639][ T1043] usb 6-1: Manufacturer: syz
[ 3098.789634][ T1043] usb 6-1: SerialNumber: syz
[ 3098.843468][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3098.972493][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3098.992797][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3099.014478][T28889] usb 4-1: Product: syz
[ 3099.020187][T28889] usb 4-1: Manufacturer: syz
[ 3099.035410][T28889] usb 4-1: SerialNumber: syz
[ 3099.113361][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3099.492461][ T1043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3099.698438][T13960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3099.711141][T13960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3099.721933][ T8147] usb 6-1: USB disconnect, device number 29
[ 3099.752473][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3099.959696][ T3742] usb 4-1: USB disconnect, device number 84
11:27:55 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x4, 0x8, 0x200, 'syz1\x00', 0x7fff})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
socket$netlink(0x10, 0x3, 0xf)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x4, 0x8, 0x200, 'syz1\x00', 0x7fff}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$netlink(0x10, 0x3, 0xf) (async)

11:27:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x80000001, 0x5, 0xfffffff7], 0x4, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0))
r2 = socket$netlink(0x10, 0x3, 0x6da76fa060c7c43f)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:27:55 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1e, 0x800, 0x5, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$netlink(0x10, 0x3, 0x1d)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02064c3, &(0x7f00000000c0)={&(0x7f0000000080)=[r4, 0x0], 0x80000, 0x2, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xffffffffffffff6d)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair(0x1e, 0x800, 0x5, &(0x7f0000000000)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$netlink(0x10, 0x3, 0x1d) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000100), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02064c3, &(0x7f00000000c0)={&(0x7f0000000080)=[r4, 0x0], 0x80000, 0x2, 0x5}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x12) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xffffffffffffff6d) (async)

11:27:55 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x60}}}}}}]}}, 0x0)

11:27:55 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r2, 0x4, r3}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:55 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x1d}}}}}}]}}, 0x0)

11:27:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async, rerun: 32)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x80000001, 0x5, 0xfffffff7], 0x4, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x6da76fa060c7c43f) (rerun: 64)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) (async)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

[ 3100.552281][ T1043] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3100.561316][ T1043] ath9k_htc: Failed to initialize the device
11:27:55 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r2, 0x4, r3}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r2, 0x4, r3}, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:27:55 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1e, 0x800, 0x5, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$netlink(0x10, 0x3, 0x1d) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02064c3, &(0x7f00000000c0)={&(0x7f0000000080)=[r4, 0x0], 0x80000, 0x2, 0x5})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xffffffffffffff6d)

11:27:55 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x4, 0x8, 0x200, 'syz1\x00', 0x7fff})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
socket$netlink(0x10, 0x3, 0xf)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x4, 0x8, 0x200, 'syz1\x00', 0x7fff}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$netlink(0x10, 0x3, 0xf) (async)

[ 3100.624834][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x80000001, 0x5, 0xfffffff7], 0x4, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0))
r2 = socket$netlink(0x10, 0x3, 0x6da76fa060c7c43f)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0) (async)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x80000001, 0x5, 0xfffffff7], 0x4, 0x80000}) (async)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)) (async)
socket$netlink(0x10, 0x3, 0x6da76fa060c7c43f) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) (async)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:27:56 executing program 2:
socket$netlink(0x10, 0x3, 0x14)

[ 3100.802607][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
11:27:56 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r2, 0x4, r3}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3100.843815][T28889] ath9k_htc: Failed to initialize the device
[ 3100.887339][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
11:27:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))

11:27:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6b16, 0x900)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3101.042616][ T8147] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 3101.282443][ T3742] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 3101.642769][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3101.654770][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3101.669662][ T8147] usb 6-1: Product: syz
[ 3101.674852][ T8147] usb 6-1: Manufacturer: syz
[ 3101.680526][ T8147] usb 6-1: SerialNumber: syz
[ 3101.733733][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3101.903711][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3101.919404][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3101.930256][ T3742] usb 4-1: Product: syz
[ 3101.936782][ T3742] usb 4-1: Manufacturer: syz
[ 3101.945187][ T3742] usb 4-1: SerialNumber: syz
[ 3102.003648][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3102.412452][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3102.619216][T13988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3102.632655][T13988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3102.644939][T28889] usb 6-1: USB disconnect, device number 30
[ 3102.712685][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3102.916545][T10021] usb 4-1: USB disconnect, device number 85
11:27:58 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x68}}}}}}]}}, 0x0)

11:27:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'veth0_macvtap\x00', 0x10000})

11:27:58 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x3e}}}}}}]}}, 0x0)

11:27:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6b16, 0x900)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:27:58 executing program 2:
socket$netlink(0x10, 0x3, 0x14)

11:27:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x5) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))

11:27:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'veth0_macvtap\x00', 0x10000})

[ 3103.432386][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3103.440367][ T8147] ath9k_htc: Failed to initialize the device
11:27:58 executing program 2:
socket$netlink(0x10, 0x3, 0x14)

11:27:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'veth0_macvtap\x00', 0x10000})
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'veth0_macvtap\x00', 0x10000}) (async)

11:27:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6b16, 0x900)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3103.507685][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
11:27:58 executing program 2:
socket$netlink(0x10, 0x3, 0xc)

11:27:58 executing program 4:
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3103.752573][ T3742] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3103.768303][ T3742] ath9k_htc: Failed to initialize the device
[ 3103.791465][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3103.922787][T28889] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 3104.162108][T10021] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 3104.529232][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3104.540737][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3104.563392][T28889] usb 6-1: Product: syz
[ 3104.568147][T28889] usb 6-1: Manufacturer: syz
[ 3104.582410][T28889] usb 6-1: SerialNumber: syz
[ 3104.643726][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3104.702780][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3104.729034][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3104.741743][T10021] usb 4-1: Product: syz
[ 3104.751522][T10021] usb 4-1: Manufacturer: syz
[ 3104.759781][T10021] usb 4-1: SerialNumber: syz
[ 3104.813495][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3105.292403][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3105.392502][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3105.493419][T14040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3105.503696][T14040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3105.514137][ T7352] usb 6-1: USB disconnect, device number 31
[ 3105.597918][ T3699] usb 4-1: USB disconnect, device number 86
11:28:01 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x6c}}}}}}]}}, 0x0)

11:28:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$damon_contexts(0xffffffffffffffff, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x12040)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r2 = socket$inet(0x2, 0x8, 0x5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))

11:28:01 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x48}}}}}}]}}, 0x0)

11:28:01 executing program 2:
socket$netlink(0x10, 0x3, 0xc)

11:28:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x5) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)) (async)

11:28:01 executing program 4:
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:28:01 executing program 4:
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:28:01 executing program 2:
socket$netlink(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc) (async)

11:28:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@hci={0x1f, 0xffffffffffffffff, 0x2}, {&(0x7f0000000080)=""/46, 0x2e}, &(0x7f00000000c0), 0x8}, 0xa0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)

[ 3106.312526][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3106.325932][T28889] ath9k_htc: Failed to initialize the device
[ 3106.358200][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:01 executing program 2:
socket$netlink(0x10, 0x3, 0x12)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xffffffff, 0x4)

11:28:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@hci={0x1f, 0xffffffffffffffff, 0x2}, {&(0x7f0000000080)=""/46, 0x2e}, &(0x7f00000000c0), 0x8}, 0xa0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)

11:28:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$damon_contexts(0xffffffffffffffff, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x12040)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
r2 = socket$inet(0x2, 0x8, 0x5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))

[ 3106.482450][T10021] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3106.491344][T10021] ath9k_htc: Failed to initialize the device
[ 3106.565214][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3106.762393][ T7352] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 3106.943056][ T3699] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 3107.302489][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3107.313412][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3107.323244][ T7352] usb 6-1: Product: syz
[ 3107.329464][ T7352] usb 6-1: Manufacturer: syz
[ 3107.334605][ T7352] usb 6-1: SerialNumber: syz
[ 3107.373221][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3107.482578][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3107.495666][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3107.505692][ T3699] usb 4-1: Product: syz
[ 3107.511201][ T3699] usb 4-1: Manufacturer: syz
[ 3107.518262][ T3699] usb 4-1: SerialNumber: syz
[ 3107.562986][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3107.952543][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3108.132800][ T3699] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3108.168028][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3108.187119][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3108.203428][T28889] usb 6-1: USB disconnect, device number 32
[ 3108.338956][ T8147] usb 4-1: USB disconnect, device number 87
11:28:04 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x74}}}}}}]}}, 0x0)

11:28:04 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@generic={0x25, "53c5d5b9bc7d18631e8a9121a79a41326be66bb64c23830c9c250a5cb8bbb891023ccc50e5ce9871a1c4dc996f1010e56f519f84ec4015d3c06534d59812e71faf781b312409fb4da19248138e5cedf66fb484e48c0709843b5e4c6c39ddd00e8612641e8f7a6025d53d15979936e134591db6e89e514ec5b73ab0a32695"}, {&(0x7f0000000040)=""/245, 0xf5}, &(0x7f0000000140), 0x68}, 0xa0)

11:28:04 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x4c}}}}}}]}}, 0x0)

11:28:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@hci={0x1f, 0xffffffffffffffff, 0x2}, {&(0x7f0000000080)=""/46, 0x2e}, &(0x7f00000000c0), 0x8}, 0xa0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)

11:28:04 executing program 2:
socket$netlink(0x10, 0x3, 0x12)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xffffffff, 0x4)

11:28:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$damon_contexts(0xffffffffffffffff, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x12040)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r2 = socket$inet(0x2, 0x8, 0x5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
write$damon_contexts(0xffffffffffffffff, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x12040) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socket$inet(0x2, 0x8, 0x5) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) (async)

11:28:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000840)=""/4096, &(0x7f0000000100)=0x1000)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4)
getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000000)=""/178, &(0x7f00000000c0)=0xb2)

11:28:04 executing program 2:
socket$netlink(0x10, 0x3, 0x12)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xffffffff, 0x4)

11:28:04 executing program 1:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x5, 0x4, 0xfff, 0xffffffff, 'syz0\x00', 0x419})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

[ 3109.012306][T22270] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 3109.032342][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3109.043412][ T7352] ath9k_htc: Failed to initialize the device
[ 3109.118059][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000840)=""/4096, &(0x7f0000000100)=0x1000) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) (async)
getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000000)=""/178, &(0x7f00000000c0)=0xb2)

11:28:04 executing program 2:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], <r0=>0x0, 0x8, &(0x7f0000001200)=[{}, {}], 0x10, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x12, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000060000000000000002000000a489180008000000850000006800000085100000ffffffff18000000031800000000000005000000180000000200000000000000d19e0000184a00000400000000000000000000000000000000000000bc78fe24b2b061dabd7e46c167df6741f4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x3, 0x4, 0x81}, 0x10, r0}, 0x80)

[ 3109.192471][ T3699] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3109.200184][ T3699] ath9k_htc: Failed to initialize the device
11:28:04 executing program 1:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x5, 0x4, 0xfff, 0xffffffff, 'syz0\x00', 0x419})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x5, 0x4, 0xfff, 0xffffffff, 'syz0\x00', 0x419}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3109.267382][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3109.492801][T28889] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 3109.592807][T22270] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3109.622337][T22270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3109.632129][T22270] usb 1-1: Product: syz
[ 3109.638231][T22270] usb 1-1: Manufacturer: syz
[ 3109.645949][T22270] usb 1-1: SerialNumber: syz
[ 3109.682360][ T8147] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 3109.703307][T22270] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3110.092662][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3110.124034][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3110.153078][T28889] usb 6-1: Product: syz
[ 3110.160197][T28889] usb 6-1: Manufacturer: syz
[ 3110.169033][T28889] usb 6-1: SerialNumber: syz
[ 3110.223392][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3110.266473][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3110.291385][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3110.312545][ T8147] usb 4-1: Product: syz
[ 3110.332919][ T8147] usb 4-1: Manufacturer: syz
[ 3110.340534][ T8147] usb 4-1: SerialNumber: syz
[ 3110.366693][T22270] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3110.393415][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3110.598760][ T1043] usb 1-1: USB disconnect, device number 59
[ 3110.962935][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3111.022424][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3111.174252][T14109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3111.185920][T14109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3111.197229][ T3699] usb 6-1: USB disconnect, device number 33
[ 3111.228112][ T3742] usb 4-1: USB disconnect, device number 88
[ 3111.443321][T22270] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3111.463729][T22270] ath9k_htc: Failed to initialize the device
[ 3111.471830][ T1043] usb 1-1: ath9k_htc: USB layer deinitialized
11:28:07 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x7a}}}}}}]}}, 0x0)

11:28:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 32)
getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000840)=""/4096, &(0x7f0000000100)=0x1000)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) (async)
getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000000)=""/178, &(0x7f00000000c0)=0xb2)

11:28:07 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x68}}}}}}]}}, 0x0)

11:28:07 executing program 2:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], <r0=>0x0, 0x8, &(0x7f0000001200)=[{}, {}], 0x10, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x12, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000060000000000000002000000a489180008000000850000006800000085100000ffffffff18000000031800000000000005000000180000000200000000000000d19e0000184a00000400000000000000000000000000000000000000bc78fe24b2b061dabd7e46c167df6741f4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x3, 0x4, 0x81}, 0x10, r0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001200)=[{}, {}], 0x10, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x12, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000060000000000000002000000a489180008000000850000006800000085100000ffffffff18000000031800000000000005000000180000000200000000000000d19e0000184a00000400000000000000000000000000000000000000bc78fe24b2b061dabd7e46c167df6741f4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x3, 0x4, 0x81}, 0x10, r0}, 0x80) (async)

11:28:07 executing program 1:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x5, 0x4, 0xfff, 0xffffffff, 'syz0\x00', 0x419}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)

11:28:07 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@generic={0x25, "53c5d5b9bc7d18631e8a9121a79a41326be66bb64c23830c9c250a5cb8bbb891023ccc50e5ce9871a1c4dc996f1010e56f519f84ec4015d3c06534d59812e71faf781b312409fb4da19248138e5cedf66fb484e48c0709843b5e4c6c39ddd00e8612641e8f7a6025d53d15979936e134591db6e89e514ec5b73ab0a32695"}, {&(0x7f0000000040)=""/245, 0xf5}, &(0x7f0000000140), 0x68}, 0xa0)

11:28:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0xe2d})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x50d1})

11:28:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

11:28:07 executing program 2:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], <r0=>0x0, 0x8, &(0x7f0000001200)=[{}, {}], 0x10, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x12, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000060000000000000002000000a489180008000000850000006800000085100000ffffffff18000000031800000000000005000000180000000200000000000000d19e0000184a00000400000000000000000000000000000000000000bc78fe24b2b061dabd7e46c167df6741f4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x3, 0x4, 0x81}, 0x10, r0}, 0x80)

11:28:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0xe2d}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x50d1})

11:28:07 executing program 2:
socket$netlink(0x10, 0x3, 0xe)

11:28:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0xe2d}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x50d1})

[ 3112.003589][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3112.019764][T28889] ath9k_htc: Failed to initialize the device
[ 3112.062461][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3112.074552][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3112.083331][ T1043] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 3112.097530][ T8147] ath9k_htc: Failed to initialize the device
[ 3112.111862][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3112.442302][ T3699] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 3112.522431][ T3742] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 3112.690279][ T1043] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3112.701245][ T1043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3112.720156][ T1043] usb 1-1: Product: syz
[ 3112.727259][ T1043] usb 1-1: Manufacturer: syz
[ 3112.740077][ T1043] usb 1-1: SerialNumber: syz
[ 3112.784090][ T1043] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3112.962741][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3112.982617][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3113.002397][ T3699] usb 6-1: Product: syz
[ 3113.008107][ T3699] usb 6-1: Manufacturer: syz
[ 3113.033256][ T3699] usb 6-1: SerialNumber: syz
[ 3113.092664][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3113.093059][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3113.111172][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3113.139459][ T3742] usb 4-1: Product: syz
[ 3113.145436][ T3742] usb 4-1: Manufacturer: syz
[ 3113.150749][ T3742] usb 4-1: SerialNumber: syz
[ 3113.233315][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3113.463164][ T1043] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3113.676823][T28889] usb 1-1: USB disconnect, device number 60
[ 3113.712607][ T3699] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3113.882494][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3113.918019][T14148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3113.939513][T14148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3113.954357][T10021] usb 6-1: USB disconnect, device number 34
[ 3114.100492][ T8129] usb 4-1: USB disconnect, device number 89
11:28:09 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x2}}}}}}]}}, 0x0)

11:28:09 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x800, 0x0, <r1=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x7)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8)
socketpair(0x25, 0xf, 0x1ff, &(0x7f0000000100))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0xffffffffffffff25)

[ 3114.562472][ T1043] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3114.574287][ T1043] ath9k_htc: Failed to initialize the device
[ 3114.589809][T28889] usb 1-1: ath9k_htc: USB layer deinitialized
11:28:09 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x6c}}}}}}]}}, 0x0)

11:28:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

11:28:09 executing program 2:
socket$netlink(0x10, 0x3, 0xe)

11:28:09 executing program 0:
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@generic={0x25, "53c5d5b9bc7d18631e8a9121a79a41326be66bb64c23830c9c250a5cb8bbb891023ccc50e5ce9871a1c4dc996f1010e56f519f84ec4015d3c06534d59812e71faf781b312409fb4da19248138e5cedf66fb484e48c0709843b5e4c6c39ddd00e8612641e8f7a6025d53d15979936e134591db6e89e514ec5b73ab0a32695"}, {&(0x7f0000000040)=""/245, 0xf5}, &(0x7f0000000140), 0x68}, 0xa0)

11:28:09 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x800, 0x0, <r1=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x7)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8)
socketpair(0x25, 0xf, 0x1ff, &(0x7f0000000100))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0xffffffffffffff25)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x800}) (async)
socket$netlink(0x10, 0x3, 0x7) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (async)
socketpair(0x25, 0xf, 0x1ff, &(0x7f0000000100)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0xffffffffffffff25) (async)

11:28:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

11:28:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
set_tid_address(&(0x7f0000000040))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x4, 0x2, 0x1, 0x3}}, 0x2e)

11:28:10 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x800, 0x0, <r1=>0xffffffffffffffff}) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x7) (async, rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8)
socketpair(0x25, 0xf, 0x1ff, &(0x7f0000000100)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0xffffffffffffff25)

[ 3114.792353][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3114.807835][ T3699] ath9k_htc: Failed to initialize the device
[ 3114.855258][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
set_tid_address(&(0x7f0000000040)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x4, 0x2, 0x1, 0x3}}, 0x2e)

11:28:10 executing program 2:
socket$netlink(0x10, 0x3, 0xe)

[ 3114.963414][ T3742] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3114.986130][ T3742] ath9k_htc: Failed to initialize the device
[ 3115.015685][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3115.142335][T28889] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 3115.243012][T10021] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 3115.385170][ T8129] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 3115.712860][T28889] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3115.746576][T28889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3115.776654][T28889] usb 1-1: Product: syz
[ 3115.782615][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3115.791059][T28889] usb 1-1: Manufacturer: syz
[ 3115.801041][T28889] usb 1-1: SerialNumber: syz
[ 3115.811547][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3115.829501][T10021] usb 6-1: Product: syz
[ 3115.839741][T10021] usb 6-1: Manufacturer: syz
[ 3115.853980][T28889] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3115.856858][T10021] usb 6-1: SerialNumber: syz
[ 3115.923965][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3115.992644][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3116.003941][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3116.014072][ T8129] usb 4-1: Product: syz
[ 3116.018697][ T8129] usb 4-1: Manufacturer: syz
[ 3116.025550][ T8129] usb 4-1: SerialNumber: syz
[ 3116.073946][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3116.502437][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3116.523795][ T1043] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3116.703190][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3116.721566][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3116.731656][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3116.743777][ T3699] usb 1-1: USB disconnect, device number 61
[ 3116.758482][ T7352] usb 6-1: USB disconnect, device number 35
[ 3116.925227][T28889] usb 4-1: USB disconnect, device number 90
11:28:12 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x3}}}}}}]}}, 0x0)

11:28:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
set_tid_address(&(0x7f0000000040)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x4, 0x2, 0x1, 0x3}}, 0x2e)

11:28:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4)

11:28:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x15)

11:28:12 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x74}}}}}}]}}, 0x0)

11:28:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x12)

11:28:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x12)

11:28:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x15)

11:28:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4)

[ 3117.592696][ T1043] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 3117.597750][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3117.601375][ T1043] ath9k_htc: Failed to initialize the device
[ 3117.631981][T10021] ath9k_htc: Failed to initialize the device
11:28:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x12)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x12) (async)

[ 3117.644841][ T3699] usb 1-1: ath9k_htc: USB layer deinitialized
[ 3117.685348][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3117.755264][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3117.770728][ T8129] ath9k_htc: Failed to initialize the device
[ 3117.789086][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3118.052304][ T7352] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 3118.172373][T28889] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 3118.582681][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3118.598072][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3118.608293][ T7352] usb 6-1: Product: syz
[ 3118.615124][ T7352] usb 6-1: Manufacturer: syz
[ 3118.620826][ T7352] usb 6-1: SerialNumber: syz
[ 3118.663414][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3118.732841][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3118.754387][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3118.770629][T28889] usb 4-1: Product: syz
[ 3118.780049][T28889] usb 4-1: Manufacturer: syz
[ 3118.791311][T28889] usb 4-1: SerialNumber: syz
[ 3118.843554][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3119.242407][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3119.447902][T14229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3119.467545][T14229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3119.479053][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3119.507252][ T3742] usb 6-1: USB disconnect, device number 36
[ 3119.682728][ T8129] usb 4-1: USB disconnect, device number 91
11:28:15 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x4}}}}}}]}}, 0x0)

11:28:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) (async)

11:28:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x15)

11:28:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)

11:28:15 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x40, 0xaf, 0x1f663707, 0x10000c8d}, 0x10)

11:28:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async)

11:28:15 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$inet(0x2, 0xf, 0x2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000180)={0xea31, 0x8, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)

11:28:15 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7a}}}}}}]}}, 0x0)

11:28:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={<r2=>0x0, @empty, @private}, &(0x7f0000000340)=0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000100)={0x2, "bad9"}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x1, 0x5, 0x401, 0x38, 0xffffffffffffffff, 0xfe, '\x00', r2, r5, 0x1, 0x1, 0x3}, 0x48)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x514, 0x40, &(0x7f00000000c0)=""/64, 0x41100, 0x10, '\x00', 0x0, 0x4, r1, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x7fff, 0xa860}, 0x10, 0x0, r4, 0x0, &(0x7f0000000240)=[0x1, r6]}, 0x80)

11:28:15 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x40, 0xaf, 0x1f663707, 0x10000c8d}, 0x10)

11:28:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={<r2=>0x0, @empty, @private}, &(0x7f0000000340)=0xc) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000100)={0x2, "bad9"}, 0x3) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x1, 0x5, 0x401, 0x38, 0xffffffffffffffff, 0xfe, '\x00', r2, r5, 0x1, 0x1, 0x3}, 0x48)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x514, 0x40, &(0x7f00000000c0)=""/64, 0x41100, 0x10, '\x00', 0x0, 0x4, r1, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x7fff, 0xa860}, 0x10, 0x0, r4, 0x0, &(0x7f0000000240)=[0x1, r6]}, 0x80)

[ 3120.312322][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3120.320491][ T7352] ath9k_htc: Failed to initialize the device
[ 3120.360375][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3120.552486][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3120.561093][T28889] ath9k_htc: Failed to initialize the device
[ 3120.580675][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3120.742690][ T3742] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 3120.952819][ T8129] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 3121.292582][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3121.311343][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3121.321104][ T3742] usb 6-1: Product: syz
[ 3121.327287][ T3742] usb 6-1: Manufacturer: syz
[ 3121.332942][ T3742] usb 6-1: SerialNumber: syz
[ 3121.376194][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3121.522868][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3121.542618][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3121.558426][ T8129] usb 4-1: Product: syz
[ 3121.568840][ T8129] usb 4-1: Manufacturer: syz
[ 3121.585169][ T8129] usb 4-1: SerialNumber: syz
[ 3121.643600][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3122.052586][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3122.270392][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3122.287467][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3122.300421][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3122.316279][T28889] usb 6-1: USB disconnect, device number 37
[ 3122.502974][ T8147] usb 4-1: USB disconnect, device number 92
11:28:18 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x5}}}}}}]}}, 0x0)

11:28:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async)

11:28:18 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$inet(0x2, 0xf, 0x2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000180)={0xea31, 0x8, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) (async)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$inet(0x2, 0xf, 0x2) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x1, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000180)={0xea31, 0x8, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async)

11:28:18 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x40, 0xaf, 0x1f663707, 0x10000c8d}, 0x10)

11:28:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={<r2=>0x0, @empty, @private}, &(0x7f0000000340)=0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000100)={0x2, "bad9"}, 0x3) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async, rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x1, 0x5, 0x401, 0x38, 0xffffffffffffffff, 0xfe, '\x00', r2, r5, 0x1, 0x1, 0x3}, 0x48) (async, rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x514, 0x40, &(0x7f00000000c0)=""/64, 0x41100, 0x10, '\x00', 0x0, 0x4, r1, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x7fff, 0xa860}, 0x10, 0x0, r4, 0x0, &(0x7f0000000240)=[0x1, r6]}, 0x80)

11:28:18 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x5, 0x2, 0x1ff, 0x96, 0x309a, 0x47501ffd], 0x7, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x4f8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x10000, 0x6, 0x1})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x20, '\x00', '\x00', '\x00', 0x2, 0x800, 0xcb7, 0x8000, "73032ae77a412c3a81f3c7998e80c758"})

11:28:18 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$inet(0x2, 0xf, 0x2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000180)={0xea31, 0x8, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) (async)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$inet(0x2, 0xf, 0x2) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x1, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000180)={0xea31, 0x8, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async)

11:28:18 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

11:28:18 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x11)

11:28:18 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x5, 0x2, 0x1ff, 0x96, 0x309a, 0x47501ffd], 0x7, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x4f8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x5, 0x2, 0x1ff, 0x96, 0x309a, 0x47501ffd], 0x7}) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x4f8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)

11:28:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x10000, 0x6, 0x1})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x20, '\x00', '\x00', '\x00', 0x2, 0x800, 0xcb7, 0x8000, "73032ae77a412c3a81f3c7998e80c758"})
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x10000, 0x6, 0x1}) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) (async)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x20, '\x00', '\x00', '\x00', 0x2, 0x800, 0xcb7, 0x8000, "73032ae77a412c3a81f3c7998e80c758"}) (async)

[ 3123.112433][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3123.125453][ T3742] ath9k_htc: Failed to initialize the device
[ 3123.159742][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3123.352281][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3123.366276][ T8129] ath9k_htc: Failed to initialize the device
[ 3123.381823][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3123.552556][T28889] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 3123.763136][ T8147] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 3124.082636][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3124.102780][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3124.114022][T28889] usb 6-1: Product: syz
[ 3124.120191][T28889] usb 6-1: Manufacturer: syz
[ 3124.134524][T28889] usb 6-1: SerialNumber: syz
[ 3124.203229][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3124.323165][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3124.338620][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3124.356600][ T8147] usb 4-1: Product: syz
[ 3124.366994][ T8147] usb 4-1: Manufacturer: syz
[ 3124.376458][ T8147] usb 4-1: SerialNumber: syz
[ 3124.423601][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3124.822586][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3125.012463][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3125.038886][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3125.063627][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3125.075566][ T3742] usb 6-1: USB disconnect, device number 38
[ 3125.229167][ T8129] usb 4-1: USB disconnect, device number 93
11:28:20 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x6}}}}}}]}}, 0x0)

11:28:20 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x0, 0xfff})
socket$netlink(0x10, 0x3, 0xe)

11:28:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x10000, 0x6, 0x1})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x20, '\x00', '\x00', '\x00', 0x2, 0x800, 0xcb7, 0x8000, "73032ae77a412c3a81f3c7998e80c758"})
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x10000, 0x6, 0x1}) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) (async)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x20, '\x00', '\x00', '\x00', 0x2, 0x800, 0xcb7, 0x8000, "73032ae77a412c3a81f3c7998e80c758"}) (async)

11:28:20 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x11)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x11) (async)

11:28:20 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x5, 0x2, 0x1ff, 0x96, 0x309a, 0x47501ffd], 0x7, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x4f8) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:20 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x11)

11:28:21 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:21 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x2}}}}}}]}}, 0x0)

11:28:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:28:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) (rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async, rerun: 32)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (rerun: 32)

11:28:21 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

[ 3125.912503][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3125.930090][T28889] ath9k_htc: Failed to initialize the device
[ 3125.950152][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3126.083392][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3126.096908][ T8147] ath9k_htc: Failed to initialize the device
[ 3126.114290][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3126.342441][ T3742] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 3126.492409][ T8129] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 3126.883148][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3126.900112][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3126.913130][ T3742] usb 6-1: Product: syz
[ 3126.917679][ T3742] usb 6-1: Manufacturer: syz
[ 3126.923869][ T3742] usb 6-1: SerialNumber: syz
[ 3126.965147][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3127.043126][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3127.057658][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3127.074113][ T8129] usb 4-1: Product: syz
[ 3127.079840][ T8129] usb 4-1: Manufacturer: syz
[ 3127.092448][ T8129] usb 4-1: SerialNumber: syz
[ 3127.134728][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3127.592982][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3127.742612][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3127.826283][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3127.853273][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3127.876166][ T8147] usb 6-1: USB disconnect, device number 39
[ 3127.959618][T28889] usb 4-1: USB disconnect, device number 94
11:28:23 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x7}}}}}}]}}, 0x0)

11:28:23 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x0, 0xfff})
socket$netlink(0x10, 0x3, 0xe)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (async)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x0, 0xfff}) (async)
socket$netlink(0x10, 0x3, 0xe) (async)

11:28:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:28:23 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:23 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x7)
ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000140)={0x6, 0x1})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x3f, 0x40, 0x0, 0x101}, {0x400, 0xdb, 0xe2, 0x7}, {0x80, 0xf7, 0xfd, 0x2d}]})
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xa, 0x0, 0x45)

11:28:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:28:23 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x3}}}}}}]}}, 0x0)

11:28:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0xa, 0x0, 0x9, &(0x7f0000000000))
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:23 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x0, 0xfff}) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0xe) (rerun: 32)

11:28:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2a35}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x48001)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000844)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000380)={'ip6tnl0\x00', 0x200})

11:28:23 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async, rerun: 64)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async, rerun: 64)
ioctl$LOOP_CLR_FD(r0, 0x4c01) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x7)
ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000140)={0x6, 0x1}) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x3f, 0x40, 0x0, 0x101}, {0x400, 0xdb, 0xe2, 0x7}, {0x80, 0xf7, 0xfd, 0x2d}]})
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xa, 0x0, 0x45)

[ 3128.632251][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3128.642808][ T3742] ath9k_htc: Failed to initialize the device
[ 3128.682886][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3128.792574][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3128.808926][ T8129] ath9k_htc: Failed to initialize the device
[ 3128.851108][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3129.082522][ T8147] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 3129.232537][T28889] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 3129.663040][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3129.688017][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3129.700207][ T8147] usb 6-1: Product: syz
[ 3129.709945][ T8147] usb 6-1: Manufacturer: syz
[ 3129.717735][ T8147] usb 6-1: SerialNumber: syz
[ 3129.782505][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3129.794126][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3129.810912][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3129.824601][T28889] usb 4-1: Product: syz
[ 3129.829222][T28889] usb 4-1: Manufacturer: syz
[ 3129.835566][T28889] usb 4-1: SerialNumber: syz
[ 3129.884711][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3130.442621][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3130.523294][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3130.659180][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3130.674619][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3130.696063][T31872] usb 6-1: USB disconnect, device number 40
[ 3130.739221][ T8129] usb 4-1: USB disconnect, device number 95
11:28:26 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x8}}}}}}]}}, 0x0)

11:28:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2a35}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x48001)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000844) (async, rerun: 32)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000380)={'ip6tnl0\x00', 0x200}) (rerun: 32)

11:28:26 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async, rerun: 32)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x7) (async)
ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000140)={0x6, 0x1})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x3f, 0x40, 0x0, 0x101}, {0x400, 0xdb, 0xe2, 0x7}, {0x80, 0xf7, 0xfd, 0x2d}]}) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xa, 0x0, 0x45)

11:28:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0xa, 0x0, 0x9, &(0x7f0000000000))
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:26 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
socket$netlink(0x10, 0x3, 0x14)

11:28:26 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x4}}}}}}]}}, 0x0)

11:28:26 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$netlink(0x10, 0x3, 0x14)

11:28:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2a35}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x48001)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000844)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000380)={'ip6tnl0\x00', 0x200})
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2a35}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x48001) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000844) (async)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000380)={'ip6tnl0\x00', 0x200}) (async)

11:28:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x23ec)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x1c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x800)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x9, 0x10a00)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000200)=0x6)

11:28:26 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
socket$netlink(0x10, 0x3, 0x14)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$netlink(0x10, 0x3, 0x14) (async)

11:28:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x23ec)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x1c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x800)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x9, 0x10a00)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000200)=0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x23ec) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x1c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x9, 0x10a00) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000200)=0x6) (async)

[ 3131.522287][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3131.544747][ T8147] ath9k_htc: Failed to initialize the device
11:28:26 executing program 2:
socket$netlink(0x10, 0x3, 0x6)

[ 3131.567837][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3131.592599][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3131.620978][T28889] ath9k_htc: Failed to initialize the device
[ 3131.656494][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3131.952530][T31872] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 3132.042386][ T8129] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 3132.492362][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3132.512231][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3132.521580][T31872] usb 6-1: Product: syz
[ 3132.543525][T31872] usb 6-1: Manufacturer: syz
[ 3132.548405][T31872] usb 6-1: SerialNumber: syz
[ 3132.584045][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3132.599732][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3132.603594][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3132.610732][ T8129] usb 4-1: Product: syz
[ 3132.628054][ T8129] usb 4-1: Manufacturer: syz
[ 3132.636998][ T8129] usb 4-1: SerialNumber: syz
[ 3132.697704][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3133.193839][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3133.292466][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3133.398355][T14435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3133.418397][T14435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3133.439598][T28889] usb 6-1: USB disconnect, device number 41
[ 3133.506981][ T8147] usb 4-1: USB disconnect, device number 96
11:28:29 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0xa}}}}}}]}}, 0x0)

11:28:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)

11:28:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x23ec) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x1c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x9, 0x10a00)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000200)=0x6)

11:28:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0xa, 0x0, 0x9, &(0x7f0000000000))
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:29 executing program 2:
socket$netlink(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x6) (async)

11:28:29 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x5}}}}}}]}}, 0x0)

11:28:29 executing program 2:
socket$netlink(0x10, 0x3, 0x6)

11:28:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)

11:28:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x28a001, 0x0)
ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x8})

11:28:29 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)=0x1)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)

11:28:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)

[ 3134.233224][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3134.261410][T31872] ath9k_htc: Failed to initialize the device
11:28:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x28a001, 0x0)
ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x8})
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
socket$pptp(0x18, 0x1, 0x2) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x28a001, 0x0) (async)
ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x8}) (async)

[ 3134.280225][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3134.392364][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3134.411184][ T8129] ath9k_htc: Failed to initialize the device
[ 3134.440473][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3134.672680][T28889] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 3134.812470][ T8147] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 3135.252612][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3135.267950][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3135.283847][T28889] usb 6-1: Product: syz
[ 3135.289278][T28889] usb 6-1: Manufacturer: syz
[ 3135.303402][T28889] usb 6-1: SerialNumber: syz
[ 3135.353454][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3135.402451][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3135.421972][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3135.442717][ T8147] usb 4-1: Product: syz
[ 3135.447838][ T8147] usb 4-1: Manufacturer: syz
[ 3135.459039][ T8147] usb 4-1: SerialNumber: syz
[ 3135.503737][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3136.004737][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3136.154740][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3136.220711][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3136.234012][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3136.244465][ T3742] usb 6-1: USB disconnect, device number 42
[ 3136.374348][ T8129] usb 4-1: USB disconnect, device number 97
11:28:32 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0xb}}}}}}]}}, 0x0)

11:28:32 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7fffffff, 0x42080)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000240)={{0x8, 0x0, 0x5}, 0x1, [0x8, 0x4, 0x10001, 0x8001, 0x2, 0x6, 0x2, 0x2, 0x0, 0x1d48, 0x80000000, 0xc6, 0x321c, 0x70, 0x7, 0x0, 0x81, 0x0, 0x9, 0x587, 0xeda, 0xfffffffffffff801, 0x100000001, 0x9, 0xfff, 0x1000, 0x7ec2, 0x0, 0x2, 0x3, 0x8001, 0x7, 0x80000000, 0x10, 0xfffffffffffffff8, 0x97be, 0x2, 0xde, 0x8, 0xffffffffffffec95, 0x8001, 0x2, 0x401, 0x4, 0x0, 0x200, 0x4, 0xfffffffffffffff7, 0x10001, 0x9, 0x5f10c97f, 0x1, 0x7, 0x2, 0x80000000, 0x240000000, 0xa8, 0x9, 0x3, 0x1c56352, 0x101, 0x4, 0x4, 0x2, 0x4a, 0x10000, 0xffff, 0xf64c, 0x100000001, 0x0, 0x6, 0x812, 0x5, 0x8, 0xfffffffffffffffd, 0x6, 0x6acd, 0xfa, 0x800, 0x7fa, 0x9, 0x0, 0x3, 0x6, 0x8, 0x9, 0xd189, 0x2, 0x4, 0x7fffffffffffffff, 0xc48b, 0x52b, 0x800000000000000, 0x1, 0x8, 0x4, 0x9, 0x800, 0x1, 0x8, 0x4, 0x7f, 0x8001, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0xfffffffffffffff9, 0x40, 0x6, 0x11, 0x1ff, 0x4, 0xc0, 0x4880, 0x5, 0x8, 0xffffffff00000001, 0x6, 0xd380, 0x1, 0x81, 0x5, 0x20, 0x100, 0x1, 0xfffffffffffff82d]})
socket$netlink(0x10, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000072ea63b569f8a87670f80bd9987f17ecbf9175d6ed16d8ecfd58aa3a8bf1351cfeffffff7c62a94fc9bb5acaff3d0e216b9647151a4484623477c95089e44983e4d7c8129ca047c38f7b61db8994", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x20)

11:28:32 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)=0x1)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)=0x1) (async)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)

11:28:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x28a001, 0x0)
ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x8})

11:28:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x5a, 0x400346)
r1 = socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0x7fff}, 0x10)

11:28:32 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x6}}}}}}]}}, 0x0)

11:28:32 executing program 4:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xb)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x3, {0xa, 0x4e23, 0x7, @loopback, 0x2}}}, 0x32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'pimreg1\x00', 0x8})

11:28:32 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7fffffff, 0x42080)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000240)={{0x8, 0x0, 0x5}, 0x1, [0x8, 0x4, 0x10001, 0x8001, 0x2, 0x6, 0x2, 0x2, 0x0, 0x1d48, 0x80000000, 0xc6, 0x321c, 0x70, 0x7, 0x0, 0x81, 0x0, 0x9, 0x587, 0xeda, 0xfffffffffffff801, 0x100000001, 0x9, 0xfff, 0x1000, 0x7ec2, 0x0, 0x2, 0x3, 0x8001, 0x7, 0x80000000, 0x10, 0xfffffffffffffff8, 0x97be, 0x2, 0xde, 0x8, 0xffffffffffffec95, 0x8001, 0x2, 0x401, 0x4, 0x0, 0x200, 0x4, 0xfffffffffffffff7, 0x10001, 0x9, 0x5f10c97f, 0x1, 0x7, 0x2, 0x80000000, 0x240000000, 0xa8, 0x9, 0x3, 0x1c56352, 0x101, 0x4, 0x4, 0x2, 0x4a, 0x10000, 0xffff, 0xf64c, 0x100000001, 0x0, 0x6, 0x812, 0x5, 0x8, 0xfffffffffffffffd, 0x6, 0x6acd, 0xfa, 0x800, 0x7fa, 0x9, 0x0, 0x3, 0x6, 0x8, 0x9, 0xd189, 0x2, 0x4, 0x7fffffffffffffff, 0xc48b, 0x52b, 0x800000000000000, 0x1, 0x8, 0x4, 0x9, 0x800, 0x1, 0x8, 0x4, 0x7f, 0x8001, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0xfffffffffffffff9, 0x40, 0x6, 0x11, 0x1ff, 0x4, 0xc0, 0x4880, 0x5, 0x8, 0xffffffff00000001, 0x6, 0xd380, 0x1, 0x81, 0x5, 0x20, 0x100, 0x1, 0xfffffffffffff82d]})
socket$netlink(0x10, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000072ea63b569f8a87670f80bd9987f17ecbf9175d6ed16d8ecfd58aa3a8bf1351cfeffffff7c62a94fc9bb5acaff3d0e216b9647151a4484623477c95089e44983e4d7c8129ca047c38f7b61db8994", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x7fffffff, 0x42080) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000240)={{0x8, 0x0, 0x5}, 0x1, [0x8, 0x4, 0x10001, 0x8001, 0x2, 0x6, 0x2, 0x2, 0x0, 0x1d48, 0x80000000, 0xc6, 0x321c, 0x70, 0x7, 0x0, 0x81, 0x0, 0x9, 0x587, 0xeda, 0xfffffffffffff801, 0x100000001, 0x9, 0xfff, 0x1000, 0x7ec2, 0x0, 0x2, 0x3, 0x8001, 0x7, 0x80000000, 0x10, 0xfffffffffffffff8, 0x97be, 0x2, 0xde, 0x8, 0xffffffffffffec95, 0x8001, 0x2, 0x401, 0x4, 0x0, 0x200, 0x4, 0xfffffffffffffff7, 0x10001, 0x9, 0x5f10c97f, 0x1, 0x7, 0x2, 0x80000000, 0x240000000, 0xa8, 0x9, 0x3, 0x1c56352, 0x101, 0x4, 0x4, 0x2, 0x4a, 0x10000, 0xffff, 0xf64c, 0x100000001, 0x0, 0x6, 0x812, 0x5, 0x8, 0xfffffffffffffffd, 0x6, 0x6acd, 0xfa, 0x800, 0x7fa, 0x9, 0x0, 0x3, 0x6, 0x8, 0x9, 0xd189, 0x2, 0x4, 0x7fffffffffffffff, 0xc48b, 0x52b, 0x800000000000000, 0x1, 0x8, 0x4, 0x9, 0x800, 0x1, 0x8, 0x4, 0x7f, 0x8001, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0xfffffffffffffff9, 0x40, 0x6, 0x11, 0x1ff, 0x4, 0xc0, 0x4880, 0x5, 0x8, 0xffffffff00000001, 0x6, 0xd380, 0x1, 0x81, 0x5, 0x20, 0x100, 0x1, 0xfffffffffffff82d]}) (async)
socket$netlink(0x10, 0x3, 0x9) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000072ea63b569f8a87670f80bd9987f17ecbf9175d6ed16d8ecfd58aa3a8bf1351cfeffffff7c62a94fc9bb5acaff3d0e216b9647151a4484623477c95089e44983e4d7c8129ca047c38f7b61db8994", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) (async)
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x20) (async)

11:28:32 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)=0x1) (async)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)

11:28:32 executing program 4:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0xb) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 32)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x3, {0xa, 0x4e23, 0x7, @loopback, 0x2}}}, 0x32) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'pimreg1\x00', 0x8})

11:28:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x5a, 0x400346) (async)
r1 = socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r1, 0x0, &(0x7f0000000080)) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0x7fff}, 0x10)

11:28:32 executing program 2:
socket$netlink(0x10, 0x3, 0x4)

[ 3137.042480][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3137.050226][T28889] ath9k_htc: Failed to initialize the device
[ 3137.092824][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3137.192382][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3137.201394][ T8147] ath9k_htc: Failed to initialize the device
[ 3137.218789][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3137.482401][ T3742] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 3137.592982][ T8129] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 3138.043229][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3138.058315][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3138.076529][ T3742] usb 6-1: Product: syz
[ 3138.081271][ T3742] usb 6-1: Manufacturer: syz
[ 3138.093012][ T3742] usb 6-1: SerialNumber: syz
[ 3138.135603][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3138.152643][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3138.164617][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3138.176443][ T8129] usb 4-1: Product: syz
[ 3138.181451][ T8129] usb 4-1: Manufacturer: syz
[ 3138.187776][ T8129] usb 4-1: SerialNumber: syz
[ 3138.252087][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3138.742816][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3138.882536][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3138.958450][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3138.974894][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3138.989643][ T8147] usb 6-1: USB disconnect, device number 43
[ 3139.098173][T28889] usb 4-1: USB disconnect, device number 98
11:28:34 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0xc}}}}}}]}}, 0x0)

11:28:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x5a, 0x400346)
r1 = socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0x7fff}, 0x10)

11:28:34 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7fffffff, 0x42080)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000240)={{0x8, 0x0, 0x5}, 0x1, [0x8, 0x4, 0x10001, 0x8001, 0x2, 0x6, 0x2, 0x2, 0x0, 0x1d48, 0x80000000, 0xc6, 0x321c, 0x70, 0x7, 0x0, 0x81, 0x0, 0x9, 0x587, 0xeda, 0xfffffffffffff801, 0x100000001, 0x9, 0xfff, 0x1000, 0x7ec2, 0x0, 0x2, 0x3, 0x8001, 0x7, 0x80000000, 0x10, 0xfffffffffffffff8, 0x97be, 0x2, 0xde, 0x8, 0xffffffffffffec95, 0x8001, 0x2, 0x401, 0x4, 0x0, 0x200, 0x4, 0xfffffffffffffff7, 0x10001, 0x9, 0x5f10c97f, 0x1, 0x7, 0x2, 0x80000000, 0x240000000, 0xa8, 0x9, 0x3, 0x1c56352, 0x101, 0x4, 0x4, 0x2, 0x4a, 0x10000, 0xffff, 0xf64c, 0x100000001, 0x0, 0x6, 0x812, 0x5, 0x8, 0xfffffffffffffffd, 0x6, 0x6acd, 0xfa, 0x800, 0x7fa, 0x9, 0x0, 0x3, 0x6, 0x8, 0x9, 0xd189, 0x2, 0x4, 0x7fffffffffffffff, 0xc48b, 0x52b, 0x800000000000000, 0x1, 0x8, 0x4, 0x9, 0x800, 0x1, 0x8, 0x4, 0x7f, 0x8001, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0xfffffffffffffff9, 0x40, 0x6, 0x11, 0x1ff, 0x4, 0xc0, 0x4880, 0x5, 0x8, 0xffffffff00000001, 0x6, 0xd380, 0x1, 0x81, 0x5, 0x20, 0x100, 0x1, 0xfffffffffffff82d]})
socket$netlink(0x10, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000072ea63b569f8a87670f80bd9987f17ecbf9175d6ed16d8ecfd58aa3a8bf1351cfeffffff7c62a94fc9bb5acaff3d0e216b9647151a4484623477c95089e44983e4d7c8129ca047c38f7b61db8994", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x7fffffff, 0x42080) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000240)={{0x8, 0x0, 0x5}, 0x1, [0x8, 0x4, 0x10001, 0x8001, 0x2, 0x6, 0x2, 0x2, 0x0, 0x1d48, 0x80000000, 0xc6, 0x321c, 0x70, 0x7, 0x0, 0x81, 0x0, 0x9, 0x587, 0xeda, 0xfffffffffffff801, 0x100000001, 0x9, 0xfff, 0x1000, 0x7ec2, 0x0, 0x2, 0x3, 0x8001, 0x7, 0x80000000, 0x10, 0xfffffffffffffff8, 0x97be, 0x2, 0xde, 0x8, 0xffffffffffffec95, 0x8001, 0x2, 0x401, 0x4, 0x0, 0x200, 0x4, 0xfffffffffffffff7, 0x10001, 0x9, 0x5f10c97f, 0x1, 0x7, 0x2, 0x80000000, 0x240000000, 0xa8, 0x9, 0x3, 0x1c56352, 0x101, 0x4, 0x4, 0x2, 0x4a, 0x10000, 0xffff, 0xf64c, 0x100000001, 0x0, 0x6, 0x812, 0x5, 0x8, 0xfffffffffffffffd, 0x6, 0x6acd, 0xfa, 0x800, 0x7fa, 0x9, 0x0, 0x3, 0x6, 0x8, 0x9, 0xd189, 0x2, 0x4, 0x7fffffffffffffff, 0xc48b, 0x52b, 0x800000000000000, 0x1, 0x8, 0x4, 0x9, 0x800, 0x1, 0x8, 0x4, 0x7f, 0x8001, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0xfffffffffffffff9, 0x40, 0x6, 0x11, 0x1ff, 0x4, 0xc0, 0x4880, 0x5, 0x8, 0xffffffff00000001, 0x6, 0xd380, 0x1, 0x81, 0x5, 0x20, 0x100, 0x1, 0xfffffffffffff82d]}) (async)
socket$netlink(0x10, 0x3, 0x9) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000072ea63b569f8a87670f80bd9987f17ecbf9175d6ed16d8ecfd58aa3a8bf1351cfeffffff7c62a94fc9bb5acaff3d0e216b9647151a4484623477c95089e44983e4d7c8129ca047c38f7b61db8994", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) (async)
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x20) (async)

11:28:34 executing program 2:
socket$netlink(0x10, 0x3, 0x4)

11:28:34 executing program 4:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xb) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x3, {0xa, 0x4e23, 0x7, @loopback, 0x2}}}, 0x32) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async, rerun: 32)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'pimreg1\x00', 0x8}) (rerun: 32)

11:28:34 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x7}}}}}}]}}, 0x0)

11:28:34 executing program 2:
socket$netlink(0x10, 0x3, 0x4)

11:28:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'macsec0\x00', 0x600})

11:28:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='k\x96\x8d\xfd\x19\x15\xa7\xe0\x84\x8cO\x91d\xd4U\x00E\xd9\x96\xb4W\x13I\x80\xf3\xc3', 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xfffffff8, 0x3f, 0x5, 0x3, 0x1, 0xd1e3, 0x5], 0x7, 0x0, 0x0, <r1=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x6, 0x4})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

11:28:35 executing program 2:
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfffffffffffffc00, 0x4, 0x7, 0xd6b, 0x7b97f93c}, &(0x7f0000000040)={0x3, 0x8001, 0x5, 0x40, 0x4, 0x5, 0x1, 0x7}, &(0x7f0000000080)={0x7f, 0x7, 0x8000000000000000, 0x6, 0x2, 0x100000000000, 0x800, 0x7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xdb]}, 0x8})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
clock_gettime(0x7, &(0x7f0000000240)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000180)={0xed2, 0x5, 0x2527, 0x3, 0x9, 0x0, 0x3, 0xffffffffffffffff}, &(0x7f00000001c0)={0x1, 0x6, 0xfffffffffffffff7, 0x10001, 0xfff, 0x60b, 0x7fffffffffffffff, 0x75}, &(0x7f0000000200)={0x1be, 0x6, 0x200, 0x80, 0x3, 0x7, 0x4, 0x6}, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8})

11:28:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='k\x96\x8d\xfd\x19\x15\xa7\xe0\x84\x8cO\x91d\xd4U\x00E\xd9\x96\xb4W\x13I\x80\xf3\xc3', 0xffffffffffffffff) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xfffffff8, 0x3f, 0x5, 0x3, 0x1, 0xd1e3, 0x5], 0x7, 0x0, 0x0, <r1=>0xffffffffffffffff}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x6, 0x4}) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

11:28:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4, 0x2, 0x4, 0x3, 0x101, 0x8e6], 0x6, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0xfffffffb, 0x6, 0x13, 0x0, "27871afc0d2522efb034f89046ee9acc06088895584d022bb7d3f12eb95519dc143ea757f593df5ec4af8a101ed36ad51e00101ffb50e906000000000000001d", "21f1dd0cedd98a90e53beee4bc2ade183300e02a6b804fd9cc174bd7848c9c22", [0x7, 0x4]})

[ 3139.842643][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3139.865815][ T3742] ath9k_htc: Failed to initialize the device
[ 3139.907904][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3139.916852][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3139.943255][ T8129] ath9k_htc: Failed to initialize the device
[ 3139.971898][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3140.322636][ T8147] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 3140.362325][T28889] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 3140.942417][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3140.953272][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3140.961747][ T8147] usb 6-1: Product: syz
[ 3140.967213][ T8147] usb 6-1: Manufacturer: syz
[ 3140.972715][ T8147] usb 6-1: SerialNumber: syz
[ 3140.995824][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3141.010791][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3141.021882][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3141.035502][T28889] usb 4-1: Product: syz
[ 3141.040866][T28889] usb 4-1: Manufacturer: syz
[ 3141.046696][T28889] usb 4-1: SerialNumber: syz
[ 3141.093584][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3141.642614][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3141.692505][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3141.850941][T14544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3141.871915][T14544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3141.890543][ T7352] usb 6-1: USB disconnect, device number 44
[ 3141.915115][T31872] usb 4-1: USB disconnect, device number 99
11:28:37 executing program 2:
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfffffffffffffc00, 0x4, 0x7, 0xd6b, 0x7b97f93c}, &(0x7f0000000040)={0x3, 0x8001, 0x5, 0x40, 0x4, 0x5, 0x1, 0x7}, &(0x7f0000000080)={0x7f, 0x7, 0x8000000000000000, 0x6, 0x2, 0x100000000000, 0x800, 0x7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xdb]}, 0x8})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
clock_gettime(0x7, &(0x7f0000000240)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000180)={0xed2, 0x5, 0x2527, 0x3, 0x9, 0x0, 0x3, 0xffffffffffffffff}, &(0x7f00000001c0)={0x1, 0x6, 0xfffffffffffffff7, 0x10001, 0xfff, 0x60b, 0x7fffffffffffffff, 0x75}, &(0x7f0000000200)={0x1be, 0x6, 0x200, 0x80, 0x3, 0x7, 0x4, 0x6}, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8})
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfffffffffffffc00, 0x4, 0x7, 0xd6b, 0x7b97f93c}, &(0x7f0000000040)={0x3, 0x8001, 0x5, 0x40, 0x4, 0x5, 0x1, 0x7}, &(0x7f0000000080)={0x7f, 0x7, 0x8000000000000000, 0x6, 0x2, 0x100000000000, 0x800, 0x7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xdb]}, 0x8}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
clock_gettime(0x7, &(0x7f0000000240)) (async)
pselect6(0x40, &(0x7f0000000180)={0xed2, 0x5, 0x2527, 0x3, 0x9, 0x0, 0x3, 0xffffffffffffffff}, &(0x7f00000001c0)={0x1, 0x6, 0xfffffffffffffff7, 0x10001, 0xfff, 0x60b, 0x7fffffffffffffff, 0x75}, &(0x7f0000000200)={0x1be, 0x6, 0x200, 0x80, 0x3, 0x7, 0x4, 0x6}, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) (async)

11:28:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'macsec0\x00', 0x600})

11:28:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4, 0x2, 0x4, 0x3, 0x101, 0x8e6], 0x6, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0xfffffffb, 0x6, 0x13, 0x0, "27871afc0d2522efb034f89046ee9acc06088895584d022bb7d3f12eb95519dc143ea757f593df5ec4af8a101ed36ad51e00101ffb50e906000000000000001d", "21f1dd0cedd98a90e53beee4bc2ade183300e02a6b804fd9cc174bd7848c9c22", [0x7, 0x4]})
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4, 0x2, 0x4, 0x3, 0x101, 0x8e6], 0x6, 0x80000}) (async)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0xfffffffb, 0x6, 0x13, 0x0, "27871afc0d2522efb034f89046ee9acc06088895584d022bb7d3f12eb95519dc143ea757f593df5ec4af8a101ed36ad51e00101ffb50e906000000000000001d", "21f1dd0cedd98a90e53beee4bc2ade183300e02a6b804fd9cc174bd7848c9c22", [0x7, 0x4]}) (async)

11:28:37 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0xd}}}}}}]}}, 0x0)

11:28:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='k\x96\x8d\xfd\x19\x15\xa7\xe0\x84\x8cO\x91d\xd4U\x00E\xd9\x96\xb4W\x13I\x80\xf3\xc3', 0xffffffffffffffff) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xfffffff8, 0x3f, 0x5, 0x3, 0x1, 0xd1e3, 0x5], 0x7, 0x0, 0x0, <r1=>0xffffffffffffffff}) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x6, 0x4})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

11:28:37 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x9}}}}}}]}}, 0x0)

11:28:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4, 0x2, 0x4, 0x3, 0x101, 0x8e6], 0x6, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0xfffffffb, 0x6, 0x13, 0x0, "27871afc0d2522efb034f89046ee9acc06088895584d022bb7d3f12eb95519dc143ea757f593df5ec4af8a101ed36ad51e00101ffb50e906000000000000001d", "21f1dd0cedd98a90e53beee4bc2ade183300e02a6b804fd9cc174bd7848c9c22", [0x7, 0x4]})

11:28:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'macsec0\x00', 0x600})
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'macsec0\x00', 0x600}) (async)

11:28:37 executing program 2:
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfffffffffffffc00, 0x4, 0x7, 0xd6b, 0x7b97f93c}, &(0x7f0000000040)={0x3, 0x8001, 0x5, 0x40, 0x4, 0x5, 0x1, 0x7}, &(0x7f0000000080)={0x7f, 0x7, 0x8000000000000000, 0x6, 0x2, 0x100000000000, 0x800, 0x7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xdb]}, 0x8})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
clock_gettime(0x7, &(0x7f0000000240)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000180)={0xed2, 0x5, 0x2527, 0x3, 0x9, 0x0, 0x3, 0xffffffffffffffff}, &(0x7f00000001c0)={0x1, 0x6, 0xfffffffffffffff7, 0x10001, 0xfff, 0x60b, 0x7fffffffffffffff, 0x75}, &(0x7f0000000200)={0x1be, 0x6, 0x200, 0x80, 0x3, 0x7, 0x4, 0x6}, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8})
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfffffffffffffc00, 0x4, 0x7, 0xd6b, 0x7b97f93c}, &(0x7f0000000040)={0x3, 0x8001, 0x5, 0x40, 0x4, 0x5, 0x1, 0x7}, &(0x7f0000000080)={0x7f, 0x7, 0x8000000000000000, 0x6, 0x2, 0x100000000000, 0x800, 0x7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xdb]}, 0x8}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
clock_gettime(0x7, &(0x7f0000000240)) (async)
pselect6(0x40, &(0x7f0000000180)={0xed2, 0x5, 0x2527, 0x3, 0x9, 0x0, 0x3, 0xffffffffffffffff}, &(0x7f00000001c0)={0x1, 0x6, 0xfffffffffffffff7, 0x10001, 0xfff, 0x60b, 0x7fffffffffffffff, 0x75}, &(0x7f0000000200)={0x1be, 0x6, 0x200, 0x80, 0x3, 0x7, 0x4, 0x6}, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) (async)

11:28:37 executing program 4:
r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e45e99b62386fe3cc18c4d9cddf5eb0dd5bc338f33d4761d44f381c2d5879d5ce95dc46179cbd9a764f3b6d7b6f6179daf4cea848d60d4b3f24a3c8ed31bb2a6bca6969c3571a433de06bd01264161bcf982d7c688c136063da550e54304ffe5044c495183f3db2e6b5edb0379a3c6548f6ed9cf0fb0c55a494281c36f1d6b9c19987a15329760dacdb94922f26f94c58be6dd9f0b1f3e9c6ac20ad63e017eb9ce9dfaf579678c2d9a04573fbd4b41d6638d043584e957cb568398fe34f34e44a398c1111a8bf4e3ef", 0xc9, 0xfffffffffffffffd)
r1 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd)
keyctl$instantiate_iov(0x14, r0, &(0x7f0000000200)=[{&(0x7f0000000180)="b6c895f1e5f8613293bb38a48a98dd97e4446c690121a28bd11e90f9f2a71b6a249fb7749a76c26bc0658e27f4a61bb53f5be0f740a7701b628f4a801496137c6d3f98a007267d18a4b87764b93940b980416cf2471d9e4add695ad11a5c90eb909f5ba2d28c231bee56c9ce08cb9e183a59bf3fd117de2380854c151410c0", 0x7f}], 0x1, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0x0)

11:28:37 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

11:28:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x2, 0x3ff, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x19, 0x0, 0x0, 0x0, "79eeb7bb55583b60d9cc3eac8b6a0b7124392f5be23117c251e2053b0b8996c7bedd738a1531b1edfcd9f2515305c32fc99ea11b04e975481dc8b7e6566bcd29"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:28:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

11:28:37 executing program 4:
r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e45e99b62386fe3cc18c4d9cddf5eb0dd5bc338f33d4761d44f381c2d5879d5ce95dc46179cbd9a764f3b6d7b6f6179daf4cea848d60d4b3f24a3c8ed31bb2a6bca6969c3571a433de06bd01264161bcf982d7c688c136063da550e54304ffe5044c495183f3db2e6b5edb0379a3c6548f6ed9cf0fb0c55a494281c36f1d6b9c19987a15329760dacdb94922f26f94c58be6dd9f0b1f3e9c6ac20ad63e017eb9ce9dfaf579678c2d9a04573fbd4b41d6638d043584e957cb568398fe34f34e44a398c1111a8bf4e3ef", 0xc9, 0xfffffffffffffffd)
r1 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd)
keyctl$instantiate_iov(0x14, r0, &(0x7f0000000200)=[{&(0x7f0000000180)="b6c895f1e5f8613293bb38a48a98dd97e4446c690121a28bd11e90f9f2a71b6a249fb7749a76c26bc0658e27f4a61bb53f5be0f740a7701b628f4a801496137c6d3f98a007267d18a4b87764b93940b980416cf2471d9e4add695ad11a5c90eb909f5ba2d28c231bee56c9ce08cb9e183a59bf3fd117de2380854c151410c0", 0x7f}], 0x1, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0x0)
add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e45e99b62386fe3cc18c4d9cddf5eb0dd5bc338f33d4761d44f381c2d5879d5ce95dc46179cbd9a764f3b6d7b6f6179daf4cea848d60d4b3f24a3c8ed31bb2a6bca6969c3571a433de06bd01264161bcf982d7c688c136063da550e54304ffe5044c495183f3db2e6b5edb0379a3c6548f6ed9cf0fb0c55a494281c36f1d6b9c19987a15329760dacdb94922f26f94c58be6dd9f0b1f3e9c6ac20ad63e017eb9ce9dfaf579678c2d9a04573fbd4b41d6638d043584e957cb568398fe34f34e44a398c1111a8bf4e3ef", 0xc9, 0xfffffffffffffffd) (async)
add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd) (async)
keyctl$instantiate_iov(0x14, r0, &(0x7f0000000200)=[{&(0x7f0000000180)="b6c895f1e5f8613293bb38a48a98dd97e4446c690121a28bd11e90f9f2a71b6a249fb7749a76c26bc0658e27f4a61bb53f5be0f740a7701b628f4a801496137c6d3f98a007267d18a4b87764b93940b980416cf2471d9e4add695ad11a5c90eb909f5ba2d28c231bee56c9ce08cb9e183a59bf3fd117de2380854c151410c0", 0x7f}], 0x1, r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0x0) (async)

[ 3142.633757][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 3142.641178][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
11:28:38 executing program 4:
r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e45e99b62386fe3cc18c4d9cddf5eb0dd5bc338f33d4761d44f381c2d5879d5ce95dc46179cbd9a764f3b6d7b6f6179daf4cea848d60d4b3f24a3c8ed31bb2a6bca6969c3571a433de06bd01264161bcf982d7c688c136063da550e54304ffe5044c495183f3db2e6b5edb0379a3c6548f6ed9cf0fb0c55a494281c36f1d6b9c19987a15329760dacdb94922f26f94c58be6dd9f0b1f3e9c6ac20ad63e017eb9ce9dfaf579678c2d9a04573fbd4b41d6638d043584e957cb568398fe34f34e44a398c1111a8bf4e3ef", 0xc9, 0xfffffffffffffffd) (async, rerun: 32)
r1 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd) (rerun: 32)
keyctl$instantiate_iov(0x14, r0, &(0x7f0000000200)=[{&(0x7f0000000180)="b6c895f1e5f8613293bb38a48a98dd97e4446c690121a28bd11e90f9f2a71b6a249fb7749a76c26bc0658e27f4a61bb53f5be0f740a7701b628f4a801496137c6d3f98a007267d18a4b87764b93940b980416cf2471d9e4add695ad11a5c90eb909f5ba2d28c231bee56c9ce08cb9e183a59bf3fd117de2380854c151410c0", 0x7f}], 0x1, r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xa, 0x0, 0x0)

[ 3142.720219][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3142.753014][ T8147] ath9k_htc: Failed to initialize the device
[ 3142.786506][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3142.804893][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3142.819738][T28889] ath9k_htc: Failed to initialize the device
[ 3142.846154][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3143.162532][ T7352] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 3143.216857][T31872] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 3143.702657][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3143.719491][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3143.730021][ T7352] usb 6-1: Product: syz
[ 3143.739223][ T7352] usb 6-1: Manufacturer: syz
[ 3143.747767][ T7352] usb 6-1: SerialNumber: syz
[ 3143.757747][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3143.767982][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3143.778021][T31872] usb 4-1: Product: syz
[ 3143.782401][T31872] usb 4-1: Manufacturer: syz
[ 3143.787441][T31872] usb 4-1: SerialNumber: syz
[ 3143.813033][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3143.843116][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3144.392358][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3144.412360][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3144.597410][T14588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3144.621156][ T8147] usb 4-1: USB disconnect, device number 100
[ 3144.636143][T14588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3144.651922][T28889] usb 6-1: USB disconnect, device number 45
11:28:40 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0xe}}}}}}]}}, 0x0)

11:28:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (rerun: 32)

11:28:40 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

11:28:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x2, 0x3ff, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x19, 0x0, 0x0, 0x0, "79eeb7bb55583b60d9cc3eac8b6a0b7124392f5be23117c251e2053b0b8996c7bedd738a1531b1edfcd9f2515305c32fc99ea11b04e975481dc8b7e6566bcd29"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:28:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x8, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:40 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0xa}}}}}}]}}, 0x0)

11:28:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x8, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x2, 0x3ff, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x19, 0x0, 0x0, 0x0, "79eeb7bb55583b60d9cc3eac8b6a0b7124392f5be23117c251e2053b0b8996c7bedd738a1531b1edfcd9f2515305c32fc99ea11b04e975481dc8b7e6566bcd29"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:28:40 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

11:28:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)

11:28:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x8, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair(0x8, 0x1, 0x5, &(0x7f0000000000)) (async)
connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:28:40 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x62)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000300)=0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000140)=""/34, 0x22, 0x0, &(0x7f0000000240)=""/177, 0xb1}}, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r8}, 0x8)
ioctl$LOOP_SET_FD(r0, 0x4c00, r8)

[ 3145.432345][T31872] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3145.441978][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3145.466140][T31872] ath9k_htc: Failed to initialize the device
[ 3145.473911][ T7352] ath9k_htc: Failed to initialize the device
[ 3145.481977][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3145.489275][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3145.872373][ T8147] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 3145.882890][T28889] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 3146.452656][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3146.463712][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3146.487330][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3146.496905][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3146.505873][ T8147] usb 4-1: Product: syz
[ 3146.510390][T28889] usb 6-1: Product: syz
[ 3146.515155][ T8147] usb 4-1: Manufacturer: syz
[ 3146.520749][T28889] usb 6-1: Manufacturer: syz
[ 3146.526214][ T8147] usb 4-1: SerialNumber: syz
[ 3146.532331][T28889] usb 6-1: SerialNumber: syz
[ 3146.583201][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3146.594549][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3147.222881][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3147.233857][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3147.439993][T14627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3147.466370][ T8129] usb 4-1: USB disconnect, device number 101
[ 3147.476989][T14627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3147.501706][ T7352] usb 6-1: USB disconnect, device number 46
11:28:43 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0xf}}}}}}]}}, 0x0)

11:28:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:43 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x5)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:28:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040))

11:28:43 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x62)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000300)=0x4) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000140)=""/34, 0x22, 0x0, &(0x7f0000000240)=""/177, 0xb1}}, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r8}, 0x8) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r8)

11:28:43 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0xf}}}}}}]}}, 0x0)

11:28:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040))

11:28:43 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x62) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000300)=0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000140)=""/34, 0x22, 0x0, &(0x7f0000000240)=""/177, 0xb1}}, 0x10) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r8}, 0x8) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r8)

11:28:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040))

11:28:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x5) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

[ 3148.313136][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3148.321817][ T8147] ath9k_htc: Failed to initialize the device
[ 3148.329273][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3148.345457][T28889] ath9k_htc: Failed to initialize the device
11:28:43 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x94000000, 0x2, 0x8], 0x3, 0x80800, <r0=>0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r0})
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x15, 0x4)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0)

[ 3148.371271][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3148.386095][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:43 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x5)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3148.762510][ T7352] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 3148.794659][ T8129] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 3149.282876][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3149.302259][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3149.330937][ T7352] usb 6-1: Product: syz
[ 3149.337170][ T7352] usb 6-1: Manufacturer: syz
[ 3149.352307][ T7352] usb 6-1: SerialNumber: syz
[ 3149.352537][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3149.378019][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3149.391450][ T8129] usb 4-1: Product: syz
[ 3149.403950][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3149.404005][ T8129] usb 4-1: Manufacturer: syz
[ 3149.427671][ T8129] usb 4-1: SerialNumber: syz
[ 3149.483121][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3149.983010][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3150.132461][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3150.204235][T14667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3150.222664][T14667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3150.246745][T31872] usb 6-1: USB disconnect, device number 47
[ 3150.348292][ T8147] usb 4-1: USB disconnect, device number 102
11:28:46 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x10}}}}}}]}}, 0x0)

11:28:46 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x94000000, 0x2, 0x8], 0x3, 0x80800, <r0=>0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r0})
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x15, 0x4)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x94000000, 0x2, 0x8], 0x3, 0x80800}) (async)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r0}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x15, 0x4) (async)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) (async)

11:28:46 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, {&(0x7f0000000000)=""/71, 0x47}, &(0x7f0000000080), 0x40}, 0xa0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x5) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:28:46 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x5)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:28:46 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x18}}}}}}]}}, 0x0)

11:28:46 executing program 2:
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x94000000, 0x2, 0x8], 0x3, 0x80800, <r0=>0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r0}) (async, rerun: 64)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (rerun: 64)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x15, 0x4) (async)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0)

11:28:46 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, {&(0x7f0000000000)=""/71, 0x47}, &(0x7f0000000080), 0x40}, 0xa0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:46 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, {&(0x7f0000000000)=""/71, 0x47}, &(0x7f0000000080), 0x40}, 0xa0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

[ 3151.037424][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3151.065531][ T7352] ath9k_htc: Failed to initialize the device
11:28:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
socket$netlink(0x10, 0x3, 0xa)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x1)
r5 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x80000)
ioctl$LOOP_SET_FD(r2, 0x4c00, r5)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100))
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x519800, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2})

11:28:46 executing program 0:
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x15, &(0x7f0000000000)=[{}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4)
socketpair(0x1d, 0x800, 0x1, &(0x7f0000000040))
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = syz_open_dev$loop(&(0x7f0000000180), 0xb8, 0x2400)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

[ 3151.106830][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:46 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0xc008b0bd, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x20, 0x9], 0x2, 0x80000, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

[ 3151.204864][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3151.226080][ T8129] ath9k_htc: Failed to initialize the device
[ 3151.254663][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3151.522225][T31872] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 3151.625167][ T8147] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 3152.042361][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3152.051745][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3152.082995][T31872] usb 6-1: Product: syz
[ 3152.087246][T31872] usb 6-1: Manufacturer: syz
[ 3152.092051][T31872] usb 6-1: SerialNumber: syz
[ 3152.153235][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3152.162591][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3152.176759][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3152.190831][ T8147] usb 4-1: Product: syz
[ 3152.203487][ T8147] usb 4-1: Manufacturer: syz
[ 3152.209332][ T8147] usb 4-1: SerialNumber: syz
[ 3152.283370][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3152.732335][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3152.922409][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3152.940233][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3152.962039][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3152.986790][ T7352] usb 6-1: USB disconnect, device number 48
[ 3153.138799][ T1043] usb 4-1: USB disconnect, device number 103
11:28:48 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x56f, 0x2, 0x2, 0x1, &(0x7f0000000040)=[{}, {}]})
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a74e576dcf18bdf4eee4c9a67cb392d4b31699a89a7aea5a6f463cc36e1613ad24fd1809f5f37168222cbbbeab7a922ae212abe3bfb5166bf6530386a7a51408ea0e439d31f831fc57bf2d1e711c4c5640e69391fd9963712ed8954f69426532186956d2ed", @ANYRES16=0x0, @ANYBLOB="2c0b27bd7000fcdbdf2503000000080002000200000008000200020000000800010003000000080001000200000022ff0100000000000800010001000000080001000000000008000200020000000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000030)

11:28:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0xa) (rerun: 64)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x1)
r5 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x80000)
ioctl$LOOP_SET_FD(r2, 0x4c00, r5) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100))
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x519800, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2})

11:28:48 executing program 0:
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x15, &(0x7f0000000000)=[{}]}) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) (async)
socketpair(0x1d, 0x800, 0x1, &(0x7f0000000040))
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async, rerun: 64)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0xb8, 0x2400) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

11:28:48 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0xc008b0bd, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x20, 0x9], 0x2, 0x80000, 0x0, <r2=>0xffffffffffffffff}) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

11:28:48 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x11}}}}}}]}}, 0x0)

11:28:48 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x1d}}}}}}]}}, 0x0)

11:28:48 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async, rerun: 32)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0xc008b0bd, 0x1}) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x20, 0x9], 0x2, 0x80000, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

11:28:48 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x56f, 0x2, 0x2, 0x1, &(0x7f0000000040)=[{}, {}]})
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a74e576dcf18bdf4eee4c9a67cb392d4b31699a89a7aea5a6f463cc36e1613ad24fd1809f5f37168222cbbbeab7a922ae212abe3bfb5166bf6530386a7a51408ea0e439d31f831fc57bf2d1e711c4c5640e69391fd9963712ed8954f69426532186956d2ed", @ANYRES16=0x0, @ANYBLOB="2c0b27bd7000fcdbdf2503000000080002000200000008000200020000000800010003000000080001000200000022ff0100000000000800010001000000080001000000000008000200020000000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000030)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x56f, 0x2, 0x2, 0x1, &(0x7f0000000040)=[{}, {}]}) (async)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a74e576dcf18bdf4eee4c9a67cb392d4b31699a89a7aea5a6f463cc36e1613ad24fd1809f5f37168222cbbbeab7a922ae212abe3bfb5166bf6530386a7a51408ea0e439d31f831fc57bf2d1e711c4c5640e69391fd9963712ed8954f69426532186956d2ed", @ANYRES16=0x0, @ANYBLOB="2c0b27bd7000fcdbdf2503000000080002000200000008000200020000000800010003000000080001000200000022ff0100000000000800010001000000080001000000000008000200020000000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000030) (async)

11:28:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
socket$netlink(0x10, 0x3, 0xa)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x1) (async)
r5 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x80000)
ioctl$LOOP_SET_FD(r2, 0x4c00, r5) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)) (async)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x519800, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2})

11:28:48 executing program 0:
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x15, &(0x7f0000000000)=[{}]})
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4)
socketpair(0x1d, 0x800, 0x1, &(0x7f0000000040)) (async, rerun: 32)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async, rerun: 32)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0xb8, 0x2400) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

11:28:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x1)
bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x7c50, 0x5, 0x101, 0x1f], 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff})
getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f0000000200)=""/189, &(0x7f00000000c0)=0xbd)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:49 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x56f, 0x2, 0x2, 0x1, &(0x7f0000000040)=[{}, {}]})
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a74e576dcf18bdf4eee4c9a67cb392d4b31699a89a7aea5a6f463cc36e1613ad24fd1809f5f37168222cbbbeab7a922ae212abe3bfb5166bf6530386a7a51408ea0e439d31f831fc57bf2d1e711c4c5640e69391fd9963712ed8954f69426532186956d2ed", @ANYRES16=0x0, @ANYBLOB="2c0b27bd7000fcdbdf2503000000080002000200000008000200020000000800010003000000080001000200000022ff0100000000000800010001000000080001000000000008000200020000000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000030)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x56f, 0x2, 0x2, 0x1, &(0x7f0000000040)=[{}, {}]}) (async)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a74e576dcf18bdf4eee4c9a67cb392d4b31699a89a7aea5a6f463cc36e1613ad24fd1809f5f37168222cbbbeab7a922ae212abe3bfb5166bf6530386a7a51408ea0e439d31f831fc57bf2d1e711c4c5640e69391fd9963712ed8954f69426532186956d2ed", @ANYRES16=0x0, @ANYBLOB="2c0b27bd7000fcdbdf2503000000080002000200000008000200020000000800010003000000080001000200000022ff0100000000000800010001000000080001000000000008000200020000000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000030) (async)

11:28:49 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0xff, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000400)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
write$damon_contexts(r2, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}], 0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)

[ 3153.832605][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3153.840410][T31872] ath9k_htc: Failed to initialize the device
11:28:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x8, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xd6, 0x3ff, 0x8be0, 0x1, 0x8c, 0xf8], 0x6, 0x80000, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)={r1})

[ 3153.874607][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000400) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
write$damon_contexts(r2, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}], 0x2) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)

[ 3153.992345][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3154.000443][ T8147] ath9k_htc: Failed to initialize the device
[ 3154.034608][ T1043] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3154.252281][ T7352] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 3154.402485][ T1043] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 3154.792623][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3154.806548][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3154.817607][ T7352] usb 6-1: Product: syz
[ 3154.822124][ T7352] usb 6-1: Manufacturer: syz
[ 3154.829368][ T7352] usb 6-1: SerialNumber: syz
[ 3154.883333][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3154.963516][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3154.983309][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3154.999264][ T1043] usb 4-1: Product: syz
[ 3155.009229][ T1043] usb 4-1: Manufacturer: syz
[ 3155.020802][ T1043] usb 4-1: SerialNumber: syz
[ 3155.073235][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3155.452619][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3155.657730][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3155.676639][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3155.708749][T11233] usb 6-1: USB disconnect, device number 49
[ 3155.716549][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3155.921631][ T8129] usb 4-1: USB disconnect, device number 104
11:28:51 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x12}}}}}}]}}, 0x0)

11:28:51 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x3e}}}}}}]}}, 0x0)

11:28:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x8, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xd6, 0x3ff, 0x8be0, 0x1, 0x8c, 0xf8], 0x6, 0x80000, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)={r1})
socket$netlink(0x10, 0x3, 0x6) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x8, 0x4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xd6, 0x3ff, 0x8be0, 0x1, 0x8c, 0xf8], 0x6, 0x80000}) (async)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)={r1}) (async)

11:28:51 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0xff, 0x4) (async, rerun: 64)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (rerun: 64)

11:28:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x1)
bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x7c50, 0x5, 0x101, 0x1f], 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff})
getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f0000000200)=""/189, &(0x7f00000000c0)=0xbd)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x1) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000140), 0x80) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x7c50, 0x5, 0x101, 0x1f], 0x5}) (async)
getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f0000000200)=""/189, &(0x7f00000000c0)=0xbd) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:28:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000400) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
write$damon_contexts(r2, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}], 0x2) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)

11:28:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x8, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xd6, 0x3ff, 0x8be0, 0x1, 0x8c, 0xf8], 0x6, 0x80000, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)={r1})

11:28:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4)

[ 3156.553291][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3156.562032][ T7352] ath9k_htc: Failed to initialize the device
11:28:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x1) (async, rerun: 32)
bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x7c50, 0x5, 0x101, 0x1f], 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff})
getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f0000000200)=""/189, &(0x7f00000000c0)=0xbd)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:51 executing program 2:
socket$netlink(0x10, 0x3, 0xe)

[ 3156.625146][T11233] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:52 executing program 0:
socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0xff, 0x4) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:28:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) (async)

[ 3156.792811][ T1043] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3156.814228][ T1043] ath9k_htc: Failed to initialize the device
[ 3156.856025][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3157.032550][T11233] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 3157.252283][ T8129] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 3157.652557][T11233] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3157.669438][T11233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3157.683711][T11233] usb 6-1: Product: syz
[ 3157.689167][T11233] usb 6-1: Manufacturer: syz
[ 3157.701714][T11233] usb 6-1: SerialNumber: syz
[ 3157.745466][T11233] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3157.802667][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3157.824010][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3157.851911][ T8129] usb 4-1: Product: syz
[ 3157.859007][ T8129] usb 4-1: Manufacturer: syz
[ 3157.875213][ T8129] usb 4-1: SerialNumber: syz
[ 3157.925116][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3158.413054][T11233] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3158.592494][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3158.630130][T14789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3158.644571][T14789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3158.668151][ T7352] usb 6-1: USB disconnect, device number 50
[ 3158.809425][T28889] usb 4-1: USB disconnect, device number 105
11:28:54 executing program 0:
socket$netlink(0x10, 0x3, 0x0)

11:28:54 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x48}}}}}}]}}, 0x0)

11:28:54 executing program 2:
socket$netlink(0x10, 0x3, 0xe)

11:28:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4)

11:28:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x8d9, 0xfff, 0x2, 0x880, 0xffffffffffffffff, 0x6b52, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48)
pipe2$watch_queue(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0xe8acc18aaea00720, 0x3, 0xa, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @map_val={0x18, 0xc, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfc, &(0x7f0000000080)=""/252, 0x41000, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x7, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, r3, 0x1]}, 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:54 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x2}}}}}}]}}, 0x0)

11:28:54 executing program 0:
socket$netlink(0x10, 0x3, 0x0)

11:28:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x13}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)

11:28:54 executing program 0:
socket$netlink(0x10, 0x3, 0x0)

11:28:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x8d9, 0xfff, 0x2, 0x880, 0xffffffffffffffff, 0x6b52, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48) (async)
pipe2$watch_queue(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0xe8acc18aaea00720, 0x3, 0xa, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @map_val={0x18, 0xc, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfc, &(0x7f0000000080)=""/252, 0x41000, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x7, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, r3, 0x1]}, 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:28:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x13}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x13}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) (async)

11:28:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x8d9, 0xfff, 0x2, 0x880, 0xffffffffffffffff, 0x6b52, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48)
pipe2$watch_queue(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0xe8acc18aaea00720, 0x3, 0xa, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @map_val={0x18, 0xc, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfc, &(0x7f0000000080)=""/252, 0x41000, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x7, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, r3, 0x1]}, 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x8d9, 0xfff, 0x2, 0x880, 0xffffffffffffffff, 0x6b52, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0xe8acc18aaea00720, 0x3, 0xa, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @map_val={0x18, 0xc, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfc, &(0x7f0000000080)=""/252, 0x41000, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x7, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, r3, 0x1]}, 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

[ 3159.513150][T11233] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3159.520875][T11233] ath9k_htc: Failed to initialize the device
[ 3159.551803][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:54 executing program 0:
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000))
r0 = socket$netlink(0x10, 0x3, 0xa)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

[ 3159.690170][ T8129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3159.701022][ T8129] ath9k_htc: Failed to initialize the device
[ 3159.740014][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3159.922401][ T7352] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 3160.122327][T28889] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 3160.452486][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3160.474075][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3160.492256][ T7352] usb 6-1: Product: syz
[ 3160.496946][ T7352] usb 6-1: Manufacturer: syz
[ 3160.501906][ T7352] usb 6-1: SerialNumber: syz
[ 3160.553486][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3160.702934][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3160.721806][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3160.735297][T28889] usb 4-1: Product: syz
[ 3160.740475][T28889] usb 4-1: Manufacturer: syz
[ 3160.750884][T28889] usb 4-1: SerialNumber: syz
[ 3160.805718][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3161.142680][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3161.352851][T14841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3161.376980][T14841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3161.396206][ T8129] usb 6-1: USB disconnect, device number 51
[ 3161.492462][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3161.707330][ T8147] usb 4-1: USB disconnect, device number 106
11:28:57 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x4c}}}}}}]}}, 0x0)

11:28:57 executing program 2:
socket$netlink(0x10, 0x3, 0xe)
socket$netlink(0x10, 0x3, 0xe) (async)

11:28:57 executing program 0:
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000))
r0 = socket$netlink(0x10, 0x3, 0xa)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) (async)
socket$netlink(0x10, 0x3, 0xa) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:28:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x13}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)

11:28:57 executing program 4:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000001040)={&(0x7f0000000000)=""/36, 0x24, <r0=>0x0, &(0x7f0000000040)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0)=r0, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001100)={0x5}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pptp(0x18, 0x1, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:57 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x3}}}}}}]}}, 0x0)

[ 3162.232258][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3162.240126][ T7352] ath9k_htc: Failed to initialize the device
11:28:57 executing program 4:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000001040)={&(0x7f0000000000)=""/36, 0x24, <r0=>0x0, &(0x7f0000000040)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0)=r0, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001100)={0x5}, 0x8) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pptp(0x18, 0x1, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

[ 3162.292759][ T8129] usb 6-1: ath9k_htc: USB layer deinitialized
11:28:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xb, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = socket$netlink(0x10, 0x3, 0xe)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1)

11:28:57 executing program 0:
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000))
r0 = socket$netlink(0x10, 0x3, 0xa)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) (async)
socket$netlink(0x10, 0x3, 0xa) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:28:57 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))

11:28:57 executing program 4:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000001040)={&(0x7f0000000000)=""/36, 0x24, <r0=>0x0, &(0x7f0000000040)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0)=r0, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001100)={0x5}, 0x8) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$pptp(0x18, 0x1, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:28:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

[ 3162.552673][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3162.587082][T28889] ath9k_htc: Failed to initialize the device
[ 3162.629939][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3162.682469][ T8129] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 3163.022501][ T8147] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 3163.272474][ T8129] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3163.291527][ T8129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3163.303584][ T8129] usb 6-1: Product: syz
[ 3163.309276][ T8129] usb 6-1: Manufacturer: syz
[ 3163.323876][ T8129] usb 6-1: SerialNumber: syz
[ 3163.375804][ T8129] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3163.623601][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3163.640981][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3163.662743][ T8147] usb 4-1: Product: syz
[ 3163.670754][ T8147] usb 4-1: Manufacturer: syz
[ 3163.687846][ T8147] usb 4-1: SerialNumber: syz
[ 3163.733537][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3164.012512][ T8129] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3164.231063][T14891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3164.258945][T14891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3164.278087][ T7352] usb 6-1: USB disconnect, device number 52
[ 3164.332394][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3164.549829][T28889] usb 4-1: USB disconnect, device number 107
11:29:00 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x68}}}}}}]}}, 0x0)

11:29:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/123, &(0x7f0000000140)=0x7b)

11:29:00 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))

11:29:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)

11:29:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040)) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xb, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = socket$netlink(0x10, 0x3, 0xe)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1)

11:29:00 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x4}}}}}}]}}, 0x0)

11:29:00 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
getsockname$netlink(r1, 0x0, &(0x7f0000000080)) (async)

11:29:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/123, &(0x7f0000000140)=0x7b)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) (async)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/123, &(0x7f0000000140)=0x7b) (async)

[ 3165.122864][ T8129] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3165.130403][ T8129] ath9k_htc: Failed to initialize the device
11:29:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

[ 3165.167291][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
11:29:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) (async)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=""/123, &(0x7f0000000140)=0x7b)

11:29:00 executing program 2:
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100))
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000000))

11:29:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6tnl0\x00', 0x3})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa40, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0xfffffffe)

[ 3165.435763][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3165.460055][ T8147] ath9k_htc: Failed to initialize the device
[ 3165.482902][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3165.542593][ T7352] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 3165.863719][T28889] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 3166.063348][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3166.084539][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3166.103015][ T7352] usb 6-1: Product: syz
[ 3166.107547][ T7352] usb 6-1: Manufacturer: syz
[ 3166.122315][ T7352] usb 6-1: SerialNumber: syz
[ 3166.183031][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3166.438143][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3166.452966][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3166.470782][T28889] usb 4-1: Product: syz
[ 3166.481064][T28889] usb 4-1: Manufacturer: syz
[ 3166.492471][T28889] usb 4-1: SerialNumber: syz
[ 3166.545992][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3166.772645][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3166.978945][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3167.001130][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3167.013092][ T3742] usb 6-1: USB disconnect, device number 53
[ 3167.212698][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3167.430543][ T8147] usb 4-1: USB disconnect, device number 108
[ 3167.832285][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3167.846195][ T7352] ath9k_htc: Failed to initialize the device
[ 3167.857152][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
11:29:03 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x6c}}}}}}]}}, 0x0)

11:29:03 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x6}}}}}}]}}, 0x0)

11:29:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xb, 0x4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0xe)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1)

11:29:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4)

11:29:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6tnl0\x00', 0x3})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa40, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0xfffffffe)

11:29:03 executing program 2:
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100))
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000000))

11:29:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) (async)

11:29:03 executing program 2:
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100))
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000000))
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000000)) (async)

11:29:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6tnl0\x00', 0x3})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa40, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0xfffffffe)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6tnl0\x00', 0x3}) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa40, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0xfffffffe) (async)

11:29:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) (async)

11:29:03 executing program 1:
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x15e)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})

11:29:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x0, 0x101})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3168.312732][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3168.320113][T28889] ath9k_htc: Failed to initialize the device
[ 3168.358681][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3168.392564][ T3742] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 3168.752295][ T8147] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 3168.952651][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3168.969919][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3168.986469][ T3742] usb 6-1: Product: syz
[ 3168.993173][ T3742] usb 6-1: Manufacturer: syz
[ 3168.998465][ T3742] usb 6-1: SerialNumber: syz
[ 3169.043559][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3169.302491][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3169.318786][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3169.330614][ T8147] usb 4-1: Product: syz
[ 3169.339691][ T8147] usb 4-1: Manufacturer: syz
[ 3169.351034][ T8147] usb 4-1: SerialNumber: syz
[ 3169.403379][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3169.652460][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3169.862362][T14963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3169.886595][T14963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3169.905368][ T7352] usb 6-1: USB disconnect, device number 54
[ 3170.012341][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3170.221087][T28889] usb 4-1: USB disconnect, device number 109
[ 3170.712410][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3170.727293][ T3742] ath9k_htc: Failed to initialize the device
11:29:06 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x74}}}}}}]}}, 0x0)

11:29:06 executing program 0:
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@xdp={0x2c, 0x6, 0x0, 0x5}, {&(0x7f00000000c0)=""/198, 0xc6}, &(0x7f00000001c0), 0x2}, 0xa0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000340))
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000300))
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)

11:29:06 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, &(0x7f00000001c0)=""/151, 0x97}, 0x40)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

11:29:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x0, 0x101}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:29:06 executing program 1:
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x15e)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x15e) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async)

11:29:06 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x7}}}}}}]}}, 0x0)

[ 3170.762514][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
11:29:06 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, &(0x7f00000001c0)=""/151, 0x97}, 0x40)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, &(0x7f00000001c0)=""/151, 0x97}, 0x40) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)

11:29:06 executing program 1:
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x15e)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})

11:29:06 executing program 0:
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@xdp={0x2c, 0x6, 0x0, 0x5}, {&(0x7f00000000c0)=""/198, 0xc6}, &(0x7f00000001c0), 0x2}, 0xa0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async, rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async, rerun: 64)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000340))
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000300)) (async)
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)

11:29:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x0, 0x101}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:29:06 executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, &(0x7f00000001c0)=""/151, 0x97}, 0x40) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

11:29:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x28)

[ 3171.032558][ T8147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3171.059367][ T8147] ath9k_htc: Failed to initialize the device
[ 3171.076446][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3171.162256][ T7352] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 3171.452263][T28889] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 3171.682598][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3171.712246][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3171.722264][ T7352] usb 6-1: Product: syz
[ 3171.728222][ T7352] usb 6-1: Manufacturer: syz
[ 3171.742241][ T7352] usb 6-1: SerialNumber: syz
[ 3171.793244][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3172.032505][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3172.051037][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3172.064772][T28889] usb 4-1: Product: syz
[ 3172.070325][T28889] usb 4-1: Manufacturer: syz
[ 3172.085284][T28889] usb 4-1: SerialNumber: syz
[ 3172.143509][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3172.382528][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3172.591674][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3172.610891][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3172.632928][ T8147] usb 6-1: USB disconnect, device number 55
[ 3172.803965][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3173.018043][T10021] usb 4-1: USB disconnect, device number 110
[ 3173.432324][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3173.441400][ T7352] ath9k_htc: Failed to initialize the device
[ 3173.451001][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
11:29:08 executing program 0:
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@xdp={0x2c, 0x6, 0x0, 0x5}, {&(0x7f00000000c0)=""/198, 0xc6}, &(0x7f00000001c0), 0x2}, 0xa0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000340))
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000300)) (async)
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)

11:29:08 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x0, 0x1, 0x401, 0x80000000, 0x55, 0x6, 0x1ff, 0x9], 0x9, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x4, 0x18, [0x7, 0x400, 0x6, 0xe205, 0x4, 0x2]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0)
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:29:08 executing program 2:
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

11:29:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x28)

11:29:08 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x9}}}}}}]}}, 0x0)

11:29:08 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x7a}}}}}}]}}, 0x0)

11:29:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x28) (async)

11:29:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x9a28, 0x4)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x952f6232ed0c3669, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/194, 0xc2}, &(0x7f0000000200), 0x1}, 0x20)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1}, 0x10)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x2, 0x1, 0x3, 0x5, 0x10000], 0x100, 0x1})
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x101400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x3, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:08 executing program 2:
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (rerun: 32)

11:29:08 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x0, 0x1, 0x401, 0x80000000, 0x55, 0x6, 0x1ff, 0x9], 0x9, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x4, 0x18, [0x7, 0x400, 0x6, 0xe205, 0x4, 0x2]}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) (async, rerun: 32)
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) (async, rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (rerun: 64)

11:29:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x9a28, 0x4)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x952f6232ed0c3669, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/194, 0xc2}, &(0x7f0000000200), 0x1}, 0x20)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1}, 0x10)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x2, 0x1, 0x3, 0x5, 0x10000], 0x100, 0x1})
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x101400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x3, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x9a28, 0x4) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x952f6232ed0c3669, 0x0) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6], 0x1, 0x800}) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async)
socket$rds(0x15, 0x5, 0x0) (async)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/194, 0xc2}, &(0x7f0000000200), 0x1}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1}, 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x2, 0x1, 0x3, 0x5, 0x10000], 0x100, 0x1}) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x101400, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x3, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:29:09 executing program 1:
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x0, 0x0, r0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4d, 0x80000000], 0x2, 0x1000, 0x0, <r2=>0xffffffffffffffff})
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x1000002)
keyctl$search(0xa, r0, &(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r0)
r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r4)
keyctl$search(0xa, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x3}, r4)

11:29:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x9a28, 0x4) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x952f6232ed0c3669, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/194, 0xc2}, &(0x7f0000000200), 0x1}, 0x20) (async)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1}, 0x10)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x2, 0x1, 0x3, 0x5, 0x10000], 0x100, 0x1}) (async)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x101400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x3, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:09 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x0, 0x1, 0x401, 0x80000000, 0x55, 0x6, 0x1ff, 0x9], 0x9, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x4, 0x18, [0x7, 0x400, 0x6, 0xe205, 0x4, 0x2]})
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0)
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:29:09 executing program 1:
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x0, 0x0, r0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4d, 0x80000000], 0x2, 0x1000, 0x0, <r2=>0xffffffffffffffff})
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x1000002)
keyctl$search(0xa, r0, &(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r0) (async)
r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r4) (async)
keyctl$search(0xa, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x3}, r4)

11:29:09 executing program 2:
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

[ 3173.842807][T28889] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3173.858242][T28889] ath9k_htc: Failed to initialize the device
[ 3173.897933][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3173.982379][ T8147] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 3174.282342][T10021] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 3174.622964][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3174.637265][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3174.649456][ T8147] usb 6-1: Product: syz
[ 3174.655160][ T8147] usb 6-1: Manufacturer: syz
[ 3174.661962][ T8147] usb 6-1: SerialNumber: syz
[ 3174.733201][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3174.802636][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3174.815509][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3174.825749][T10021] usb 4-1: Product: syz
[ 3174.831483][T10021] usb 4-1: Manufacturer: syz
[ 3174.837815][T10021] usb 4-1: SerialNumber: syz
[ 3174.893263][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3175.363103][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3175.472509][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3175.569037][T15041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3175.591875][T15041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3175.613872][ T1043] usb 6-1: USB disconnect, device number 56
[ 3175.677746][T28889] usb 4-1: USB disconnect, device number 111
11:29:11 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0xe}}}}}}]}}, 0x0)

11:29:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000))

11:29:11 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5d7, 0x5, 0xffffffff})
getsockname$netlink(r1, 0x0, &(0x7f0000000080))

11:29:11 executing program 2:
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)={0xffffffff, 0x10, [0xe05f, 0x48, 0xbfe7, 0x0]})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x30, 0x386a}, 0x10)

11:29:11 executing program 1:
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x0, 0x0, r0) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4d, 0x80000000], 0x2, 0x1000, 0x0, <r2=>0xffffffffffffffff})
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x1000002) (async)
keyctl$search(0xa, r0, &(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r0)
r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r4)
keyctl$search(0xa, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x3}, r4)

11:29:11 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x2}}}}}}]}}, 0x0)

11:29:11 executing program 2:
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)={0xffffffff, 0x10, [0xe05f, 0x48, 0xbfe7, 0x0]})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x30, 0x386a}, 0x10)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)={0xffffffff, 0x10, [0xe05f, 0x48, 0xbfe7, 0x0]}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x30, 0x386a}, 0x10) (async)

11:29:11 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5d7, 0x5, 0xffffffff})
getsockname$netlink(r1, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5d7, 0x5, 0xffffffff}) (async)
getsockname$netlink(r1, 0x0, &(0x7f0000000080)) (async)

11:29:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000))

11:29:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:11 executing program 2:
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)={0xffffffff, 0x10, [0xe05f, 0x48, 0xbfe7, 0x0]}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x30, 0x386a}, 0x10)

[ 3176.392259][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3176.425186][ T8147] ath9k_htc: Failed to initialize the device
[ 3176.467780][ T1043] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3176.552457][T10021] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 3176.561431][T10021] ath9k_htc: Failed to initialize the device
[ 3176.582819][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3176.872829][ T1043] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 3176.962730][T28889] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 3177.332379][T28889] usb 4-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config
[ 3177.348982][T28889] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 3177.364912][T28889] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3177.462494][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3177.476576][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3177.490296][ T1043] usb 6-1: Product: syz
[ 3177.495338][ T1043] usb 6-1: Manufacturer: syz
[ 3177.500160][ T1043] usb 6-1: SerialNumber: syz
[ 3177.542422][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3177.552942][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3177.565976][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3177.580294][T28889] usb 4-1: Product: syz
[ 3177.590463][T28889] usb 4-1: Manufacturer: syz
[ 3177.597889][T28889] usb 4-1: SerialNumber: syz
[ 3177.645497][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3178.242743][ T1043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3178.304715][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3178.318717][T28889] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3178.328250][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3178.448222][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3178.466269][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3178.487297][ T3699] usb 6-1: USB disconnect, device number 57
[ 3178.543162][ T3742] usb 4-1: USB disconnect, device number 112
11:29:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000))

11:29:14 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10281, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x3, 0x40, 0x8, r1, 0xd05d, '\x00', 0x0, r2, 0x5, 0x1, 0x4, 0x8}, 0x48)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x5)
syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x101902)

11:29:14 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async, rerun: 32)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) (rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5d7, 0x5, 0xffffffff}) (async)
getsockname$netlink(r1, 0x0, &(0x7f0000000080))

11:29:14 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0xf}}}}}}]}}, 0x0)

11:29:14 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x3}}}}}}]}}, 0x0)

11:29:14 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3ff, 0x2, 0x3ff, 0x4], 0x4, 0x80800, <r0=>0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r1})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/184)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x200000)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r0})
openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x56d280, 0x101)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01002200ffaaaaaaaaaaab"])

11:29:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$pptp(0x18, 0x1, 0x2)

11:29:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3179.272946][ T1043] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3179.280790][ T1043] ath9k_htc: Failed to initialize the device
11:29:14 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3ff, 0x2, 0x3ff, 0x4], 0x4, 0x80800, <r0=>0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r1})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/184)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x200000)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r0})
openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x56d280, 0x101)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01002200ffaaaaaaaaaaab"])
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3ff, 0x2, 0x3ff, 0x4], 0x4, 0x80800}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r1}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/184) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) (async)
syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x200000) (async)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r0}) (async)
openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x56d280, 0x101) (async)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01002200ffaaaaaaaaaaab"]) (async)

11:29:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
socket$pptp(0x18, 0x1, 0x2)

[ 3179.320764][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
11:29:14 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10281, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x3, 0x40, 0x8, r1, 0xd05d, '\x00', 0x0, r2, 0x5, 0x1, 0x4, 0x8}, 0x48)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x5)
syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x101902)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10281, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x3, 0x40, 0x8, r1, 0xd05d, '\x00', 0x0, r2, 0x5, 0x1, 0x4, 0x8}, 0x48) (async)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) (async)
socket$netlink(0x10, 0x3, 0x5) (async)
syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x101902) (async)

11:29:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:29:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$pptp(0x18, 0x1, 0x2)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
socket$pptp(0x18, 0x1, 0x2) (async)

[ 3179.452426][T10021] usb 4-1: new high-speed USB device number 113 using dummy_hcd
11:29:14 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3ff, 0x2, 0x3ff, 0x4], 0x4, 0x80800, <r0=>0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r1})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/184)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x200000)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r0})
openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x56d280, 0x101)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01002200ffaaaaaaaaaaab"])
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3ff, 0x2, 0x3ff, 0x4], 0x4, 0x80800}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r1}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/184) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) (async)
syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x200000) (async)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r0}) (async)
openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x56d280, 0x101) (async)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01002200ffaaaaaaaaaaab"]) (async)

[ 3179.693329][ T3699] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 3179.822813][T10021] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3179.843247][T10021] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[ 3179.866005][T10021] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3180.042575][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3180.058313][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3180.068332][T10021] usb 4-1: Product: syz
[ 3180.073734][T10021] usb 4-1: Manufacturer: syz
[ 3180.078398][T10021] usb 4-1: SerialNumber: syz
[ 3180.123180][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3180.242857][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3180.260334][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3180.277426][ T3699] usb 6-1: Product: syz
[ 3180.284410][ T3699] usb 6-1: Manufacturer: syz
[ 3180.290087][ T3699] usb 6-1: SerialNumber: syz
[ 3180.343559][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3180.703420][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3180.726323][T10021] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3180.755197][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3180.924121][ T3699] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3180.936721][T31872] usb 4-1: USB disconnect, device number 113
[ 3181.128174][T15127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3181.148531][T15127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3181.160481][T31872] usb 6-1: USB disconnect, device number 58
11:29:17 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x10}}}}}}]}}, 0x0)

11:29:17 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10281, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x3, 0x40, 0x8, r1, 0xd05d, '\x00', 0x0, r2, 0x5, 0x1, 0x4, 0x8}, 0x48)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x5)
syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x101902)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10281, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x3, 0x40, 0x8, r1, 0xd05d, '\x00', 0x0, r2, 0x5, 0x1, 0x4, 0x8}, 0x48) (async)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) (async)
socket$netlink(0x10, 0x3, 0x5) (async)
syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x101902) (async)

11:29:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcab}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004011)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x10b603)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x800})
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

11:29:17 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x4}}}}}}]}}, 0x0)

11:29:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcab}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004011) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x10b603)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x800})
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

11:29:17 executing program 2:
socket$netlink(0x10, 0x3, 0xf)

11:29:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async)

11:29:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x10b603)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x800})
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x9) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x10b603) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x800}) (async)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

[ 3181.992332][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3182.010316][ T3699] ath9k_htc: Failed to initialize the device
[ 3182.038462][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3182.045118][T10021] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 3182.412563][T31872] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 3182.423271][T10021] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3182.434524][T10021] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping
[ 3182.448099][T10021] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3182.622520][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3182.636230][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3182.646337][T10021] usb 4-1: Product: syz
[ 3182.652620][T10021] usb 4-1: Manufacturer: syz
[ 3182.657535][T10021] usb 4-1: SerialNumber: syz
[ 3182.703840][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3182.962905][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3182.992229][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3183.001523][T31872] usb 6-1: Product: syz
[ 3183.007469][T31872] usb 6-1: Manufacturer: syz
[ 3183.014250][T31872] usb 6-1: SerialNumber: syz
[ 3183.063391][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3183.282383][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3183.296654][T10021] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3183.308194][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3183.493138][ T3742] usb 4-1: USB disconnect, device number 114
[ 3183.632402][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3183.845393][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3183.860856][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3183.873258][T10021] usb 6-1: USB disconnect, device number 59
11:29:19 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x0}}}}}}]}}, 0x0)

11:29:19 executing program 2:
socket$netlink(0x10, 0x3, 0xf)

11:29:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcab}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004011) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (rerun: 32)

11:29:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x6)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x40088)

11:29:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x12)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:19 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x5}}}}}}]}}, 0x0)

11:29:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x6)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async, rerun: 64)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) (async, rerun: 64)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x40088)

11:29:19 executing program 2:
socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0xf) (async)

11:29:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x12)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x12) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:29:19 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000000), 0x80)

11:29:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x6) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x40088)

11:29:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4)

[ 3184.712494][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3184.733630][ T7352] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 3184.753584][T31872] ath9k_htc: Failed to initialize the device
[ 3184.768087][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3185.122922][ T7352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3185.142248][T10021] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 3185.162364][ T7352] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping
[ 3185.176957][ T7352] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3185.352572][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3185.376995][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3185.396550][ T7352] usb 4-1: Product: syz
[ 3185.406437][ T7352] usb 4-1: Manufacturer: syz
[ 3185.418719][ T7352] usb 4-1: SerialNumber: syz
[ 3185.463994][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3185.692610][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3185.714987][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3185.729826][T10021] usb 6-1: Product: syz
[ 3185.737275][T10021] usb 6-1: Manufacturer: syz
[ 3185.748810][T10021] usb 6-1: SerialNumber: syz
[ 3185.803913][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3186.032374][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3186.048908][ T7352] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3186.056592][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3186.244883][T28889] usb 4-1: USB disconnect, device number 115
[ 3186.382587][T10021] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3186.591321][T15217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3186.612538][T15217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3186.632336][T31872] usb 6-1: USB disconnect, device number 60
11:29:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x6, 0xa, 0x80000000, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048810)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140)=0x8, 0x4)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc)
socketpair(0x2a, 0x80000, 0xffff, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname$netlink(r4, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:29:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x12)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:22 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000000), 0x80)

11:29:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4)

11:29:22 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x6}}}}}}]}}, 0x0)

11:29:22 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x2}}}}}}]}}, 0x0)

11:29:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4)

11:29:22 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80)

11:29:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair(0x6, 0xa, 0x80000000, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048810)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140)=0x8, 0x4)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc)
socketpair(0x2a, 0x80000, 0xffff, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname$netlink(r4, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:29:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/93, &(0x7f00000000c0)=0x5d)

11:29:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000200)=0xb, 0x4)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'pim6reg0\x00'})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x8, 0xe1, 0x4}, {0x8ec, 0x6, 0x9, 0x200}, {0x6, 0x3, 0x7f, 0x7}, {0xd9, 0xaf, 0xd3, 0xffffffde}, {0x2fd0, 0x0, 0x7, 0xbc7}, {0x2, 0x4, 0x0, 0x5}, {0x8, 0x1, 0x6, 0x3}, {0x0, 0x40, 0x40, 0x3be}]})
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'bond_slave_0\x00', @broadcast})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x7f, 0x9, 0x7}, 0x10)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0))

11:29:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x0, 0xc0000, 0xca1}, 0x10)

11:29:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/93, &(0x7f00000000c0)=0x5d)
socket$netlink(0x10, 0x3, 0x10) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/93, &(0x7f00000000c0)=0x5d) (async)

11:29:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x6, 0xa, 0x80000000, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048810) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140)=0x8, 0x4) (async)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) (async)
socketpair(0x2a, 0x80000, 0xffff, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname$netlink(r4, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3187.432470][T10021] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3187.448172][T10021] ath9k_htc: Failed to initialize the device
11:29:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x0, 0xc0000, 0xca1}, 0x10)

11:29:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000200)=0xb, 0x4)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'pim6reg0\x00'})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x8, 0xe1, 0x4}, {0x8ec, 0x6, 0x9, 0x200}, {0x6, 0x3, 0x7f, 0x7}, {0xd9, 0xaf, 0xd3, 0xffffffde}, {0x2fd0, 0x0, 0x7, 0xbc7}, {0x2, 0x4, 0x0, 0x5}, {0x8, 0x1, 0x6, 0x3}, {0x0, 0x40, 0x40, 0x3be}]})
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'bond_slave_0\x00', @broadcast})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x7f, 0x9, 0x7}, 0x10)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000200)=0xb, 0x4) (async)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'pim6reg0\x00'}) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x8, 0xe1, 0x4}, {0x8ec, 0x6, 0x9, 0x200}, {0x6, 0x3, 0x7f, 0x7}, {0xd9, 0xaf, 0xd3, 0xffffffde}, {0x2fd0, 0x0, 0x7, 0xbc7}, {0x2, 0x4, 0x0, 0x5}, {0x8, 0x1, 0x6, 0x3}, {0x0, 0x40, 0x40, 0x3be}]}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'bond_slave_0\x00', @broadcast}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x7f, 0x9, 0x7}, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)) (async)

[ 3187.475848][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3187.502505][ T7352] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 3187.842318][T31872] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 3187.872347][ T7352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3187.884992][ T7352] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[ 3187.909582][ T7352] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3188.092322][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3188.102927][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3188.111207][ T7352] usb 4-1: Product: syz
[ 3188.116750][ T7352] usb 4-1: Manufacturer: syz
[ 3188.124099][ T7352] usb 4-1: SerialNumber: syz
[ 3188.173742][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3188.363118][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3188.379671][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3188.397708][T31872] usb 6-1: Product: syz
[ 3188.406918][T31872] usb 6-1: Manufacturer: syz
[ 3188.411985][T31872] usb 6-1: SerialNumber: syz
[ 3188.463281][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3188.742490][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3188.759287][ T7352] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3188.781235][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3188.963475][ T3742] usb 4-1: USB disconnect, device number 116
[ 3189.044412][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3189.274742][T15245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3189.304005][T15245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3189.326296][ T7352] usb 6-1: USB disconnect, device number 61
11:29:24 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x7}}}}}}]}}, 0x0)

11:29:25 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x4}}}}}}]}}, 0x0)

11:29:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/93, &(0x7f00000000c0)=0x5d)

11:29:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x0, 0xc0000, 0xca1}, 0x10)

11:29:25 executing program 4:
socketpair(0x6, 0x1, 0x9, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:29:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000200)=0xb, 0x4) (async)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'pim6reg0\x00'}) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x8, 0xe1, 0x4}, {0x8ec, 0x6, 0x9, 0x200}, {0x6, 0x3, 0x7f, 0x7}, {0xd9, 0xaf, 0xd3, 0xffffffde}, {0x2fd0, 0x0, 0x7, 0xbc7}, {0x2, 0x4, 0x0, 0x5}, {0x8, 0x1, 0x6, 0x3}, {0x0, 0x40, 0x40, 0x3be}]}) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'bond_slave_0\x00', @broadcast}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x7f, 0x9, 0x7}, 0x10) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0))

[ 3189.812475][ T3742] usb 4-1: new high-speed USB device number 117 using dummy_hcd
11:29:25 executing program 4:
socketpair(0x6, 0x1, 0x9, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x9) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:29:25 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xcc000, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fcdbdf250400000008000b00060000000a000900aaaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8015}, 0x400c008)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100))
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0), 0x4)

11:29:25 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x4], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xffff, 0x6, 0x9, 0x890, 0x1, 0xc0000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000100000018000000070000000000000006000000950000000000000095000000000000005f93feff080d00009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0x1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000600)={0x0, 0x371})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x8e51a58f)

11:29:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

11:29:25 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xcc000, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fcdbdf250400000008000b00060000000a000900aaaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8015}, 0x400c008) (async)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) (async)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0), 0x4)

[ 3190.072567][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3190.080765][T31872] ath9k_htc: Failed to initialize the device
11:29:25 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x4], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xffff, 0x6, 0x9, 0x890, 0x1, 0xc0000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000100000018000000070000000000000006000000950000000000000095000000000000005f93feff080d00009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0x1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000600)={0x0, 0x371})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x8e51a58f)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x4], 0x1, 0x800}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xffff, 0x6, 0x9, 0x890, 0x1, 0xc0000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000100000018000000070000000000000006000000950000000000000095000000000000005f93feff080d00009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0x1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000600)={0x0, 0x371}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x8e51a58f) (async)

[ 3190.119629][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3190.192569][ T3742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3190.213148][ T3742] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3190.442334][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3190.452768][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3190.461619][ T3742] usb 4-1: Product: syz
[ 3190.472388][ T3742] usb 4-1: Manufacturer: syz
[ 3190.477545][ T3742] usb 4-1: SerialNumber: syz
[ 3190.497533][ T7352] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 3190.533527][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3191.023134][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3191.037994][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3191.057033][ T7352] usb 6-1: Product: syz
[ 3191.061650][ T7352] usb 6-1: Manufacturer: syz
[ 3191.069519][ T7352] usb 6-1: SerialNumber: syz
[ 3191.113163][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3191.232401][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3191.412590][ T3742] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3191.425804][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3191.453781][T28889] usb 4-1: USB disconnect, device number 117
[ 3191.692446][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:29:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xcc000, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fcdbdf250400000008000b00060000000a000900aaaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8015}, 0x400c008)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100))
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0), 0x4)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xcc000, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000ffdbdf250400000008000b000400000005002e000000b1d0d53bd1a7a5ed00000500330000000000050038000300", @ANYRES32=0x0, @ANYBLOB="080039000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fcdbdf250400000008000b00060000000a000900aaaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8015}, 0x400c008) (async)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) (async)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0), 0x4) (async)

[ 3191.912077][T15293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3191.941935][T15293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3191.998318][ T8147] usb 6-1: USB disconnect, device number 62
11:29:27 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x5}}}}}}]}}, 0x0)

11:29:27 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x4], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xffff, 0x6, 0x9, 0x890, 0x1, 0xc0000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000100000018000000070000000000000006000000950000000000000095000000000000005f93feff080d00009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0x1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000600)={0x0, 0x371})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x8e51a58f)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x4], 0x1, 0x800}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xffff, 0x6, 0x9, 0x890, 0x1, 0xc0000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000100000018000000070000000000000006000000950000000000000095000000000000005f93feff080d00009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0x1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000600)={0x0, 0x371}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x8e51a58f) (async)

11:29:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

11:29:27 executing program 4:
socketpair(0x6, 0x1, 0x9, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
socketpair(0x6, 0x1, 0x9, &(0x7f0000000000)) (async)
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x9) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)

11:29:27 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x8}}}}}}]}}, 0x0)

11:29:27 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x120f122a1d552ca8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xfffffc01, 0x4)

11:29:27 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x120f122a1d552ca8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xfffffc01, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
socket$netlink(0x10, 0x3, 0x120f122a1d552ca8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1}) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xfffffc01, 0x4) (async)

11:29:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

11:29:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfff, 0xffffffe1, 0x4})

11:29:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socketpair(0x25, 0x804, 0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg$can_bcm(r1, &(0x7f0000001280)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000140)=""/211, 0xd3}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x12143)
connect$can_bcm(r1, &(0x7f00000012c0), 0x10)

11:29:28 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
r0 = socket$netlink(0x10, 0x3, 0x120f122a1d552ca8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1}) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xfffffc01, 0x4)

11:29:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x13)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffe15)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000))

[ 3192.792452][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3192.808132][ T7352] ath9k_htc: Failed to initialize the device
[ 3192.832294][T31872] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 3192.857112][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3193.212419][T31872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3193.226539][T31872] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3193.242803][ T8147] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 3193.392420][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3193.414424][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3193.424772][T31872] usb 4-1: Product: syz
[ 3193.429540][T31872] usb 4-1: Manufacturer: syz
[ 3193.435159][T31872] usb 4-1: SerialNumber: syz
[ 3193.483341][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3193.802838][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3193.815579][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3193.827524][ T8147] usb 6-1: Product: syz
[ 3193.833971][ T8147] usb 6-1: Manufacturer: syz
[ 3193.842807][ T8147] usb 6-1: SerialNumber: syz
[ 3193.913101][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3194.052445][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3194.223620][T31872] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3194.235890][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3194.263545][ T3742] usb 4-1: USB disconnect, device number 118
[ 3194.574332][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3194.779052][T15342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3194.790471][T15342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3194.801866][ T7352] usb 6-1: USB disconnect, device number 63
11:29:30 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x6}}}}}}]}}, 0x0)

11:29:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socketpair(0x25, 0x804, 0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg$can_bcm(r1, &(0x7f0000001280)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000140)=""/211, 0xd3}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x12143)
connect$can_bcm(r1, &(0x7f00000012c0), 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socketpair(0x25, 0x804, 0x3, &(0x7f0000000000)) (async)
recvmsg$can_bcm(r1, &(0x7f0000001280)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000140)=""/211, 0xd3}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x12143) (async)
connect$can_bcm(r1, &(0x7f00000012c0), 0x10) (async)

11:29:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfff, 0xffffffe1, 0x4})
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfff, 0xffffffe1, 0x4}) (async)

11:29:30 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000050)

11:29:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x13)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffe15)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x13) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffe15) (async)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) (async)

11:29:30 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xa}}}}}}]}}, 0x0)

11:29:30 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000050)

11:29:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socketpair(0x25, 0x804, 0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg$can_bcm(r1, &(0x7f0000001280)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000140)=""/211, 0xd3}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x12143) (async)
connect$can_bcm(r1, &(0x7f00000012c0), 0x10)

11:29:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfff, 0xffffffe1, 0x4})
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfff, 0xffffffe1, 0x4}) (async)

11:29:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x13)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffe15)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000))

11:29:30 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000050)

11:29:30 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=""/211, &(0x7f0000000140)=0xd3)
pipe2$watch_queue(&(0x7f0000000100), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0xfffffd2a)

[ 3195.592370][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3195.624670][ T8147] ath9k_htc: Failed to initialize the device
[ 3195.652929][T10021] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 3195.662360][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3196.032361][ T7352] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 3196.042542][T10021] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3196.062385][T10021] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3196.242683][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3196.254919][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3196.264512][T10021] usb 4-1: Product: syz
[ 3196.269145][T10021] usb 4-1: Manufacturer: syz
[ 3196.274827][T10021] usb 4-1: SerialNumber: syz
[ 3196.323285][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3196.582568][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3196.592056][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3196.609802][ T7352] usb 6-1: Product: syz
[ 3196.615705][ T7352] usb 6-1: Manufacturer: syz
[ 3196.621315][ T7352] usb 6-1: SerialNumber: syz
[ 3196.685158][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3196.892347][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3197.072567][T10021] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3197.080123][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3197.103164][ T8147] usb 4-1: USB disconnect, device number 119
[ 3197.262649][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3197.480153][T15386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3197.499075][T15386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3197.514462][ T8147] usb 6-1: USB disconnect, device number 64
11:29:33 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

11:29:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x965e, 0x1, 0x1, 0x101, 0x1], 0x6, 0x80800, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080))

11:29:33 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=""/211, &(0x7f0000000140)=0xd3) (async)
pipe2$watch_queue(&(0x7f0000000100), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2) (async)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0xfffffd2a)

11:29:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x14)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0))
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:33 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xb}}}}}}]}}, 0x0)

11:29:33 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x7}}}}}}]}}, 0x0)

11:29:33 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)

11:29:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x965e, 0x1, 0x1, 0x101, 0x1], 0x6, 0x80800, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080))

11:29:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x14) (async, rerun: 64)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) (rerun: 64)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:33 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=""/211, &(0x7f0000000140)=0xd3) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000100), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2) (async)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0xfffffd2a)

11:29:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x965e, 0x1, 0x1, 0x101, 0x1], 0x6, 0x80800, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080))

11:29:33 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

11:29:33 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)

11:29:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x14) (async, rerun: 32)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) (rerun: 32)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

[ 3198.312508][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3198.331632][ T7352] ath9k_htc: Failed to initialize the device
11:29:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/67)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:29:33 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/65, 0x41, 0x0, &(0x7f0000000840)=""/4096, 0x1000}}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x818, 0x4, {0x77359400}, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, "c6b117e5478cceb5"}}, 0x48}, 0x1, 0x0, 0x0, 0x56}, 0x4000080)

[ 3198.370003][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3198.372422][T10021] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 3198.752354][T10021] usb 4-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config
[ 3198.763621][T10021] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3198.791541][ T8147] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 3198.942546][T10021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3198.963395][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3198.981766][T10021] usb 4-1: Product: syz
[ 3198.987652][T10021] usb 4-1: Manufacturer: syz
[ 3198.999246][T10021] usb 4-1: SerialNumber: syz
[ 3199.043159][T10021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3199.363545][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3199.384613][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3199.403688][ T8147] usb 6-1: Product: syz
[ 3199.409319][ T8147] usb 6-1: Manufacturer: syz
[ 3199.414709][ T8147] usb 6-1: SerialNumber: syz
[ 3199.465023][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3199.612651][T10021] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3199.792699][T10021] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3199.801183][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3199.838955][ T3742] usb 4-1: USB disconnect, device number 120
[ 3200.182481][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
11:29:35 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xc}}}}}}]}}, 0x0)

[ 3200.398543][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3200.415556][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3200.428787][ T3742] usb 6-1: USB disconnect, device number 65
[ 3200.662470][T31872] usb 4-1: new high-speed USB device number 121 using dummy_hcd
11:29:36 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x9}}}}}}]}}, 0x0)

11:29:36 executing program 0:
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:36 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)

11:29:36 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/67) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:29:36 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/65, 0x41, 0x0, &(0x7f0000000840)=""/4096, 0x1000}}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x818, 0x4, {0x77359400}, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, "c6b117e5478cceb5"}}, 0x48}, 0x1, 0x0, 0x0, 0x56}, 0x4000080)

11:29:36 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/65, 0x41, 0x0, &(0x7f0000000840)=""/4096, 0x1000}}, 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x818, 0x4, {0x77359400}, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, "c6b117e5478cceb5"}}, 0x48}, 0x1, 0x0, 0x0, 0x56}, 0x4000080)

11:29:36 executing program 0:
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:29:36 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)

11:29:36 executing program 4:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/67) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

[ 3201.032711][T31872] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3201.094310][T31872] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
11:29:36 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

11:29:36 executing program 0:
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

[ 3201.272282][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3201.279551][ T8147] ath9k_htc: Failed to initialize the device
[ 3201.300407][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3201.313847][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3201.334878][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3201.351971][T31872] usb 4-1: Product: syz
[ 3201.359659][T31872] usb 4-1: Manufacturer: syz
[ 3201.370181][T31872] usb 4-1: SerialNumber: syz
[ 3201.413198][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3201.702383][ T3742] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 3201.992453][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3202.164013][T31872] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3202.179638][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3202.224078][ T3699] usb 4-1: USB disconnect, device number 121
[ 3202.302503][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3202.322215][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3202.342556][ T3742] usb 6-1: Product: syz
[ 3202.347355][ T3742] usb 6-1: Manufacturer: syz
[ 3202.374277][ T3742] usb 6-1: SerialNumber: syz
[ 3202.432979][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:29:38 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xd}}}}}}]}}, 0x0)

[ 3203.032588][ T3699] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 3203.182308][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3203.388922][T15462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3203.402665][ T3699] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[ 3203.423358][T15462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3203.437289][ T3699] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3203.461521][T31872] usb 6-1: USB disconnect, device number 66
[ 3203.612954][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3203.634332][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3203.651941][ T3699] usb 4-1: Product: syz
[ 3203.668456][ T3699] usb 4-1: Manufacturer: syz
[ 3203.688721][ T3699] usb 4-1: SerialNumber: syz
[ 3203.734194][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:29:39 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0xe}}}}}}]}}, 0x0)

11:29:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fff, 0x7e1c2e10, 0x7ff, 0x7, 0x6, 0x5], 0x6, 0x800, 0x0, <r3=>0xffffffffffffffff})
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0xaa)
getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0xac000, 0x32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
r5 = geteuid()
ioctl$TUNSETOWNER(r4, 0x400454cc, r5)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x760, 0x4)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000), 0x1)

11:29:39 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

11:29:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x7)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x8e66})

11:29:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0xac000, 0x32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
r5 = geteuid()
ioctl$TUNSETOWNER(r4, 0x400454cc, r5)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x760, 0x4)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000), 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0xac000, 0x32) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x2) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
geteuid() (async)
ioctl$TUNSETOWNER(r4, 0x400454cc, r5) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x760, 0x4) (async)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000), 0x1) (async)

11:29:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fff, 0x7e1c2e10, 0x7ff, 0x7, 0x6, 0x5], 0x6, 0x800, 0x0, <r3=>0xffffffffffffffff})
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0xaa)
getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fff, 0x7e1c2e10, 0x7ff, 0x7, 0x6, 0x5], 0x6, 0x800}) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0xaa) (async)
getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:29:39 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

[ 3204.073501][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 3204.081505][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
11:29:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x7)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x8e66})

11:29:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fff, 0x7e1c2e10, 0x7ff, 0x7, 0x6, 0x5], 0x6, 0x800, 0x0, <r3=>0xffffffffffffffff})
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0xaa)
getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fff, 0x7e1c2e10, 0x7ff, 0x7, 0x6, 0x5], 0x6, 0x800}) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0xaa) (async)
getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:29:39 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
socket$netlink(0x10, 0x3, 0x9)

[ 3204.232718][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3204.253034][ T3742] ath9k_htc: Failed to initialize the device
[ 3204.291323][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3204.322829][ T3699] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3204.527717][ T3699] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3204.540448][T28889] usb 4-1: USB disconnect, device number 122
[ 3204.558793][T28889] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3204.682292][T31872] usb 6-1: new high-speed USB device number 67 using dummy_hcd
11:29:40 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xe}}}}}}]}}, 0x0)

[ 3205.202420][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3205.221326][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3205.231500][T31872] usb 6-1: Product: syz
[ 3205.245939][T31872] usb 6-1: Manufacturer: syz
[ 3205.255617][T31872] usb 6-1: SerialNumber: syz
[ 3205.308017][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3205.412324][T28889] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 3205.862350][T28889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3205.892381][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3205.892653][T28889] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3206.111688][T15496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3206.131046][T15496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3206.151199][ T3699] usb 6-1: USB disconnect, device number 67
[ 3206.172728][T28889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3206.186260][T28889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3206.196686][T28889] usb 4-1: Product: syz
[ 3206.206506][T28889] usb 4-1: Manufacturer: syz
[ 3206.216411][T28889] usb 4-1: SerialNumber: syz
[ 3206.264589][T28889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:29:42 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0xf}}}}}}]}}, 0x0)

11:29:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000040))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x30, 0x4)

11:29:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async, rerun: 32)
r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0xac000, 0x32) (rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x2)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
r5 = geteuid()
ioctl$TUNSETOWNER(r4, 0x400454cc, r5) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x760, 0x4)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000), 0x1)

11:29:42 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$netlink(0x10, 0x3, 0x9)

11:29:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x7)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x8e66})

11:29:42 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x9) (rerun: 64)

11:29:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000040))
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x30, 0x4)

11:29:42 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x713, 0x2000)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0)

11:29:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000040)) (async, rerun: 32)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (rerun: 32)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x30, 0x4)

11:29:42 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x713, 0x2000)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0)

11:29:42 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x9, 0xcf1a, 0xd643, 0x5, 0x8000000000000001, 0x8000000000000001, 0x7, 0x7}, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x4, 0x0, 0x5, 0x10001, 0xd59}, &(0x7f0000000080)={0x5, 0x4, 0x2, 0x100, 0x3, 0xffffffffffffffff, 0x7fffffff, 0x3}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)

[ 3206.952287][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3206.972428][T28889] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3206.989259][T31872] ath9k_htc: Failed to initialize the device
[ 3207.001342][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3207.175994][T10021] usb 4-1: USB disconnect, device number 123
[ 3207.192606][T28889] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3207.201459][T10021] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3207.402358][ T3699] usb 6-1: new high-speed USB device number 68 using dummy_hcd
11:29:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x16}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)

[ 3207.932701][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3207.956606][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3207.976934][ T3699] usb 6-1: Product: syz
[ 3207.981311][ T3699] usb 6-1: Manufacturer: syz
[ 3207.991610][ T3699] usb 6-1: SerialNumber: syz
[ 3208.043694][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3208.642514][ T3699] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3208.859180][T15538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3208.878832][T15538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3208.893642][T28889] usb 6-1: USB disconnect, device number 68
11:29:44 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x713, 0x2000)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x713, 0x2000) (async)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) (async)

11:29:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4)

11:29:44 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x9, 0xcf1a, 0xd643, 0x5, 0x8000000000000001, 0x8000000000000001, 0x7, 0x7}, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x4, 0x0, 0x5, 0x10001, 0xd59}, &(0x7f0000000080)={0x5, 0x4, 0x2, 0x100, 0x3, 0xffffffffffffffff, 0x7fffffff, 0x3}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
pselect6(0x40, &(0x7f0000000000)={0x9, 0xcf1a, 0xd643, 0x5, 0x8000000000000001, 0x8000000000000001, 0x7, 0x7}, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x4, 0x0, 0x5, 0x10001, 0xd59}, &(0x7f0000000080)={0x5, 0x4, 0x2, 0x100, 0x3, 0xffffffffffffffff, 0x7fffffff, 0x3}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)

11:29:44 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xf}}}}}}]}}, 0x0)

11:29:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x16}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)

11:29:44 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x10}}}}}}]}}, 0x0)

11:29:44 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x9, 0xcf1a, 0xd643, 0x5, 0x8000000000000001, 0x8000000000000001, 0x7, 0x7}, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x4, 0x0, 0x5, 0x10001, 0xd59}, &(0x7f0000000080)={0x5, 0x4, 0x2, 0x100, 0x3, 0xffffffffffffffff, 0x7fffffff, 0x3}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
pselect6(0x40, &(0x7f0000000000)={0x9, 0xcf1a, 0xd643, 0x5, 0x8000000000000001, 0x8000000000000001, 0x7, 0x7}, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x4, 0x0, 0x5, 0x10001, 0xd59}, &(0x7f0000000080)={0x5, 0x4, 0x2, 0x100, 0x3, 0xffffffffffffffff, 0x7fffffff, 0x3}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8}) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)

11:29:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4)

11:29:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x16}, 0x10)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x16}, 0x10) (async)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) (async)

11:29:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4)

11:29:44 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501200, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4)

11:29:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4)

11:29:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4) (async)

11:29:45 executing program 1:
socket$netlink(0x10, 0x3, 0x6)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x8)

11:29:45 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501200, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4)

[ 3209.672329][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3209.689944][ T3699] ath9k_htc: Failed to initialize the device
[ 3209.718447][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3209.752258][ T1043] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 3210.152357][T28889] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 3210.182420][ T1043] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3210.205322][ T1043] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3210.442763][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3210.472179][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3210.484894][ T1043] usb 4-1: Product: syz
[ 3210.490168][ T1043] usb 4-1: Manufacturer: syz
[ 3210.495609][ T1043] usb 4-1: SerialNumber: syz
[ 3210.566848][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3210.812523][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3210.828276][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3210.841268][T28889] usb 6-1: Product: syz
[ 3210.848514][T28889] usb 6-1: Manufacturer: syz
[ 3210.854154][T28889] usb 6-1: SerialNumber: syz
[ 3210.903653][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3211.252682][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3211.452585][ T1043] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3211.455410][ T3699] usb 4-1: USB disconnect, device number 124
[ 3211.478083][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3211.542448][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3211.753414][T15582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3211.764853][T15582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3211.776718][ T1043] usb 6-1: USB disconnect, device number 69
11:29:47 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x10}}}}}}]}}, 0x0)

11:29:47 executing program 1:
socket$netlink(0x10, 0x3, 0x6) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x8)

11:29:47 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x63}}}}}}]}}, 0x0)

11:29:47 executing program 1:
socket$netlink(0x10, 0x3, 0x6)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x8)
socket$netlink(0x10, 0x3, 0x6) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x8) (async)

11:29:47 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501200, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4)

11:29:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x14)

11:29:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4)

11:29:47 executing program 2:
socket$netlink(0x10, 0x3, 0x9)

[ 3212.332533][ T3742] usb 4-1: new high-speed USB device number 125 using dummy_hcd
11:29:47 executing program 1:
socketpair(0x27, 0x6, 0x6, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:29:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
recvmsg$can_bcm(r1, &(0x7f0000001300)={&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@bcast, @remote, @rose, @rose, @bcast, @netrom, @remote, @null]}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/251, 0xfb}], 0x3, &(0x7f00000012c0)=""/32, 0x20}, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:29:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (rerun: 64)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x14)

11:29:47 executing program 2:
socket$netlink(0x10, 0x3, 0x9)
socket$netlink(0x10, 0x3, 0x9) (async)

[ 3212.643093][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3212.651818][T28889] ath9k_htc: Failed to initialize the device
[ 3212.664863][ T1043] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3212.752470][ T3742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3212.773745][ T3742] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3212.972338][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3212.988543][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3212.999602][ T3742] usb 4-1: Product: syz
[ 3213.006626][ T3742] usb 4-1: Manufacturer: syz
[ 3213.013578][ T3742] usb 4-1: SerialNumber: syz
[ 3213.082406][ T1043] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 3213.094758][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3213.762388][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3213.782836][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3213.795121][ T1043] usb 6-1: Product: syz
[ 3213.799502][ T1043] usb 6-1: Manufacturer: syz
[ 3213.805593][ T1043] usb 6-1: SerialNumber: syz
[ 3213.832893][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3213.873014][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3214.037272][ T8129] usb 4-1: USB disconnect, device number 125
[ 3214.044694][ T3742] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3214.057470][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
11:29:49 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x11}}}}}}]}}, 0x0)

11:29:49 executing program 1:
socketpair(0x27, 0x6, 0x6, &(0x7f0000000000)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3214.562384][ T1043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3214.769180][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3214.791360][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3214.813008][T10021] usb 6-1: USB disconnect, device number 70
[ 3214.932317][ T8129] usb 4-1: new high-speed USB device number 126 using dummy_hcd
11:29:50 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x2}}}}}}]}}, 0x0)

11:29:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
recvmsg$can_bcm(r1, &(0x7f0000001300)={&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@bcast, @remote, @rose, @rose, @bcast, @netrom, @remote, @null]}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/251, 0xfb}], 0x3, &(0x7f00000012c0)=""/32, 0x20}, 0x2) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:29:50 executing program 2:
socket$netlink(0x10, 0x3, 0x9)

11:29:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x14)

11:29:50 executing program 1:
socketpair(0x27, 0x6, 0x6, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3215.372510][ T8129] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
11:29:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040))

11:29:50 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc2803, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0xfa11})
socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)

11:29:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
recvmsg$can_bcm(r1, &(0x7f0000001300)={&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@bcast, @remote, @rose, @rose, @bcast, @netrom, @remote, @null]}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/251, 0xfb}], 0x3, &(0x7f00000012c0)=""/32, 0x20}, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:29:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xe)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc)

[ 3215.420693][ T8129] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
11:29:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=""/57, &(0x7f0000000140)=0x39)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x80000001, 0x7f], 0x2, 0x80800, 0x0, <r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r8}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r9}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r10}, 0xffb8)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5)
r11 = geteuid()
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r11)
socket$netlink(0x10, 0x3, 0x15)

[ 3215.556194][T15663] random: crng reseeded on system resumption
[ 3215.663166][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3215.676264][ T1043] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3215.696820][ T1043] ath9k_htc: Failed to initialize the device
[ 3215.717722][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3215.738174][T10021] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3215.755113][ T8129] usb 4-1: Product: syz
[ 3215.775489][ T8129] usb 4-1: Manufacturer: syz
[ 3215.822339][ T8129] usb 4-1: SerialNumber: syz
[ 3215.873995][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3216.112469][T10021] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 3216.582948][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3216.643367][T10021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3216.664229][T10021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3216.686243][T10021] usb 6-1: Product: syz
[ 3216.695689][T10021] usb 6-1: Manufacturer: syz
[ 3216.701957][T10021] usb 6-1: SerialNumber: syz
[ 3216.763687][T10021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3216.782816][ T8129] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3216.796907][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3216.855308][ T1043] usb 4-1: USB disconnect, device number 126
11:29:52 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x12}}}}}}]}}, 0x0)

11:29:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x1, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=""/57, &(0x7f0000000140)=0x39) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x80000001, 0x7f], 0x2, 0x80800, 0x0, <r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r8}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r9}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r10}, 0xffb8) (async)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5) (async)
r11 = geteuid()
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r11)
socket$netlink(0x10, 0x3, 0x15)

[ 3217.355797][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3217.572365][T15654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3217.593097][T15654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3217.605400][ T7352] usb 6-1: USB disconnect, device number 71
[ 3217.682260][ T3699] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 3218.052483][ T3699] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
11:29:53 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x9}}}}}}]}}, 0x0)

11:29:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)) (async)

11:29:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc2803, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0xfa11}) (async)
socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)

11:29:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xe)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc)

11:29:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=""/57, &(0x7f0000000140)=0x39) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x80000001, 0x7f], 0x2, 0x80800, 0x0, <r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r8}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r9}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r10}, 0xffb8) (async)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5)
r11 = geteuid()
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r11)
socket$netlink(0x10, 0x3, 0x15)

11:29:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)) (async)

[ 3218.162823][T15691] random: crng reseeded on system resumption
[ 3218.233070][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3218.272417][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3218.312484][ T3699] usb 4-1: Product: syz
11:29:53 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r0, r1], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000300)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000580)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r5, r6], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={r5})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3, r4], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r7, r8], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000600)=[0x0, r4, r1, 0x0, 0x0, r0, r2, 0x0], 0xffffbffffffff800, 0x8, 0x6})
r10 = syz_open_dev$dri(&(0x7f0000000380), 0x41d, 0x1e5a81)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r10, 0xc01064c4, &(0x7f00000003c0)={&(0x7f0000000340)=[r3, 0x0, r0, r3, r7, r9, r0, r3, r7, r3], 0xa})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={0x0, 0x5becfc8e})
bind$rds(r11, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r11}, 0x8)
getsockopt$netlink(r11, 0x10e, 0x8, &(0x7f0000000100)=""/252, &(0x7f0000000200)=0xfc)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x400], 0x1, 0x80800, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000500)={r12})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bdf0288beeffffff00000004a66b83d6e45f85d392020000000a00020024b456"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

[ 3218.337160][ T3699] usb 4-1: Manufacturer: syz
[ 3218.371122][ T3699] usb 4-1: SerialNumber: syz
11:29:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc2803, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0xfa11}) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)

11:29:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xe)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc)

[ 3218.444067][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3218.472885][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
11:29:53 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r0=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r0, r1], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000300)={<r2=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r4=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000580)={<r5=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r5, r6], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={r5})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3, r4], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r7=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r7, r8], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r9=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000600)=[0x0, r4, r1, 0x0, 0x0, r0, r2, 0x0], 0xffffbffffffff800, 0x8, 0x6}) (async)
r10 = syz_open_dev$dri(&(0x7f0000000380), 0x41d, 0x1e5a81)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r10, 0xc01064c4, &(0x7f00000003c0)={&(0x7f0000000340)=[r3, 0x0, r0, r3, r7, r9, r0, r3, r7, r3], 0xa}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={0x0, 0x5becfc8e}) (async)
bind$rds(r11, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r11}, 0x8) (async)
getsockopt$netlink(r11, 0x10e, 0x8, &(0x7f0000000100)=""/252, &(0x7f0000000200)=0xfc) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x400], 0x1, 0x80800, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000500)={r12}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bdf0288beeffffff00000004a66b83d6e45f85d392020000000a00020024b456"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

[ 3218.488520][T31872] ath9k_htc: Failed to initialize the device
[ 3218.510715][ T7352] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3218.575716][T15710] random: crng reseeded on system resumption
[ 3218.893068][ T7352] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 3219.092479][ T3699] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3219.272833][ T3699] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3219.290122][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3219.333360][ T3700] usb 4-1: USB disconnect, device number 127
[ 3219.432824][ T7352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3219.449470][ T7352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3219.467260][ T7352] usb 6-1: Product: syz
[ 3219.475954][ T7352] usb 6-1: Manufacturer: syz
[ 3219.481940][ T7352] usb 6-1: SerialNumber: syz
[ 3219.533428][ T7352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:29:55 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x18}}}}}}]}}, 0x0)

11:29:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))

[ 3220.112441][ T7352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3220.212358][ T1043] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 3220.330796][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3220.352762][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3220.370942][T31872] usb 6-1: USB disconnect, device number 72
[ 3220.602332][ T1043] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3220.622307][ T1043] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3220.832501][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3220.849978][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3220.862896][ T1043] usb 4-1: Product: syz
[ 3220.867496][ T1043] usb 4-1: Manufacturer: syz
11:29:56 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x25}}}}}}]}}, 0x0)

11:29:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xffffff48)

11:29:56 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r0, r1], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000300)={<r2=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r4=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000580)={<r5=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r6=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r5, r6], 0xfffffffffffff800, 0x3, 0x6}) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={r5}) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3, r4], 0xfffffffffffff800, 0x3, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r7, r8], 0xfffffffffffff800, 0x3, 0x6}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r9=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000600)=[0x0, r4, r1, 0x0, 0x0, r0, r2, 0x0], 0xffffbffffffff800, 0x8, 0x6}) (async)
r10 = syz_open_dev$dri(&(0x7f0000000380), 0x41d, 0x1e5a81)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r10, 0xc01064c4, &(0x7f00000003c0)={&(0x7f0000000340)=[r3, 0x0, r0, r3, r7, r9, r0, r3, r7, r3], 0xa})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={0x0, 0x5becfc8e}) (async)
bind$rds(r11, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r11}, 0x8) (async)
getsockopt$netlink(r11, 0x10e, 0x8, &(0x7f0000000100)=""/252, &(0x7f0000000200)=0xfc) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x400], 0x1, 0x80800, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000500)={r12})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bdf0288beeffffff00000004a66b83d6e45f85d392020000000a00020024b456"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (rerun: 32)

11:29:56 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, {&(0x7f00000000c0)=""/73, 0x49}, &(0x7f0000000240), 0x40}, 0xa0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000000)=[0xffff, 0x7f, 0xfffffff9, 0x3], 0x4, 0x80000, 0x0, <r1=>0xffffffffffffffff})
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x0, 0x100}, 0x22}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000300)=""/69, &(0x7f0000000040)=0x45)

11:29:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000080), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async)

[ 3220.881223][ T1043] usb 4-1: SerialNumber: syz
11:29:56 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, {&(0x7f00000000c0)=""/73, 0x49}, &(0x7f0000000240), 0x40}, 0xa0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000000)=[0xffff, 0x7f, 0xfffffff9, 0x3], 0x4, 0x80000, 0x0, <r1=>0xffffffffffffffff})
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x0, 0x100}, 0x22}, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000300)=""/69, &(0x7f0000000040)=0x45)

11:29:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xffffff48)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xffffff48) (async)

11:29:56 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x7, 0x3, 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x19, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)

[ 3220.973326][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:29:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000080), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async)

11:29:56 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, {&(0x7f00000000c0)=""/73, 0x49}, &(0x7f0000000240), 0x40}, 0xa0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000000)=[0xffff, 0x7f, 0xfffffff9, 0x3], 0x4, 0x80000, 0x0, <r1=>0xffffffffffffffff})
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x0, 0x100}, 0x22}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000300)=""/69, &(0x7f0000000040)=0x45)

[ 3221.192402][ T7352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3221.210576][ T7352] ath9k_htc: Failed to initialize the device
[ 3221.236596][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3221.602336][T31872] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 3221.702611][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3221.892759][ T1043] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3221.900566][ T1043] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3221.923069][ T3700] usb 4-1: USB disconnect, device number 2
[ 3222.122995][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3222.137737][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3222.146929][T31872] usb 6-1: Product: syz
[ 3222.151724][T31872] usb 6-1: Manufacturer: syz
[ 3222.160322][T31872] usb 6-1: SerialNumber: syz
[ 3222.205279][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:29:57 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x2}}}}}}]}}, 0x0)

11:29:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xffffff48)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xffffff48) (async)

[ 3222.752374][ T7352] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 3222.782521][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3223.008451][T15742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3223.023828][T15742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3223.047574][ T8147] usb 6-1: USB disconnect, device number 73
[ 3223.122438][ T7352] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 3223.136324][ T7352] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3223.312434][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3223.331707][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3223.352494][ T7352] usb 4-1: Product: syz
[ 3223.358382][ T7352] usb 4-1: Manufacturer: syz
[ 3223.373778][ T7352] usb 4-1: SerialNumber: syz
[ 3223.434236][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:29:58 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x3e}}}}}}]}}, 0x0)

11:29:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)

11:29:58 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x7, 0x3, 0x2}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xff, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x19, 0x4) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)

11:29:58 executing program 2:
socket$netlink(0x10, 0x3, 0x0)

11:29:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0xfffffff9, 0x38, 0xb30f}, 0x10)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'wlan0\x00', @local})
socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r1, 0x0, &(0x7f00000000c0))
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x460000, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4e22, 0x1000, @local, 0xa3}}}, 0x32)

11:29:58 executing program 2:
socket$netlink(0x10, 0x3, 0x0)

11:29:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async)

11:29:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0xfffffff9, 0x38, 0xb30f}, 0x10)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'wlan0\x00', @local}) (async)
socket$netlink(0x10, 0x3, 0x10)
getsockname$netlink(r1, 0x0, &(0x7f00000000c0)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x460000, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) (async)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4e22, 0x1000, @local, 0xa3}}}, 0x32)

11:29:59 executing program 1:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x7, 0x3, 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x19, 0x4) (rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)

11:29:59 executing program 2:
socket$netlink(0x10, 0x3, 0x0)

[ 3223.832269][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3223.852479][T31872] ath9k_htc: Failed to initialize the device
[ 3223.875672][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3224.022396][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3224.034366][ T7352] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3224.045584][ T7352] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3224.233182][ T3700] usb 4-1: USB disconnect, device number 3
[ 3224.243367][ T8147] usb 6-1: new high-speed USB device number 74 using dummy_hcd
11:30:00 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x3}}}}}}]}}, 0x0)

11:30:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async, rerun: 32)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (rerun: 32)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)

[ 3224.844771][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3224.860786][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3224.871779][ T8147] usb 6-1: Product: syz
[ 3224.880846][ T8147] usb 6-1: Manufacturer: syz
[ 3224.886559][ T8147] usb 6-1: SerialNumber: syz
[ 3224.953304][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3225.092465][ T8129] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 3225.522871][ T8129] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3225.602896][ T1043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3225.763266][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3225.775228][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3225.785447][ T8129] usb 4-1: Product: syz
[ 3225.790649][ T8129] usb 4-1: Manufacturer: syz
[ 3225.802690][ T8129] usb 4-1: SerialNumber: syz
[ 3225.817359][T15775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3225.851714][T15775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3225.862505][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3225.892305][ T3742] usb 6-1: USB disconnect, device number 74
11:30:01 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x5d}}}}}}]}}, 0x0)

11:30:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x4) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0xfffffff9, 0x38, 0xb30f}, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'wlan0\x00', @local})
socket$netlink(0x10, 0x3, 0x10) (async)
getsockname$netlink(r1, 0x0, &(0x7f00000000c0)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x460000, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) (async)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4e22, 0x1000, @local, 0xa3}}}, 0x32)

11:30:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x6)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc)
connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0xa, 0x4)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000))

11:30:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x30840)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0x2eaec492)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:01 executing program 4:
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async, rerun: 64)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x30840) (rerun: 64)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0x2eaec492) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:01 executing program 4:
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x6)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async, rerun: 64)
bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) (async, rerun: 64)
connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0xa, 0x4) (async)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000))

11:30:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xb)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))

[ 3226.502499][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3226.553099][ T8129] usb 4-1: ath9k_htc: Unable to allocate URBs
11:30:01 executing program 4:
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffffff, 0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3226.595889][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3226.642561][ T1043] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3226.665589][ T1043] ath9k_htc: Failed to initialize the device
[ 3226.696434][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3226.723670][T31872] usb 4-1: USB disconnect, device number 4
[ 3227.062761][ T3742] usb 6-1: new high-speed USB device number 75 using dummy_hcd
11:30:02 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x4}}}}}}]}}, 0x0)

11:30:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x200f7a)

[ 3227.572420][ T8147] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 3227.672418][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3227.704940][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3227.716264][ T3742] usb 6-1: Product: syz
[ 3227.721091][ T3742] usb 6-1: Manufacturer: syz
[ 3227.729417][ T3742] usb 6-1: SerialNumber: syz
[ 3227.786536][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3227.982745][ T8147] usb 4-1: config 1 has an invalid interface number: 130 but max is 0
[ 3227.996138][ T8147] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 3228.011224][ T8147] usb 4-1: config 1 has no interface number 1
[ 3228.019230][ T8147] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 3228.046036][ T8147] usb 4-1: config 1 interface 130 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 0
[ 3228.063214][ T8147] usb 4-1: config 1 interface 130 has no altsetting 0
[ 3228.262996][ T8147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3228.276783][ T8147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3228.289989][ T8147] usb 4-1: Product: syz
[ 3228.294989][ T8147] usb 4-1: Manufacturer: syz
[ 3228.300462][ T8147] usb 4-1: SerialNumber: syz
[ 3228.363733][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3228.375391][ T8147] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3228.453177][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3228.659620][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3228.672729][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3228.686614][T28889] usb 6-1: USB disconnect, device number 75
[ 3229.022353][ T8147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3229.042777][ T8147] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3229.055952][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
11:30:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0xb)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))

11:30:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x6) (rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) (async, rerun: 64)
connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc) (async, rerun: 64)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0xa, 0x4) (async, rerun: 32)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000))

11:30:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async, rerun: 64)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x30840)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0x2eaec492) (async, rerun: 32)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x200f7a)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x200f7a) (async)

11:30:04 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x0}}}}}}]}}, 0x0)

11:30:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0xb) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000))

[ 3229.252426][ T8129] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[ 3229.278261][ T8147] usb 4-1: ath9k_htc: USB layer deinitialized
11:30:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x200f7a)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x200f7a) (async)

11:30:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r1)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2)
keyctl$search(0xa, r1, &(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, r2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3229.324840][ T1043] usb 4-1: USB disconnect, device number 5
11:30:04 executing program 2:
socketpair(0x28, 0x80000, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/104, 0x68}, &(0x7f0000000180), 0x30}, 0x20)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:30:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r1)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2) (async)
keyctl$search(0xa, r1, &(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, r2) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3229.512292][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3229.521122][ T3742] ath9k_htc: Failed to initialize the device
[ 3229.550163][T28889] usb 6-1: ath9k_htc: USB layer deinitialized
11:30:05 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x6}}}}}}]}}, 0x0)

11:30:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r1)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r2) (async)
keyctl$search(0xa, r1, &(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, r2) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xa)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000000)=""/120, &(0x7f0000000100)=0x78)

11:30:05 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x70443d3e, 0x7], 0x3, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080))

11:30:05 executing program 2:
socketpair(0x28, 0x80000, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/104, 0x68}, &(0x7f0000000180), 0x30}, 0x20)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socketpair(0x28, 0x80000, 0x3, &(0x7f00000000c0)) (async)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/104, 0x68}, &(0x7f0000000180), 0x30}, 0x20) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)

11:30:05 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x70443d3e, 0x7], 0x3, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080))

[ 3229.933207][T28889] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 3230.172277][ T3700] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 3230.533141][ T3700] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3230.552706][T28889] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3230.567235][T28889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3230.582640][T28889] usb 6-1: Product: syz
[ 3230.587349][T28889] usb 6-1: Manufacturer: syz
[ 3230.598020][T28889] usb 6-1: SerialNumber: syz
[ 3230.653275][T28889] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3230.712451][ T3700] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3230.726312][ T3700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3230.741908][ T3700] usb 4-1: Product: syz
[ 3230.751608][ T3700] usb 4-1: Manufacturer: syz
[ 3230.769336][ T3700] usb 4-1: SerialNumber: syz
[ 3230.824442][ T3700] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3231.339023][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3231.403566][ T3700] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3231.426506][ T3700] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3231.450485][ T3700] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3231.553528][T15851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3231.578274][T15851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3231.598214][ T1043] usb 6-1: USB disconnect, device number 76
[ 3231.634597][T31872] usb 4-1: USB disconnect, device number 6
11:30:07 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x2}}}}}}]}}, 0x0)

11:30:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xa)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000000)=""/120, &(0x7f0000000100)=0x78)

11:30:07 executing program 2:
socketpair(0x28, 0x80000, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/104, 0x68}, &(0x7f0000000180), 0x30}, 0x20)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

11:30:07 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x23c4, 0xa1, 0x3ff, 0x4], 0x5, 0x80800})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r3}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0xc, 0x3, 0x9, 0xfffffffffffffff4, 0x10}, @ldst={0x1, 0x0, 0x6, 0xb, 0x7, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00', 0x7, 0xd6, &(0x7f0000000100)=""/214, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0xffff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r4, r1, r1, r0]}, 0x80)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)

11:30:07 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x70443d3e, 0x7], 0x3, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080))

11:30:07 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x7}}}}}}]}}, 0x0)

11:30:07 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x23c4, 0xa1, 0x3ff, 0x4], 0x5, 0x80800}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r3}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0xc, 0x3, 0x9, 0xfffffffffffffff4, 0x10}, @ldst={0x1, 0x0, 0x6, 0xb, 0x7, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00', 0x7, 0xd6, &(0x7f0000000100)=""/214, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0xffff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r4, r1, r1, r0]}, 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)

11:30:07 executing program 2:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x79200, 0xfffffffb}, 0x10)

11:30:07 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)

11:30:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xa)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000000)=""/120, &(0x7f0000000100)=0x78)

11:30:07 executing program 2:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x79200, 0xfffffffb}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x79200, 0xfffffffb}, 0x10) (async)

11:30:07 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (async)
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)

[ 3232.392460][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3232.401351][T28889] ath9k_htc: Failed to initialize the device
[ 3232.429325][ T1043] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3232.562390][T31872] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 3232.812341][ T1043] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 3232.923337][T31872] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3233.102952][T31872] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3233.112784][T31872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3233.123508][T31872] usb 4-1: Product: syz
[ 3233.128468][T31872] usb 4-1: Manufacturer: syz
[ 3233.153093][T31872] usb 4-1: SerialNumber: syz
[ 3233.204270][T31872] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3233.412629][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3233.427163][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3233.438563][ T1043] usb 6-1: Product: syz
[ 3233.445716][ T1043] usb 6-1: Manufacturer: syz
[ 3233.452508][ T1043] usb 6-1: SerialNumber: syz
[ 3233.513245][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3233.782874][T31872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3233.800478][T31872] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3233.825802][T31872] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3234.014799][ T8129] usb 4-1: USB disconnect, device number 7
[ 3234.122453][T28889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3234.338419][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3234.349423][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3234.362813][T31872] usb 6-1: USB disconnect, device number 77
11:30:10 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x3}}}}}}]}}, 0x0)

11:30:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xb)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:30:10 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x23c4, 0xa1, 0x3ff, 0x4], 0x5, 0x80800}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r3}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0xc, 0x3, 0x9, 0xfffffffffffffff4, 0x10}, @ldst={0x1, 0x0, 0x6, 0xb, 0x7, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00', 0x7, 0xd6, &(0x7f0000000100)=""/214, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0xffff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r4, r1, r1, r0]}, 0x80) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)

11:30:10 executing program 2:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x79200, 0xfffffffb}, 0x10)

11:30:10 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (async)
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)

11:30:10 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x8}}}}}}]}}, 0x0)

11:30:10 executing program 1:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4048011)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000002c0)={0x10001, 0x20, [0xd2e, 0x101, 0x2, 0x9, 0x8, 0x4, 0x7, 0x8]})
socketpair(0x9, 0x3, 0xe5, &(0x7f0000000000))
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={0x0, 0x4, 0x7b}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'sha3-224\x00'}}, &(0x7f0000000200)="b3d6c57e", &(0x7f0000000240)=""/123)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xb)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0xb) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)

11:30:10 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc)

11:30:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfa, 0x4)

11:30:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfa, 0x4)

11:30:10 executing program 1:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4048011) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000002c0)={0x10001, 0x20, [0xd2e, 0x101, 0x2, 0x9, 0x8, 0x4, 0x7, 0x8]}) (async)
socketpair(0x9, 0x3, 0xe5, &(0x7f0000000000)) (async)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={0x0, 0x4, 0x7b}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'sha3-224\x00'}}, &(0x7f0000000200)="b3d6c57e", &(0x7f0000000240)=""/123) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

[ 3235.192314][T28889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3235.211116][T28889] ath9k_htc: Failed to initialize the device
[ 3235.228198][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3235.233089][ T8129] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 3235.592738][T31872] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 3235.653077][ T8129] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3235.854136][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3235.865375][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3235.875787][ T8129] usb 4-1: Product: syz
[ 3235.880016][ T8129] usb 4-1: Manufacturer: syz
[ 3235.885400][ T8129] usb 4-1: SerialNumber: syz
[ 3235.944245][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3236.122392][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3236.131566][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3236.162184][T31872] usb 6-1: Product: syz
[ 3236.166989][T31872] usb 6-1: Manufacturer: syz
[ 3236.172046][T31872] usb 6-1: SerialNumber: syz
[ 3236.234445][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3236.593010][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3236.613040][ T8129] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3236.628018][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3236.812656][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3236.828200][ T3699] usb 4-1: USB disconnect, device number 8
[ 3237.034466][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3237.058041][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3237.080903][ T8129] usb 6-1: USB disconnect, device number 78
11:30:12 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x4}}}}}}]}}, 0x0)

11:30:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) (async)

11:30:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xb)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:30:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfa, 0x4)

11:30:12 executing program 1:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4048011) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async, rerun: 32)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000002c0)={0x10001, 0x20, [0xd2e, 0x101, 0x2, 0x9, 0x8, 0x4, 0x7, 0x8]}) (async, rerun: 32)
socketpair(0x9, 0x3, 0xe5, &(0x7f0000000000)) (async)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={0x0, 0x4, 0x7b}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'sha3-224\x00'}}, &(0x7f0000000200)="b3d6c57e", &(0x7f0000000240)=""/123)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:12 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x9}}}}}}]}}, 0x0)

11:30:12 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffe75)

11:30:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) (async)

11:30:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x7, 0x2, 0x6, 0x7, 0x0, 0x7, 0xdca], 0x7, 0x80400, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0))
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000))
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000010000000170000004ac40000070000006a7c0000"])
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100))

11:30:13 executing program 1:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)

11:30:13 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffe75)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x6) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffe75) (async)

11:30:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x7, 0x2, 0x6, 0x7, 0x0, 0x7, 0xdca], 0x7, 0x80400, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0))
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000))
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000010000000170000004ac40000070000006a7c0000"])
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x7, 0x2, 0x6, 0x7, 0x0, 0x7, 0xdca], 0x7, 0x80400}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000010000000170000004ac40000070000006a7c0000"]) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)) (async)

[ 3237.912261][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3237.922712][ T1043] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 3237.926970][T31872] ath9k_htc: Failed to initialize the device
[ 3237.974517][ T8129] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3238.352401][ T1043] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3238.367738][ T8129] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 3238.564039][ T1043] usb 4-1: Dual-Role OTG device on HNP port
[ 3238.592363][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3238.605384][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3238.615387][ T1043] usb 4-1: Product: syz
[ 3238.621569][ T1043] usb 4-1: Manufacturer: syz
[ 3238.630879][ T1043] usb 4-1: SerialNumber: syz
[ 3238.687247][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3238.992487][ T8129] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3239.006541][ T8129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3239.016250][ T8129] usb 6-1: Product: syz
[ 3239.020995][ T8129] usb 6-1: Manufacturer: syz
[ 3239.027139][ T8129] usb 6-1: SerialNumber: syz
[ 3239.084511][ T8129] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3239.382809][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3239.403416][ T1043] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3239.421760][ T1043] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3239.607362][ T3742] usb 4-1: USB disconnect, device number 9
[ 3239.752635][ T8129] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3239.967234][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3239.990574][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3240.009918][ T3700] usb 6-1: USB disconnect, device number 79
11:30:15 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x98)

11:30:15 executing program 1:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async)

11:30:15 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
getsockname$netlink(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffe75)

11:30:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x7, 0x2, 0x6, 0x7, 0x0, 0x7, 0xdca], 0x7, 0x80400, 0x0, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0))
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000))
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000010000000170000004ac40000070000006a7c0000"])
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x7, 0x2, 0x6, 0x7, 0x0, 0x7, 0xdca], 0x7, 0x80400}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xa, 0x0, 0x0) (async)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000010000000170000004ac40000070000006a7c0000"]) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)) (async)

11:30:15 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x5}}}}}}]}}, 0x0)

11:30:15 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0xa}}}}}}]}}, 0x0)

11:30:15 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xca7e})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x9})
socket$netlink(0x10, 0x3, 0x5)

11:30:15 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x98)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x98) (async)

11:30:16 executing program 1:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)

11:30:16 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x98)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x98) (async)

11:30:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x480200, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x81})
r2 = socket$inet(0x2, 0xa, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0xcf2, 0x4)

[ 3240.803244][ T8129] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3240.823014][ T8129] ath9k_htc: Failed to initialize the device
11:30:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x480200, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x81})
r2 = socket$inet(0x2, 0xa, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:16 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4)

[ 3240.852563][ T3742] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 3240.864795][ T3700] usb 6-1: ath9k_htc: USB layer deinitialized
11:30:16 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xca7e})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x9})
socket$netlink(0x10, 0x3, 0x5)

11:30:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0xcf2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0xcf2, 0x4) (async)

[ 3241.232621][ T3742] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3241.242639][ T3700] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 3241.422640][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3241.439559][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3241.455562][ T3742] usb 4-1: Product: syz
[ 3241.461138][ T3742] usb 4-1: Manufacturer: syz
[ 3241.475541][ T3742] usb 4-1: SerialNumber: syz
[ 3241.533987][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3241.772560][ T3700] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3241.792976][ T3700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3241.810362][ T3700] usb 6-1: Product: syz
[ 3241.816925][ T3700] usb 6-1: Manufacturer: syz
[ 3241.822611][ T3700] usb 6-1: SerialNumber: syz
[ 3241.873309][ T3700] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3242.212518][ T3742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3242.225958][ T3742] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3242.237183][ T3742] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3242.442691][ T3700] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3242.445452][ T1043] usb 4-1: USB disconnect, device number 10
[ 3242.663156][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3242.683498][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3242.706999][T31872] usb 6-1: USB disconnect, device number 80
11:30:18 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x7}}}}}}]}}, 0x0)

11:30:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x480200, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x81}) (async)
r2 = socket$inet(0x2, 0xa, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:18 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4)

11:30:18 executing program 0:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xca7e})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x9})
socket$netlink(0x10, 0x3, 0x5)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xca7e}) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x9}) (async)
socket$netlink(0x10, 0x3, 0x5) (async)

11:30:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0xcf2, 0x4)

11:30:18 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0xb}}}}}}]}}, 0x0)

11:30:18 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4) (async)

11:30:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffff00, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
write$damon_contexts(r1, &(0x7f0000000000)=[{' ', './file0'}], 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x25, 0x1, 0x7, &(0x7f0000000000))
add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:30:18 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0xc, 0x24, 0x0, 0x14, 0x400})

11:30:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffff00, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffff00, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

[ 3243.512422][ T3700] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3243.528664][ T3700] ath9k_htc: Failed to initialize the device
[ 3243.555133][ T3742] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 3243.566259][T31872] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3243.942350][T31872] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 3243.952516][ T3742] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3244.143231][ T3742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3244.159223][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3244.171164][ T3742] usb 4-1: Product: syz
[ 3244.177724][ T3742] usb 4-1: Manufacturer: syz
[ 3244.188846][ T3742] usb 4-1: SerialNumber: syz
[ 3244.233535][ T3742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3244.482774][T31872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3244.497441][T31872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3244.508244][T31872] usb 6-1: Product: syz
[ 3244.513256][T31872] usb 6-1: Manufacturer: syz
[ 3244.518424][T31872] usb 6-1: SerialNumber: syz
[ 3244.573335][T31872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3244.912417][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3244.931150][ T8129] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3244.943920][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3245.123472][ T3699] usb 4-1: USB disconnect, device number 11
[ 3245.142722][T31872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3245.350246][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3245.367383][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3245.378015][ T3699] usb 6-1: USB disconnect, device number 81
11:30:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
write$damon_contexts(r1, &(0x7f0000000000)=[{' ', './file0'}], 0x1) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
socketpair(0x25, 0x1, 0x7, &(0x7f0000000000)) (rerun: 64)
add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:30:21 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0xc, 0x24, 0x0, 0x14, 0x400})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0xc, 0x24, 0x0, 0x14, 0x400}) (async)

11:30:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffff00, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xffffff00, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)

11:30:21 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0xc}}}}}}]}}, 0x0)

11:30:21 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x9}}}}}}]}}, 0x0)

11:30:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
write$damon_contexts(r1, &(0x7f0000000000)=[{' ', './file0'}], 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
write$damon_contexts(r1, &(0x7f0000000000)=[{' ', './file0'}], 0x1) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:30:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)

11:30:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0x25, 0x1, 0x7, &(0x7f0000000000)) (async, rerun: 32)
add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (rerun: 32)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:30:21 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0xc, 0x24, 0x0, 0x14, 0x400})
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) (async)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0xc, 0x24, 0x0, 0x14, 0x400}) (async)

11:30:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)

11:30:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@isdn={0x22, 0x5, 0x3f, 0x40, 0xe2}, {&(0x7f0000000040)=""/166, 0xa6}, &(0x7f0000000100), 0xe1}, 0xa0)

11:30:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r1, r2}, 0x10)

11:30:21 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x3a)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r1)
keyctl$assume_authority(0x10, r1)

[ 3246.233589][T31872] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3246.244037][ T8129] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 3246.255985][T31872] ath9k_htc: Failed to initialize the device
11:30:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)

11:30:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@isdn={0x22, 0x5, 0x3f, 0x40, 0xe2}, {&(0x7f0000000040)=""/166, 0xa6}, &(0x7f0000000100), 0xe1}, 0xa0)

[ 3246.295094][ T3699] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3246.682397][ T8129] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3246.694799][ T3699] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 3246.882430][ T8129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3246.912170][ T8129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3246.924538][ T8129] usb 4-1: Product: syz
[ 3246.930599][ T8129] usb 4-1: Manufacturer: syz
[ 3246.939899][ T8129] usb 4-1: SerialNumber: syz
[ 3246.993201][ T8129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3247.232855][ T3699] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3247.249760][ T3699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3247.262056][ T3699] usb 6-1: Product: syz
[ 3247.277833][ T3699] usb 6-1: Manufacturer: syz
[ 3247.291130][ T3699] usb 6-1: SerialNumber: syz
[ 3247.346157][ T3699] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3247.622376][ T8129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3247.639417][ T8129] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3247.654964][ T8129] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3247.862902][T31872] usb 4-1: USB disconnect, device number 12
[ 3247.932502][ T3699] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3248.154906][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3248.176182][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3248.199005][ T8129] usb 6-1: USB disconnect, device number 82
11:30:23 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0xf}}}}}}]}}, 0x0)

11:30:24 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0xe}}}}}}]}}, 0x0)

11:30:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r1, r2}, 0x10)

[ 3248.662300][ T1043] usb 4-1: new high-speed USB device number 13 using dummy_hcd
11:30:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@isdn={0x22, 0x5, 0x3f, 0x40, 0xe2}, {&(0x7f0000000040)=""/166, 0xa6}, &(0x7f0000000100), 0xe1}, 0xa0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@isdn={0x22, 0x5, 0x3f, 0x40, 0xe2}, {&(0x7f0000000040)=""/166, 0xa6}, &(0x7f0000000100), 0xe1}, 0xa0) (async)

11:30:24 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x3a) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r1)
keyctl$assume_authority(0x10, r1)

11:30:24 executing program 1:
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x2, 0x4)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x1ccb, 0x4)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x3, 0x4)
getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000080)=""/215, &(0x7f0000000180)=0xd7)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x401, 0x0, 0x0, 0xff}, {0x6, 0x40, 0x2, 0x20}, {0xffff, 0x0, 0x9, 0xc3}, {0x20, 0xe1, 0xb9}]})

11:30:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

11:30:24 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x3a)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r1)
keyctl$assume_authority(0x10, r1)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x3a) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', r1) (async)
keyctl$assume_authority(0x10, r1) (async)

11:30:24 executing program 1:
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x2, 0x4) (async, rerun: 32)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x1ccb, 0x4) (async, rerun: 32)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x3, 0x4)
getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000080)=""/215, &(0x7f0000000180)=0xd7) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x401, 0x0, 0x0, 0xff}, {0x6, 0x40, 0x2, 0x20}, {0xffff, 0x0, 0x9, 0xc3}, {0x20, 0xe1, 0xb9}]})

11:30:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r1, r2}, 0x10)

11:30:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100), 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
socketpair(0x1d, 0x0, 0x2, &(0x7f0000000140))

11:30:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) (async)

[ 3249.032448][ T3699] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3249.054153][ T3699] ath9k_htc: Failed to initialize the device
[ 3249.063246][ T1043] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 3249.086904][ T8129] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3249.282474][ T1043] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3249.298961][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3249.309073][ T1043] usb 4-1: Product: syz
[ 3249.323222][ T1043] usb 4-1: Manufacturer: syz
[ 3249.328826][ T1043] usb 4-1: SerialNumber: syz
[ 3249.393241][ T1043] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3249.482430][ T8129] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 3250.052474][ T8129] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3250.063640][ T1043] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3250.077531][ T1043] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3250.087909][ T8129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3250.107897][ T1043] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3250.116665][ T8129] usb 6-1: Product: syz
[ 3250.122066][ T8129] usb 6-1: Manufacturer: syz
[ 3250.131213][ T8129] usb 6-1: SerialNumber: syz
[ 3250.173958][ T8129] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3250.274067][ T3699] usb 4-1: USB disconnect, device number 13
11:30:26 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x18}}}}}}]}}, 0x0)

[ 3250.862575][ T8129] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3251.073753][T16141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3251.087987][T16141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3251.092248][ T3699] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 3251.102612][ T8147] usb 6-1: USB disconnect, device number 83
[ 3251.482780][ T3699] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
11:30:26 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0xf}}}}}}]}}, 0x0)

11:30:26 executing program 1:
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x2, 0x4) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x1ccb, 0x4) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x3, 0x4)
getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000080)=""/215, &(0x7f0000000180)=0xd7) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x401, 0x0, 0x0, 0xff}, {0x6, 0x40, 0x2, 0x20}, {0xffff, 0x0, 0x9, 0xc3}, {0x20, 0xe1, 0xb9}]})

11:30:26 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x10000, 0x3, 0x6, 0x3, '\x00', '\x00', '\x00', 0x1000, 0x1, 0x20, 0xa5, "3f8ed68ad813876661de3b4e91fcb5e6"})
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x464802, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x6)

11:30:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100), 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
socketpair(0x1d, 0x0, 0x2, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100), 0x4) (async)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
socketpair(0x1d, 0x0, 0x2, &(0x7f0000000140)) (async)

11:30:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

[ 3251.663461][ T3699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
11:30:27 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x10000, 0x3, 0x6, 0x3, '\x00', '\x00', '\x00', 0x1000, 0x1, 0x20, 0xa5, "3f8ed68ad813876661de3b4e91fcb5e6"})
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x464802, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x6)

11:30:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$LOOP_CLR_FD(r6, 0x4c01)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8)
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5)

11:30:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000))
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

[ 3251.717430][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3251.755382][ T3699] usb 4-1: Product: syz
11:30:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100), 0x4)
getsockname$netlink(r0, 0x0, &(0x7f0000000080)) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
socketpair(0x1d, 0x0, 0x2, &(0x7f0000000140))

[ 3251.769828][ T3699] usb 4-1: Manufacturer: syz
[ 3251.790747][ T3699] usb 4-1: SerialNumber: syz
11:30:27 executing program 2:
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x10000, 0x3, 0x6, 0x3, '\x00', '\x00', '\x00', 0x1000, 0x1, 0x20, 0xa5, "3f8ed68ad813876661de3b4e91fcb5e6"})
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x464802, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x6)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x10000, 0x3, 0x6, 0x3, '\x00', '\x00', '\x00', 0x1000, 0x1, 0x20, 0xa5, "3f8ed68ad813876661de3b4e91fcb5e6"}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x464802, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x6) (async)

11:30:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$LOOP_CLR_FD(r6, 0x4c01) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8)
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5)

[ 3251.853338][ T3699] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3251.922361][ T8129] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3251.935023][ T8129] ath9k_htc: Failed to initialize the device
[ 3251.967445][ T8147] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3252.372892][ T8147] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 3252.452517][ T3699] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3252.473377][ T3699] usb 4-1: ath9k_htc: Unable to allocate URBs
[ 3252.503489][ T3699] usb 4-1: ath9k_htc: USB layer deinitialized
[ 3252.672909][ T7352] usb 4-1: USB disconnect, device number 14
[ 3252.992315][ T8147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3253.005220][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3253.015653][ T8147] usb 6-1: Product: syz
[ 3253.020652][ T8147] usb 6-1: Manufacturer: syz
[ 3253.025562][ T8147] usb 6-1: SerialNumber: syz
[ 3253.093166][ T8147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:30:28 executing program 3:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x3}}}}}}]}}, 0x0)

[ 3253.482464][ T7352] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 3253.723769][ T8147] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3253.852449][ T7352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3253.940065][T16182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3253.951832][T16182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3253.965581][ T3742] usb 6-1: USB disconnect, device number 84
[ 3254.023558][ T7352] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3254.044146][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3254.063711][ T7352] usb 4-1: Product: syz
[ 3254.069412][ T7352] usb 4-1: Manufacturer: syz
[ 3254.087361][ T7352] usb 4-1: SerialNumber: syz
[ 3254.133028][ T7352] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
11:30:29 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x40, 0x10}}}}}}]}}, 0x0)

11:30:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000))
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0) (async)

11:30:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000240)=""/101, 0x65}, &(0x7f00000001c0), 0x77}, 0x20)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x1, 0x4)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@qipcrtr={0x2a, 0x1}, {&(0x7f0000000840)=""/4096, 0x1000}, &(0x7f0000000100), 0x64}, 0xa0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000000c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x4, 0xf8f, 0x3, 0x28, 0x0, r2, 0x6, '\x00', 0x0, r0, 0x4, 0x0, 0x2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58}, 0x10)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'})

11:30:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000000)={0x3, 0x5, 0x100, 0x3, 'syz1\x00', 0x7ff})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:30:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$LOOP_CLR_FD(r6, 0x4c01)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8)
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r4}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
ioctl$LOOP_CLR_FD(r6, 0x4c01) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) (async)
pipe2$watch_queue(&(0x7f0000000200), 0x80) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r7}, 0x8) (async)
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5) (async)

11:30:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000000)={0x3, 0x5, 0x100, 0x3, 'syz1\x00', 0x7ff}) (rerun: 64)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

11:30:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000240)=""/101, 0x65}, &(0x7f00000001c0), 0x77}, 0x20) (async)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x1, 0x4) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@qipcrtr={0x2a, 0x1}, {&(0x7f0000000840)=""/4096, 0x1000}, &(0x7f0000000100), 0x64}, 0xa0) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000000c0)) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x4, 0xf8f, 0x3, 0x28, 0x0, r2, 0x6, '\x00', 0x0, r0, 0x4, 0x0, 0x2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58}, 0x10) (async)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'})

11:30:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)

11:30:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

11:30:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000240)=""/101, 0x65}, &(0x7f00000001c0), 0x77}, 0x20) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x1, 0x4) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@qipcrtr={0x2a, 0x1}, {&(0x7f0000000840)=""/4096, 0x1000}, &(0x7f0000000100), 0x64}, 0xa0) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000000c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x4, 0xf8f, 0x3, 0x28, 0x0, r2, 0x6, '\x00', 0x0, r0, 0x4, 0x0, 0x2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58}, 0x10)
socket$netlink(0x10, 0x3, 0xac7fa969595a8556) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'})

11:30:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[ 3254.702334][ T7352] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3254.762519][ T7352] ------------[ cut here ]------------
[ 3254.770942][ T7352] usb 4-1: BOGUS urb xfer, pipe 3 != type 1
[ 3254.806248][ T8147] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 3254.827833][ T8147] ath9k_htc: Failed to initialize the device
[ 3254.833733][ T7352] WARNING: CPU: 0 PID: 7352 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880
[ 3254.860245][ T3742] usb 6-1: ath9k_htc: USB layer deinitialized
[ 3254.884839][ T7352] Modules linked in:
[ 3254.889962][ T7352] CPU: 0 PID: 7352 Comm: kworker/0:2 Not tainted 6.1.0-syzkaller #0
[ 3254.934859][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 3254.955271][ T7352] Workqueue: events request_firmware_work_func
[ 3254.964602][ T7352] RIP: 0010:usb_submit_urb+0xed6/0x1880
[ 3254.971517][ T7352] Code: 7c 24 18 e8 3c 9d 94 fb 48 8b 7c 24 18 e8 b2 e8 00 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 d5 f8 8a e8 a9 94 bb 03 <0f> 0b e9 58 f8 ff ff e8 0e 9d 94 fb 48 81 c5 c0 05 00 00 e9 84 f7
[ 3254.997652][ T7352] RSP: 0018:ffffc90004abfb38 EFLAGS: 00010286
[ 3255.004874][ T7352] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 3255.016084][ T7352] RDX: ffff8880215f0000 RSI: ffffffff8165785c RDI: fffff52000957f59
[ 3255.026071][ T7352] RBP: ffff88805a8b2c50 R08: 0000000000000005 R09: 0000000000000000
[ 3255.044311][ T7352] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000003
[ 3255.064673][ T7352] R13: ffff88805f14d9d8 R14: 0000000000000003 R15: ffff8880177c2900
[ 3255.077731][ T7352] FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 3255.097080][ T7352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3255.106742][ T7352] CR2: 0000001b2f626000 CR3: 0000000065ab4000 CR4: 0000000000350ef0
[ 3255.128728][ T7352] Call Trace:
[ 3255.135142][ T7352]  <TASK>
[ 3255.138242][ T7352]  ath9k_hif_usb_alloc_urbs+0x7d3/0x1040
[ 3255.151006][ T7352]  ath9k_hif_usb_firmware_cb+0x14c/0x530
[ 3255.161581][ T7352]  ? ath9k_hif_usb_alloc_urbs+0x1040/0x1040
[ 3255.169482][ T7352]  request_firmware_work_func+0x130/0x240
[ 3255.175906][ T7352]  ? request_partial_firmware_into_buf+0xa0/0xa0
[ 3255.183419][ T7352]  process_one_work+0x9bf/0x1710
[ 3255.190315][ T7352]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3255.197037][ T7352]  ? rwlock_bug.part.0+0x90/0x90
[ 3255.203669][ T7352]  ? _raw_spin_lock_irq+0x45/0x50
[ 3255.209022][ T7352]  worker_thread+0x669/0x1090
[ 3255.216057][ T7352]  ? __kthread_parkme+0x163/0x220
[ 3255.222783][ T7352]  ? process_one_work+0x1710/0x1710
[ 3255.229946][ T7352]  kthread+0x2e8/0x3a0
[ 3255.234830][ T7352]  ? kthread_complete_and_exit+0x40/0x40
[ 3255.241944][ T7352]  ret_from_fork+0x1f/0x30
[ 3255.249631][ T7352]  </TASK>
[ 3255.254643][ T7352] Kernel panic - not syncing: panic_on_warn set ...
[ 3255.262594][ T7352] CPU: 0 PID: 7352 Comm: kworker/0:2 Not tainted 6.1.0-syzkaller #0
[ 3255.273387][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 3255.286803][ T7352] Workqueue: events request_firmware_work_func
[ 3255.293911][ T7352] Call Trace:
[ 3255.297545][ T7352]  <TASK>
[ 3255.300599][ T7352]  dump_stack_lvl+0xd1/0x138
[ 3255.306058][ T7352]  panic+0x2cc/0x626
[ 3255.312384][ T7352]  ? panic_print_sys_info.part.0+0x110/0x110
[ 3255.319013][ T3742] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 3255.328551][ T7352]  ? __warn.cold+0x24b/0x350
[ 3255.334435][ T7352]  ? usb_submit_urb+0xed6/0x1880
[ 3255.339712][ T7352]  __warn.cold+0x25c/0x350
[ 3255.344217][ T7352]  ? usb_submit_urb+0xed6/0x1880
[ 3255.349268][ T7352]  report_bug+0x1c0/0x210
[ 3255.353800][ T7352]  handle_bug+0x3c/0x70
[ 3255.358128][ T7352]  exc_invalid_op+0x18/0x50
[ 3255.363051][ T7352]  asm_exc_invalid_op+0x1a/0x20
[ 3255.368837][ T7352] RIP: 0010:usb_submit_urb+0xed6/0x1880
[ 3255.374605][ T7352] Code: 7c 24 18 e8 3c 9d 94 fb 48 8b 7c 24 18 e8 b2 e8 00 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 d5 f8 8a e8 a9 94 bb 03 <0f> 0b e9 58 f8 ff ff e8 0e 9d 94 fb 48 81 c5 c0 05 00 00 e9 84 f7
[ 3255.398255][ T7352] RSP: 0018:ffffc90004abfb38 EFLAGS: 00010286
[ 3255.404928][ T7352] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 3255.415605][ T7352] RDX: ffff8880215f0000 RSI: ffffffff8165785c RDI: fffff52000957f59
[ 3255.424174][ T7352] RBP: ffff88805a8b2c50 R08: 0000000000000005 R09: 0000000000000000
[ 3255.432641][ T7352] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000003
[ 3255.441047][ T7352] R13: ffff88805f14d9d8 R14: 0000000000000003 R15: ffff8880177c2900
[ 3255.450524][ T7352]  ? vprintk+0x8c/0xa0
[ 3255.455163][ T7352]  ? usb_submit_urb+0xed6/0x1880
[ 3255.461109][ T7352]  ath9k_hif_usb_alloc_urbs+0x7d3/0x1040
[ 3255.467985][ T7352]  ath9k_hif_usb_firmware_cb+0x14c/0x530
[ 3255.474092][ T7352]  ? ath9k_hif_usb_alloc_urbs+0x1040/0x1040
[ 3255.481398][ T7352]  request_firmware_work_func+0x130/0x240
[ 3255.488209][ T7352]  ? request_partial_firmware_into_buf+0xa0/0xa0
[ 3255.496885][ T7352]  process_one_work+0x9bf/0x1710
[ 3255.502490][ T7352]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3255.508169][ T7352]  ? rwlock_bug.part.0+0x90/0x90
[ 3255.513482][ T7352]  ? _raw_spin_lock_irq+0x45/0x50
[ 3255.519016][ T7352]  worker_thread+0x669/0x1090
[ 3255.525160][ T7352]  ? __kthread_parkme+0x163/0x220
[ 3255.531040][ T7352]  ? process_one_work+0x1710/0x1710
[ 3255.536846][ T7352]  kthread+0x2e8/0x3a0
[ 3255.541252][ T7352]  ? kthread_complete_and_exit+0x40/0x40
[ 3255.547878][ T7352]  ret_from_fork+0x1f/0x30
[ 3255.552663][ T7352]  </TASK>
[ 3255.556771][ T7352] Kernel Offset: disabled
[ 3255.563036][ T7352] Rebooting in 86400 seconds..