2, SerialNumber=3
[  686.922353][ T4509] usb 6-1: Product: syz
[  686.926665][ T4509] usb 6-1: Manufacturer: syz
[  686.931263][ T4509] usb 6-1: SerialNumber: syz
[  686.997126][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  687.594402][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  688.220823][ T4508] usb 6-1: USB disconnect, device number 77
07:48:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 5:
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x4004ae99, 0x0)

[  688.684363][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  688.691468][ T4502] ath9k_htc: Failed to initialize the device
[  688.698092][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
[  688.830751][T15804] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  688.849563][T15805] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  688.870749][T15811] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x40086602, 0x0)

07:48:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x40186366, 0x0)

[  689.149763][T15827] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  689.167966][T15824] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 5:
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x401c5820, 0x0)

[  689.445874][T15841] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x4020940d, 0x0)

07:48:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0)

07:48:31 executing program 5:
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x4090ae82, 0x0)

07:48:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x4138ae84, 0x0)

07:48:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0)

07:48:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x0)

07:48:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  691.033190][T15934] dump_vmcs: 11 callbacks suppressed
[  691.033211][T15934] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:32 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  691.260448][T15946] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x80086301, 0x0)

07:48:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x80086601, 0x0)

07:48:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  691.708301][T15971] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x801c581f, 0x0)

07:48:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  692.047434][T15990] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x8090ae81, 0x0)

07:48:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  692.281938][T16005] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x8138ae83, 0x0)

[  692.527419][T16020] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

[  692.771815][T16035] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  692.779904][ T4508] usb 6-1: new high-speed USB device number 78 using dummy_hcd
07:48:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  693.052200][T16052] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  693.375022][ T4508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  693.384091][ T4508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.392720][ T4508] usb 6-1: Product: syz
[  693.397219][ T4508] usb 6-1: Manufacturer: syz
[  693.401820][ T4508] usb 6-1: SerialNumber: syz
[  693.447018][ T4508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  694.054365][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  694.673048][ T4509] usb 6-1: USB disconnect, device number 78
07:48:36 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:48:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

[  695.324567][ T4510] usb 6-1: Service connection timeout for: 257
[  695.333094][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:48:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  695.365237][ T4510] ath9k_htc: Failed to initialize the device
[  695.371994][ T4509] usb 6-1: ath9k_htc: USB layer deinitialized
07:48:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xc0189436, 0x0)

[  695.784551][ T4509] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  696.394498][ T4509] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  696.403536][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.417436][ T4509] usb 6-1: Product: syz
[  696.421602][ T4509] usb 6-1: Manufacturer: syz
[  696.427926][ T4509] usb 6-1: SerialNumber: syz
[  696.494977][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  697.184400][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  697.810805][   T39] usb 6-1: USB disconnect, device number 79
07:48:40 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xc018ae85, 0x0)

[  698.454401][ T4502] usb 6-1: Service connection timeout for: 257
[  698.461847][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  698.491804][ T4502] ath9k_htc: Failed to initialize the device
07:48:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xc020660b, 0x0)

07:48:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  698.513053][   T39] usb 6-1: ath9k_htc: USB layer deinitialized
07:48:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2)

[  698.910256][   T39] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  699.434443][   T39] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  699.443625][   T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.451956][   T39] usb 6-1: Product: syz
[  699.456389][   T39] usb 6-1: Manufacturer: syz
[  699.460993][   T39] usb 6-1: SerialNumber: syz
[  699.507420][   T39] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  700.074362][   T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  700.700105][ T2365] usb 6-1: USB disconnect, device number 80
07:48:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:42 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x3)

[  701.324430][   T39] usb 6-1: Service connection timeout for: 257
[  701.330619][   T39] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  701.356731][   T39] ath9k_htc: Failed to initialize the device
[  701.369802][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
07:48:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4)

07:48:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5)

07:48:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  701.754284][ T2365] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  701.932753][T16173] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  702.294474][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  702.303642][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.311760][ T2365] usb 6-1: Product: syz
[  702.316149][ T2365] usb 6-1: Manufacturer: syz
[  702.320852][ T2365] usb 6-1: SerialNumber: syz
[  702.366610][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  703.005410][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  703.832383][ T4508] usb 6-1: USB disconnect, device number 81
[  704.044370][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  704.051341][ T2365] ath9k_htc: Failed to initialize the device
[  704.059459][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
07:48:46 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6)

07:48:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  704.474789][T16181] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7)

07:48:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  704.704596][T14355] usb 6-1: new high-speed USB device number 82 using dummy_hcd
07:48:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  704.790437][T16206] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  705.254420][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  705.263561][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.273373][T14355] usb 6-1: Product: syz
[  705.277796][T14355] usb 6-1: Manufacturer: syz
[  705.282401][T14355] usb 6-1: SerialNumber: syz
[  705.325761][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  705.944372][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  706.760587][ T2365] usb 6-1: USB disconnect, device number 82
[  707.004827][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  707.011954][T14355] ath9k_htc: Failed to initialize the device
[  707.020572][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
07:48:48 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x8)

07:48:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x9)

07:48:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  707.614553][ T4502] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  707.684959][T16239] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  708.184421][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  708.193557][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.201697][ T4502] usb 6-1: Product: syz
[  708.206192][ T4502] usb 6-1: Manufacturer: syz
[  708.211932][ T4502] usb 6-1: SerialNumber: syz
[  708.255380][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  708.884477][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  709.719852][ T4508] usb 6-1: USB disconnect, device number 83
[  709.964504][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  709.971490][ T4509] ath9k_htc: Failed to initialize the device
[  709.994783][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
07:48:51 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xa)

07:48:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  710.419018][T16260] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb)

07:48:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x400448dd, 0x0)

[  710.614558][ T2365] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  710.659459][T16270] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xc)

[  710.745023][T16277] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  711.135312][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  711.144462][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.152437][ T2365] usb 6-1: Product: syz
[  711.158536][ T2365] usb 6-1: Manufacturer: syz
[  711.163135][ T2365] usb 6-1: SerialNumber: syz
[  711.205062][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  711.774553][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  712.612374][T14355] usb 6-1: USB disconnect, device number 84
07:48:54 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0x541b, 0x0)

07:48:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

07:48:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xd)

[  713.254515][ T2365] usb 6-1: Service connection timeout for: 257
[  713.254885][T16294] FAULT_INJECTION: forcing a failure.
[  713.254885][T16294] name failslab, interval 1, probability 0, space 0, times 1
[  713.260710][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  713.261105][ T2365] ath9k_htc: Failed to initialize the device
[  713.286812][T16294] CPU: 0 PID: 16294 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  713.297787][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  713.307843][T16294] Call Trace:
[  713.311116][T16294]  <TASK>
[  713.314042][T16294]  dump_stack_lvl+0x201/0x2d8
[  713.318731][T16294]  ? show_regs_print_info+0x12/0x12
[  713.323922][T16294]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  713.329649][T16294]  ? __might_sleep+0xe0/0xe0
[  713.334234][T16294]  ? rcu_read_lock_sched_held+0x89/0x130
[  713.339870][T16294]  should_fail+0x384/0x4b0
[  713.344292][T16294]  ? tomoyo_realpath_from_path+0xd8/0x610
[  713.350085][T16294]  should_failslab+0x5/0x20
[  713.354609][T16294]  __kmalloc+0x94/0x380
[  713.358754][T16294]  ? kfree+0x2f/0x2e0
[  713.362730][T16294]  tomoyo_realpath_from_path+0xd8/0x610
[  713.368279][T16294]  tomoyo_path_number_perm+0x219/0x7c0
[  713.373734][T16294]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  713.379233][T16294]  security_file_ioctl+0x55/0xb0
[  713.384165][T16294]  __se_sys_ioctl+0x48/0x170
[  713.388791][T16294]  do_syscall_64+0x44/0xd0
[  713.393207][T16294]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  713.399087][T16294] RIP: 0033:0x7f9e23c17059
[  713.403492][T16294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  713.423082][T16294] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  713.431493][T16294] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
[  713.439451][T16294] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  713.447412][T16294] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  713.455368][T16294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.463327][T16294] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  713.471303][T16294]  </TASK>
[  713.476133][T14355] usb 6-1: ath9k_htc: USB layer deinitialized
[  713.487792][T16294] ERROR: Out of memory at tomoyo_realpath_from_path.
07:48:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  713.506863][T16294] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:48:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe)

07:48:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

07:48:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2)

[  713.695540][T16306] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  713.710205][T16314] FAULT_INJECTION: forcing a failure.
[  713.710205][T16314] name failslab, interval 1, probability 0, space 0, times 0
[  713.734277][T16314] CPU: 1 PID: 16314 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  713.744809][T16314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  713.754863][T16314] Call Trace:
[  713.758143][T16314]  <TASK>
[  713.761061][T16314]  dump_stack_lvl+0x201/0x2d8
[  713.765737][T16314]  ? show_regs_print_info+0x12/0x12
[  713.770928][T16314]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  713.776646][T16314]  ? __might_sleep+0xe0/0xe0
[  713.781315][T16314]  ? rcu_read_lock_sched_held+0x89/0x130
[  713.786940][T16314]  should_fail+0x384/0x4b0
[  713.791349][T16314]  ? tomoyo_realpath_from_path+0xd8/0x610
[  713.797058][T16314]  should_failslab+0x5/0x20
[  713.801549][T16314]  __kmalloc+0x94/0x380
[  713.805692][T16314]  ? kfree+0x2f/0x2e0
[  713.809665][T16314]  tomoyo_realpath_from_path+0xd8/0x610
[  713.815215][T16314]  tomoyo_path_number_perm+0x219/0x7c0
[  713.820670][T16314]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  713.826164][T16314]  security_file_ioctl+0x55/0xb0
[  713.831096][T16314]  __se_sys_ioctl+0x48/0x170
[  713.835684][T16314]  do_syscall_64+0x44/0xd0
[  713.840095][T16314]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  713.845977][T16314] RIP: 0033:0x7f50c262a059
[  713.850386][T16314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  713.869982][T16314] RSP: 002b:00007f50c0f9f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  713.878384][T16314] RAX: ffffffffffffffda RBX: 00007f50c273cf60 RCX: 00007f50c262a059
[  713.886344][T16314] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  713.894300][T16314] RBP: 00007f50c0f9f1d0 R08: 0000000000000000 R09: 0000000000000000
[  713.902257][T16314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.910212][T16314] R13: 00007ffe99039bcf R14: 00007f50c0f9f300 R15: 0000000000022000
[  713.918187][T16314]  </TASK>
07:48:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  713.945678][T16314] ERROR: Out of memory at tomoyo_realpath_from_path.
[  714.001361][T14355] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  714.015607][T16319] FAULT_INJECTION: forcing a failure.
[  714.015607][T16319] name failslab, interval 1, probability 0, space 0, times 0
[  714.031551][T16319] CPU: 1 PID: 16319 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  714.042077][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  714.052178][T16319] Call Trace:
[  714.055470][T16319]  <TASK>
[  714.058412][T16319]  dump_stack_lvl+0x201/0x2d8
[  714.063119][T16319]  ? show_regs_print_info+0x12/0x12
[  714.068335][T16319]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  714.074075][T16319]  ? __might_sleep+0xe0/0xe0
[  714.078680][T16319]  ? dynamic_dname+0x138/0x1a0
[  714.083537][T16319]  should_fail+0x384/0x4b0
[  714.087968][T16319]  ? tomoyo_encode2+0x25a/0x560
[  714.092828][T16319]  should_failslab+0x5/0x20
[  714.097342][T16319]  __kmalloc+0x94/0x380
[  714.101522][T16319]  tomoyo_encode2+0x25a/0x560
[  714.106229][T16319]  ? anon_inodefs_init_fs_context+0x60/0x60
[  714.112184][T16319]  tomoyo_realpath_from_path+0x5c3/0x610
[  714.117850][T16319]  tomoyo_path_number_perm+0x219/0x7c0
[  714.123332][T16319]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  714.128860][T16319]  security_file_ioctl+0x55/0xb0
[  714.133817][T16319]  __se_sys_ioctl+0x48/0x170
[  714.138501][T16319]  do_syscall_64+0x44/0xd0
[  714.142927][T16319]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  714.148829][T16319] RIP: 0033:0x7f9e23c17059
[  714.153252][T16319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  714.172967][T16319] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  714.181410][T16319] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
[  714.189393][T16319] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  714.197373][T16319] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  714.205350][T16319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.213316][T16319] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  714.221293][T16319]  </TASK>
[  714.265441][T16319] ERROR: Out of memory at tomoyo_realpath_from_path.
[  714.273718][T16319] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  714.744391][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  714.753556][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.761817][T14355] usb 6-1: Product: syz
[  714.766773][T14355] usb 6-1: Manufacturer: syz
[  714.771378][T14355] usb 6-1: SerialNumber: syz
[  714.815249][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  715.384330][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  716.232296][ T2365] usb 6-1: USB disconnect, device number 85
07:48:58 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:48:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

07:48:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:48:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x10)

07:48:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2)

07:48:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3)

[  716.844379][T14355] usb 6-1: Service connection timeout for: 257
[  716.851864][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  716.852932][T16330] FAULT_INJECTION: forcing a failure.
[  716.852932][T16330] name failslab, interval 1, probability 0, space 0, times 0
[  716.881756][T14355] ath9k_htc: Failed to initialize the device
[  716.889595][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
[  716.894528][T16329] FAULT_INJECTION: forcing a failure.
[  716.894528][T16329] name failslab, interval 1, probability 0, space 0, times 0
[  716.925856][T16332] FAULT_INJECTION: forcing a failure.
[  716.925856][T16332] name failslab, interval 1, probability 0, space 0, times 0
[  716.928805][T16329] CPU: 0 PID: 16329 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  716.948962][T16329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  716.959032][T16329] Call Trace:
[  716.962327][T16329]  <TASK>
[  716.965264][T16329]  dump_stack_lvl+0x201/0x2d8
[  716.969971][T16329]  ? show_regs_print_info+0x12/0x12
[  716.975187][T16329]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  716.980914][T16329]  ? __might_sleep+0xe0/0xe0
[  716.985504][T16329]  ? xa_find_after+0x5b7/0x630
[  716.990267][T16329]  should_fail+0x384/0x4b0
[  716.994687][T16329]  ? kvmalloc_node+0x6e/0xe0
[  716.999279][T16329]  should_failslab+0x5/0x20
[  717.003770][T16329]  __kmalloc_node+0x97/0x420
[  717.008359][T16329]  kvmalloc_node+0x6e/0xe0
[  717.012767][T16329]  kvm_recalculate_apic_map+0x46e/0x1070
[  717.018430][T16329]  ? rcu_read_lock_bh_held+0x110/0x110
[  717.023881][T16329]  ? __jump_label_update+0x32c/0x350
[  717.029205][T16329]  ? vmx_update_msr_bitmap_x2apic+0x1ae/0x610
[  717.035290][T16329]  ? kvm_can_use_hv_timer+0x190/0x190
[  717.040666][T16329]  ? kvm_lapic_set_base+0x531/0x690
[  717.045868][T16329]  ? vmx_vcpu_load_vmcs+0x4c6/0x740
[  717.051125][T16329]  ? kvm_find_cpuid_entry+0x1a5/0x200
[  717.056535][T16329]  ? vmx_vcpu_pi_load+0x117/0x820
[  717.061590][T16329]  kvm_set_apic_base+0x191/0x250
[  717.066587][T16329]  __set_sregs_common+0x3d5/0x1490
[  717.071784][T16329]  ? lockdep_hardirqs_on_prepare+0x780/0x780
[  717.077772][T16329]  ? __get_sregs_common+0x7c0/0x7c0
[  717.082984][T16329]  __set_sregs+0xa5/0x2d0
[  717.087339][T16329]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  717.093317][T16329]  ? kvm_arch_vcpu_ioctl_set_sregs+0x40/0x40
[  717.099294][T16329]  ? fpu_swap_kvm_fpstate+0x31d/0x450
[  717.104708][T16329]  kvm_arch_vcpu_ioctl_run+0x285/0xb70
[  717.110163][T16329]  kvm_vcpu_ioctl+0x894/0xe20
[  717.114868][T16329]  ? kvm_stat_data_clear+0x390/0x390
[  717.120140][T16329]  ? memset+0x1f/0x40
[  717.124148][T16329]  ? smack_file_ioctl+0x34c/0x3a0
[  717.129173][T16329]  ? smack_file_alloc_security+0xd0/0xd0
[  717.134810][T16329]  ? bpf_lsm_file_ioctl+0x5/0x10
[  717.139776][T16329]  ? security_file_ioctl+0x9d/0xb0
[  717.144876][T16329]  ? kvm_stat_data_clear+0x390/0x390
[  717.150150][T16329]  __se_sys_ioctl+0xfb/0x170
[  717.154731][T16329]  do_syscall_64+0x44/0xd0
[  717.159149][T16329]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  717.165039][T16329] RIP: 0033:0x7f9e23c17059
[  717.169463][T16329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  717.189070][T16329] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  717.197482][T16329] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
[  717.205443][T16329] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  717.213402][T16329] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  717.221360][T16329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  717.229321][T16329] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  717.237297][T16329]  </TASK>
[  717.246990][T16330] CPU: 1 PID: 16330 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  717.257519][T16330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  717.267578][T16330] Call Trace:
[  717.270862][T16330]  <TASK>
[  717.273795][T16330]  dump_stack_lvl+0x201/0x2d8
[  717.278481][T16330]  ? show_regs_print_info+0x12/0x12
[  717.283692][T16330]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  717.289501][T16330]  ? __might_sleep+0xe0/0xe0
[  717.294095][T16330]  ? rcu_read_lock_sched_held+0x89/0x130
[  717.299736][T16330]  should_fail+0x384/0x4b0
[  717.304156][T16330]  ? tomoyo_realpath_from_path+0xd8/0x610
[  717.309871][T16330]  should_failslab+0x5/0x20
[  717.314373][T16330]  __kmalloc+0x94/0x380
[  717.318521][T16330]  ? kfree+0x2f/0x2e0
[  717.322502][T16330]  tomoyo_realpath_from_path+0xd8/0x610
[  717.328058][T16330]  tomoyo_path_number_perm+0x219/0x7c0
[  717.333526][T16330]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  717.339041][T16330]  security_file_ioctl+0x55/0xb0
[  717.343977][T16330]  __se_sys_ioctl+0x48/0x170
[  717.348562][T16330]  do_syscall_64+0x44/0xd0
[  717.352987][T16330]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  717.358877][T16330] RIP: 0033:0x7fcbc515e059
[  717.363292][T16330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  717.382893][T16330] RSP: 002b:00007fcbc3ad3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  717.391302][T16330] RAX: ffffffffffffffda RBX: 00007fcbc5270f60 RCX: 00007fcbc515e059
[  717.399272][T16330] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  717.407239][T16330] RBP: 00007fcbc3ad31d0 R08: 0000000000000000 R09: 0000000000000000
[  717.415209][T16330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  717.423174][T16330] R13: 00007ffef81e942f R14: 00007fcbc3ad3300 R15: 0000000000022000
[  717.431159][T16330]  </TASK>
[  717.434187][T16332] CPU: 0 PID: 16332 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  717.444697][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  717.450330][T16330] ERROR: Out of memory at tomoyo_realpath_from_path.
[  717.454763][T16332] Call Trace:
[  717.454773][T16332]  <TASK>
[  717.454783][T16332]  dump_stack_lvl+0x201/0x2d8
[  717.454817][T16332]  ? show_regs_print_info+0x12/0x12
[  717.454841][T16332]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  717.454866][T16332]  ? __might_sleep+0xe0/0xe0
[  717.454889][T16332]  ? dynamic_dname+0x138/0x1a0
[  717.454916][T16332]  should_fail+0x384/0x4b0
[  717.454939][T16332]  ? tomoyo_encode2+0x25a/0x560
[  717.501777][T16332]  should_failslab+0x5/0x20
[  717.506276][T16332]  __kmalloc+0x94/0x380
[  717.510429][T16332]  tomoyo_encode2+0x25a/0x560
[  717.515103][T16332]  ? anon_inodefs_init_fs_context+0x60/0x60
[  717.520994][T16332]  tomoyo_realpath_from_path+0x5c3/0x610
[  717.526626][T16332]  tomoyo_path_number_perm+0x219/0x7c0
[  717.532084][T16332]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  717.537588][T16332]  security_file_ioctl+0x55/0xb0
[  717.542517][T16332]  __se_sys_ioctl+0x48/0x170
[  717.547099][T16332]  do_syscall_64+0x44/0xd0
[  717.551510][T16332]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  717.557395][T16332] RIP: 0033:0x7f50c262a059
[  717.561799][T16332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  717.581391][T16332] RSP: 002b:00007f50c0f9f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  717.589796][T16332] RAX: ffffffffffffffda RBX: 00007f50c273cf60 RCX: 00007f50c262a059
07:48:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  717.597756][T16332] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  717.605710][T16332] RBP: 00007f50c0f9f1d0 R08: 0000000000000000 R09: 0000000000000000
[  717.613668][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  717.621625][T16332] R13: 00007ffe99039bcf R14: 00007f50c0f9f300 R15: 0000000000022000
[  717.629602][T16332]  </TASK>
[  717.659467][T16329] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  717.674796][T16332] ERROR: Out of memory at tomoyo_realpath_from_path.
07:48:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x11)

07:48:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  717.784305][ T2365] usb 6-1: new high-speed USB device number 86 using dummy_hcd
07:48:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:48:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

07:48:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  718.000651][T16358] FAULT_INJECTION: forcing a failure.
[  718.000651][T16358] name failslab, interval 1, probability 0, space 0, times 0
[  718.036462][T16358] CPU: 0 PID: 16358 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  718.046994][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  718.057068][T16358] Call Trace:
[  718.060353][T16358]  <TASK>
[  718.063291][T16358]  dump_stack_lvl+0x201/0x2d8
[  718.067995][T16358]  ? show_regs_print_info+0x12/0x12
[  718.073212][T16358]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  718.078956][T16358]  ? __might_sleep+0xe0/0xe0
[  718.083562][T16358]  should_fail+0x384/0x4b0
[  718.087983][T16358]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  718.093846][T16358]  should_failslab+0x5/0x20
[  718.098339][T16358]  kmem_cache_alloc+0x72/0x310
[  718.103102][T16358]  kvm_mmu_topup_memory_cache+0xdb/0x290
[  718.108733][T16358]  kvm_mmu_load+0xfe/0x2870
[  718.113228][T16358]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  718.119197][T16358]  ? __lock_acquire+0x2b00/0x2b00
[  718.124213][T16358]  ? print_irqtrace_events+0x220/0x220
[  718.129673][T16358]  ? kvm_mmu_unload+0xd0/0xd0
[  718.134343][T16358]  ? vmx_flush_tlb_all+0xa9/0x360
[  718.139356][T16358]  ? vmx_load_eoi_exitmap+0x230/0x230
[  718.144717][T16358]  ? kvm_apic_accept_events+0x156/0x590
[  718.150350][T16358]  ? kvm_apic_has_interrupt+0x93a/0xa20
[  718.155891][T16358]  ? kvm_lapic_set_pv_eoi+0x180/0x180
[  718.161260][T16358]  vcpu_enter_guest+0x6fe4/0xa010
[  718.166309][T16358]  ? mark_lock+0x191/0x1e00
[  718.170814][T16358]  ? trace_kvm_fpu+0x260/0x260
[  718.175564][T16358]  ? rcu_lock_release+0x5/0x20
[  718.180317][T16358]  ? __lock_acquire+0x2b00/0x2b00
[  718.185336][T16358]  ? xas_find+0xef/0x9e0
[  718.189571][T16358]  ? reacquire_held_locks+0x620/0x620
[  718.194931][T16358]  ? mark_lock+0x191/0x1e00
[  718.199430][T16358]  ? __print_lock_name+0x1d0/0x1d0
[  718.204529][T16358]  ? __lock_acquire+0x1382/0x2b00
[  718.209565][T16358]  ? rcu_read_lock_sched_held+0x89/0x130
[  718.215186][T16358]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  718.221161][T16358]  ? __lock_acquire+0x1382/0x2b00
[  718.226276][T16358]  ? trace_lock_acquire+0x190/0x190
[  718.231491][T16358]  ? read_lock_is_recursive+0x10/0x10
[  718.236858][T16358]  ? ept_invlpg+0xcf0/0xcf0
[  718.241365][T16358]  vcpu_run+0x572/0xdf0
[  718.245525][T16358]  kvm_arch_vcpu_ioctl_run+0x4b0/0xb70
[  718.250979][T16358]  kvm_vcpu_ioctl+0x894/0xe20
[  718.255650][T16358]  ? kvm_stat_data_clear+0x390/0x390
[  718.260920][T16358]  ? memset+0x1f/0x40
[  718.264889][T16358]  ? smack_file_ioctl+0x34c/0x3a0
[  718.269904][T16358]  ? smack_file_alloc_security+0xd0/0xd0
[  718.275539][T16358]  ? bpf_lsm_file_ioctl+0x5/0x10
[  718.280467][T16358]  ? security_file_ioctl+0x9d/0xb0
[  718.285568][T16358]  ? kvm_stat_data_clear+0x390/0x390
[  718.290845][T16358]  __se_sys_ioctl+0xfb/0x170
[  718.295423][T16358]  do_syscall_64+0x44/0xd0
[  718.299838][T16358]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  718.305719][T16358] RIP: 0033:0x7f9e23c17059
[  718.310124][T16358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  718.329723][T16358] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  718.338142][T16358] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
[  718.346111][T16358] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  718.354247][T16358] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  718.362207][T16358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.370165][T16358] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  718.378141][T16358]  </TASK>
[  718.594547][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  718.603621][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.612672][ T2365] usb 6-1: Product: syz
[  718.617375][ T2365] usb 6-1: Manufacturer: syz
[  718.621961][ T2365] usb 6-1: SerialNumber: syz
[  718.665195][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  719.234521][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  720.081422][ T3677] usb 6-1: USB disconnect, device number 86
07:49:02 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x12)

07:49:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

07:49:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x2, 0x0)

07:49:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x2, 0x0)

07:49:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5)

[  720.684386][ T2365] usb 6-1: Service connection timeout for: 257
[  720.693019][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  720.717919][T16368] FAULT_INJECTION: forcing a failure.
[  720.717919][T16368] name failslab, interval 1, probability 0, space 0, times 0
[  720.728820][ T2365] ath9k_htc: Failed to initialize the device
[  720.747125][T16372] FAULT_INJECTION: forcing a failure.
[  720.747125][T16372] name failslab, interval 1, probability 0, space 0, times 0
[  720.778331][ T3677] usb 6-1: ath9k_htc: USB layer deinitialized
[  720.787834][T16368] CPU: 0 PID: 16368 Comm: syz-executor.3 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  720.798369][T16368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  720.808494][T16368] Call Trace:
[  720.811825][T16368]  <TASK>
[  720.814764][T16368]  dump_stack_lvl+0x201/0x2d8
[  720.819467][T16368]  ? show_regs_print_info+0x12/0x12
[  720.824696][T16368]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  720.830445][T16368]  ? __might_sleep+0xe0/0xe0
[  720.835058][T16368]  ? rcu_read_lock_sched_held+0x89/0x130
[  720.840802][T16368]  should_fail+0x384/0x4b0
[  720.845233][T16368]  ? tomoyo_realpath_from_path+0xd8/0x610
[  720.850969][T16368]  should_failslab+0x5/0x20
[  720.855502][T16368]  __kmalloc+0x94/0x380
[  720.859663][T16368]  ? kfree+0x2f/0x2e0
[  720.863650][T16368]  tomoyo_realpath_from_path+0xd8/0x610
[  720.869201][T16368]  tomoyo_path_number_perm+0x219/0x7c0
[  720.874664][T16368]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  720.880163][T16368]  security_file_ioctl+0x55/0xb0
[  720.885095][T16368]  __se_sys_ioctl+0x48/0x170
[  720.889684][T16368]  do_syscall_64+0x44/0xd0
[  720.894104][T16368]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  720.899990][T16368] RIP: 0033:0x7efc17c75059
[  720.904402][T16368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  720.924105][T16368] RSP: 002b:00007efc165ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  720.932527][T16368] RAX: ffffffffffffffda RBX: 00007efc17d87f60 RCX: 00007efc17c75059
[  720.940499][T16368] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  720.948479][T16368] RBP: 00007efc165ea1d0 R08: 0000000000000000 R09: 0000000000000000
[  720.956446][T16368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  720.964406][T16368] R13: 00007ffc0b54e36f R14: 00007efc165ea300 R15: 0000000000022000
[  720.972384][T16368]  </TASK>
[  720.979940][T16372] CPU: 0 PID: 16372 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  720.981995][T16368] ERROR: Out of memory at tomoyo_realpath_from_path.
[  720.990463][T16372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  720.990478][T16372] Call Trace:
[  720.990486][T16372]  <TASK>
[  720.990500][T16372]  dump_stack_lvl+0x201/0x2d8
[  720.990535][T16372]  ? show_regs_print_info+0x12/0x12
[  720.990557][T16372]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  720.990584][T16372]  ? __might_sleep+0xe0/0xe0
[  720.990605][T16372]  ? rcu_read_lock_sched_held+0x89/0x130
[  720.990630][T16372]  should_fail+0x384/0x4b0
[  720.990652][T16372]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  720.990674][T16372]  should_failslab+0x5/0x20
[  720.990694][T16372]  kmem_cache_alloc+0x72/0x310
[  720.990712][T16372]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  720.990741][T16372]  kvm_mmu_topup_memory_cache+0xdb/0x290
[  720.990776][T16372]  kvm_mmu_load+0xfe/0x2870
[  721.074708][T16372]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  721.080795][T16372]  ? __lock_acquire+0x2b00/0x2b00
[  721.085814][T16372]  ? print_irqtrace_events+0x220/0x220
[  721.091271][T16372]  ? kvm_mmu_unload+0xd0/0xd0
[  721.095938][T16372]  ? vmx_flush_tlb_all+0xa9/0x360
[  721.100954][T16372]  ? vmx_get_if_flag+0x30/0x30
[  721.105705][T16372]  ? kvm_apic_accept_events+0x58b/0x590
[  721.111248][T16372]  ? print_irqtrace_events+0x220/0x220
[  721.116699][T16372]  ? kvm_apic_has_interrupt+0x97a/0xa20
[  721.122244][T16372]  ? kvm_lapic_set_pv_eoi+0x180/0x180
[  721.128360][T16372]  vcpu_enter_guest+0x6fe4/0xa010
[  721.133396][T16372]  ? mark_lock+0x191/0x1e00
[  721.137917][T16372]  ? trace_kvm_fpu+0x260/0x260
[  721.142687][T16372]  ? reacquire_held_locks+0x620/0x620
[  721.148065][T16372]  ? mark_lock+0x191/0x1e00
[  721.152555][T16372]  ? stack_trace_save+0x1e0/0x1e0
[  721.157715][T16372]  ? reacquire_held_locks+0x620/0x620
[  721.163079][T16372]  ? mark_lock+0x191/0x1e00
[  721.167573][T16372]  ? __kernel_text_address+0x9/0x40
[  721.172794][T16372]  ? arch_stack_walk+0xf8/0x140
[  721.177653][T16372]  ? __print_lock_name+0x1d0/0x1d0
[  721.182759][T16372]  ? __lock_acquire+0x1382/0x2b00
[  721.187800][T16372]  ? rcu_read_lock_sched_held+0x89/0x130
[  721.193422][T16372]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  721.199444][T16372]  ? __lock_acquire+0x1382/0x2b00
[  721.204501][T16372]  ? trace_lock_acquire+0x190/0x190
[  721.209727][T16372]  ? read_lock_is_recursive+0x10/0x10
[  721.215104][T16372]  ? ept_invlpg+0xcf0/0xcf0
[  721.219623][T16372]  vcpu_run+0x572/0xdf0
[  721.223791][T16372]  kvm_arch_vcpu_ioctl_run+0x4b0/0xb70
[  721.229250][T16372]  kvm_vcpu_ioctl+0x894/0xe20
[  721.233926][T16372]  ? kvm_stat_data_clear+0x390/0x390
[  721.239206][T16372]  ? memset+0x1f/0x40
[  721.243181][T16372]  ? smack_file_ioctl+0x34c/0x3a0
[  721.248199][T16372]  ? smack_file_alloc_security+0xd0/0xd0
[  721.253841][T16372]  ? bpf_lsm_file_ioctl+0x5/0x10
[  721.258770][T16372]  ? security_file_ioctl+0x9d/0xb0
[  721.263875][T16372]  ? kvm_stat_data_clear+0x390/0x390
[  721.269153][T16372]  __se_sys_ioctl+0xfb/0x170
[  721.273746][T16372]  do_syscall_64+0x44/0xd0
[  721.278159][T16372]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  721.284048][T16372] RIP: 0033:0x7f9e23c17059
[  721.288455][T16372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  721.308067][T16372] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  721.316472][T16372] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
07:49:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x10, 0x0)

[  721.324433][T16372] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  721.332393][T16372] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  721.340354][T16372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.348330][T16372] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  721.356311][T16372]  </TASK>
07:49:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x10, 0x0)

07:49:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x18)

07:49:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 6)

07:49:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2)

[  721.554360][ T3677] usb 6-1: new high-speed USB device number 87 using dummy_hcd
07:49:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x541b, 0x0)

[  721.641398][T16389] FAULT_INJECTION: forcing a failure.
[  721.641398][T16389] name failslab, interval 1, probability 0, space 0, times 0
[  721.675679][T16392] FAULT_INJECTION: forcing a failure.
[  721.675679][T16392] name failslab, interval 1, probability 0, space 0, times 0
[  721.692200][T16389] CPU: 1 PID: 16389 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  721.702740][T16389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  721.712804][T16389] Call Trace:
[  721.716090][T16389]  <TASK>
[  721.719023][T16389]  dump_stack_lvl+0x201/0x2d8
[  721.723717][T16389]  ? show_regs_print_info+0x12/0x12
[  721.728930][T16389]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  721.734672][T16389]  ? __might_sleep+0xe0/0xe0
[  721.739269][T16389]  ? rcu_read_lock_sched_held+0x89/0x130
[  721.744912][T16389]  should_fail+0x384/0x4b0
[  721.749352][T16389]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  721.755172][T16389]  should_failslab+0x5/0x20
[  721.759763][T16389]  kmem_cache_alloc+0x72/0x310
[  721.764527][T16389]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  721.770340][T16389]  kvm_mmu_topup_memory_cache+0xdb/0x290
[  721.775983][T16389]  kvm_mmu_load+0xfe/0x2870
[  721.780487][T16389]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  721.786470][T16389]  ? __lock_acquire+0x2b00/0x2b00
[  721.791502][T16389]  ? print_irqtrace_events+0x220/0x220
[  721.796968][T16389]  ? kvm_mmu_unload+0xd0/0xd0
[  721.801643][T16389]  ? vmx_flush_tlb_all+0xa9/0x360
[  721.806670][T16389]  ? vmx_load_eoi_exitmap+0x230/0x230
[  721.812048][T16389]  ? kvm_apic_accept_events+0x156/0x590
[  721.817697][T16389]  ? kvm_apic_has_interrupt+0x93a/0xa20
[  721.823245][T16389]  ? kvm_lapic_set_pv_eoi+0x180/0x180
[  721.828633][T16389]  vcpu_enter_guest+0x6fe4/0xa010
[  721.833685][T16389]  ? mark_lock+0x191/0x1e00
[  721.838212][T16389]  ? trace_kvm_fpu+0x260/0x260
[  721.842985][T16389]  ? rcu_lock_release+0x5/0x20
[  721.847750][T16389]  ? __lock_acquire+0x2b00/0x2b00
[  721.852783][T16389]  ? xas_find+0xef/0x9e0
[  721.857037][T16389]  ? reacquire_held_locks+0x620/0x620
[  721.862410][T16389]  ? mark_lock+0x191/0x1e00
[  721.866926][T16389]  ? __print_lock_name+0x1d0/0x1d0
[  721.872051][T16389]  ? __lock_acquire+0x1382/0x2b00
[  721.877102][T16389]  ? rcu_read_lock_sched_held+0x89/0x130
[  721.882748][T16389]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  721.888786][T16389]  ? __lock_acquire+0x1382/0x2b00
[  721.893832][T16389]  ? trace_lock_acquire+0x190/0x190
[  721.899080][T16389]  ? read_lock_is_recursive+0x10/0x10
[  721.904473][T16389]  ? ept_invlpg+0xcf0/0xcf0
[  721.909010][T16389]  vcpu_run+0x572/0xdf0
[  721.913186][T16389]  kvm_arch_vcpu_ioctl_run+0x4b0/0xb70
[  721.918654][T16389]  kvm_vcpu_ioctl+0x894/0xe20
[  721.923347][T16389]  ? kvm_stat_data_clear+0x390/0x390
[  721.928652][T16389]  ? memset+0x1f/0x40
[  721.932657][T16389]  ? smack_file_ioctl+0x34c/0x3a0
[  721.937697][T16389]  ? smack_file_alloc_security+0xd0/0xd0
[  721.943527][T16389]  ? bpf_lsm_file_ioctl+0x5/0x10
[  721.948468][T16389]  ? security_file_ioctl+0x9d/0xb0
[  721.953586][T16389]  ? kvm_stat_data_clear+0x390/0x390
[  721.958881][T16389]  __se_sys_ioctl+0xfb/0x170
[  721.963566][T16389]  do_syscall_64+0x44/0xd0
[  721.967986][T16389]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  721.973881][T16389] RIP: 0033:0x7f9e23c17059
[  721.978293][T16389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  721.997896][T16389] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  722.006319][T16389] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
[  722.014381][T16389] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  722.022357][T16389] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  722.030323][T16389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.038386][T16389] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  722.046471][T16389]  </TASK>
[  722.049487][T16392] CPU: 0 PID: 16392 Comm: syz-executor.3 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  722.060001][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  722.070071][T16392] Call Trace:
[  722.073352][T16392]  <TASK>
[  722.076288][T16392]  dump_stack_lvl+0x201/0x2d8
[  722.080987][T16392]  ? show_regs_print_info+0x12/0x12
[  722.086201][T16392]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  722.091945][T16392]  ? __might_sleep+0xe0/0xe0
[  722.096551][T16392]  ? dynamic_dname+0x138/0x1a0
[  722.101331][T16392]  should_fail+0x384/0x4b0
[  722.105756][T16392]  ? tomoyo_encode2+0x25a/0x560
[  722.110602][T16392]  should_failslab+0x5/0x20
[  722.115101][T16392]  __kmalloc+0x94/0x380
[  722.119256][T16392]  tomoyo_encode2+0x25a/0x560
[  722.123928][T16392]  ? anon_inodefs_init_fs_context+0x60/0x60
[  722.129817][T16392]  tomoyo_realpath_from_path+0x5c3/0x610
[  722.135458][T16392]  tomoyo_path_number_perm+0x219/0x7c0
[  722.140916][T16392]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  722.146414][T16392]  security_file_ioctl+0x55/0xb0
[  722.151355][T16392]  __se_sys_ioctl+0x48/0x170
[  722.155952][T16392]  do_syscall_64+0x44/0xd0
[  722.160389][T16392]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  722.166293][T16392] RIP: 0033:0x7efc17c75059
[  722.170711][T16392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  722.190311][T16392] RSP: 002b:00007efc165ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  722.198726][T16392] RAX: ffffffffffffffda RBX: 00007efc17d87f60 RCX: 00007efc17c75059
[  722.206718][T16392] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  722.214683][T16392] RBP: 00007efc165ea1d0 R08: 0000000000000000 R09: 0000000000000000
[  722.222838][T16392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.230815][T16392] R13: 00007ffc0b54e36f R14: 00007efc165ea300 R15: 0000000000022000
[  722.238802][T16392]  </TASK>
[  722.273817][T16392] ERROR: Out of memory at tomoyo_realpath_from_path.
[  722.514464][ T3677] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  722.523532][ T3677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.532147][ T3677] usb 6-1: Product: syz
[  722.536609][ T3677] usb 6-1: Manufacturer: syz
[  722.541325][ T3677] usb 6-1: SerialNumber: syz
[  722.585273][ T3677] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  723.154372][ T3677] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  723.991411][T14355] usb 6-1: USB disconnect, device number 87
07:49:06 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x21)

07:49:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5421, 0x0)

07:49:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x541b, 0x0)

07:49:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 7)

07:49:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3)

[  724.577970][T16401] FAULT_INJECTION: forcing a failure.
[  724.577970][T16401] name failslab, interval 1, probability 0, space 0, times 0
[  724.604370][ T3677] usb 6-1: Service connection timeout for: 258
[  724.610694][ T3677] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  724.636509][T16403] FAULT_INJECTION: forcing a failure.
[  724.636509][T16403] name failslab, interval 1, probability 0, space 0, times 0
[  724.636564][ T3677] ath9k_htc: Failed to initialize the device
[  724.669081][T16401] CPU: 1 PID: 16401 Comm: syz-executor.3 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  724.679612][T16401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  724.689679][T16401] Call Trace:
[  724.692967][T16401]  <TASK>
[  724.695912][T16401]  dump_stack_lvl+0x201/0x2d8
[  724.700616][T16401]  ? show_regs_print_info+0x12/0x12
[  724.705825][T16401]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  724.711553][T16401]  ? __might_sleep+0xe0/0xe0
[  724.716153][T16401]  should_fail+0x384/0x4b0
[  724.720574][T16401]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  724.726384][T16401]  should_failslab+0x5/0x20
[  724.730893][T16401]  kmem_cache_alloc+0x72/0x310
[  724.735676][T16401]  kvm_mmu_topup_memory_cache+0xdb/0x290
[  724.741316][T16401]  kvm_mmu_load+0xfe/0x2870
[  724.745820][T16401]  ? kvm_is_reserved_pfn+0x229/0x2a0
[  724.751113][T16401]  ? put_page+0xaa/0x1d0
[  724.755365][T16401]  ? kvm_mmu_unload+0xd0/0xd0
[  724.760048][T16401]  ? vmx_load_eoi_exitmap+0x230/0x230
[  724.765425][T16401]  ? kvm_apic_accept_events+0x156/0x590
[  724.771070][T16401]  ? kvm_apic_has_interrupt+0x48f/0xa20
[  724.776628][T16401]  vcpu_enter_guest+0x6fe4/0xa010
[  724.781680][T16401]  ? mark_lock+0x191/0x1e00
[  724.786206][T16401]  ? trace_kvm_fpu+0x260/0x260
[  724.790980][T16401]  ? __print_lock_name+0x1d0/0x1d0
[  724.796100][T16401]  ? vmx_vcpu_pi_load+0x117/0x820
[  724.801138][T16401]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  724.807131][T16401]  ? asan.module_dtor+0x20/0x20
[  724.811999][T16401]  ? reacquire_held_locks+0x620/0x620
[  724.817378][T16401]  ? mark_lock+0x191/0x1e00
[  724.821893][T16401]  ? __print_lock_name+0x1d0/0x1d0
[  724.827012][T16401]  ? kvm_arch_vcpu_load+0x727/0xd00
[  724.832222][T16401]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  724.838204][T16401]  ? do_get_msr_feature+0x2a0/0x2a0
[  724.843414][T16401]  ? mark_lock+0x191/0x1e00
[  724.847932][T16401]  ? __lock_acquire+0x1382/0x2b00
[  724.852985][T16401]  ? trace_lock_acquire+0x190/0x190
[  724.858204][T16401]  ? print_irqtrace_events+0x220/0x220
[  724.863669][T16401]  ? read_lock_is_recursive+0x10/0x10
[  724.869041][T16401]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  724.875197][T16401]  ? lockdep_hardirqs_on+0x95/0x140
[  724.880410][T16401]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  724.886671][T16401]  vcpu_run+0x572/0xdf0
[  724.890841][T16401]  kvm_arch_vcpu_ioctl_run+0x4b0/0xb70
[  724.896305][T16401]  kvm_vcpu_ioctl+0x894/0xe20
[  724.900996][T16401]  ? kvm_stat_data_clear+0x390/0x390
[  724.906287][T16401]  ? memset+0x1f/0x40
[  724.910278][T16401]  ? smack_file_ioctl+0x34c/0x3a0
[  724.915305][T16401]  ? smack_file_alloc_security+0xd0/0xd0
[  724.920958][T16401]  ? bpf_lsm_file_ioctl+0x5/0x10
[  724.925895][T16401]  ? security_file_ioctl+0x9d/0xb0
[  724.931013][T16401]  ? kvm_stat_data_clear+0x390/0x390
[  724.936295][T16401]  __se_sys_ioctl+0xfb/0x170
[  724.940889][T16401]  do_syscall_64+0x44/0xd0
[  724.945316][T16401]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  724.951207][T16401] RIP: 0033:0x7efc17c75059
[  724.955632][T16401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  724.975408][T16401] RSP: 002b:00007efc165ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  724.983825][T16401] RAX: ffffffffffffffda RBX: 00007efc17d87f60 RCX: 00007efc17c75059
[  724.991886][T16401] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  724.999864][T16401] RBP: 00007efc165ea1d0 R08: 0000000000000000 R09: 0000000000000000
[  725.008095][T16401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.016067][T16401] R13: 00007ffc0b54e36f R14: 00007efc165ea300 R15: 0000000000022000
[  725.024059][T16401]  </TASK>
[  725.027075][T16403] CPU: 0 PID: 16403 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  725.037594][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  725.038167][T14355] usb 6-1: ath9k_htc: USB layer deinitialized
[  725.047840][T16403] Call Trace:
[  725.047851][T16403]  <TASK>
[  725.047861][T16403]  dump_stack_lvl+0x201/0x2d8
[  725.047894][T16403]  ? show_regs_print_info+0x12/0x12
[  725.047918][T16403]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  725.047945][T16403]  ? __might_sleep+0xe0/0xe0
[  725.047966][T16403]  ? rcu_read_lock_sched_held+0x89/0x130
[  725.047992][T16403]  should_fail+0x384/0x4b0
[  725.048016][T16403]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  725.048036][T16403]  should_failslab+0x5/0x20
[  725.048056][T16403]  kmem_cache_alloc+0x72/0x310
[  725.048077][T16403]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  725.048106][T16403]  kvm_mmu_topup_memory_cache+0xdb/0x290
[  725.048138][T16403]  kvm_mmu_load+0xfe/0x2870
[  725.048159][T16403]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  725.048182][T16403]  ? __lock_acquire+0x2b00/0x2b00
[  725.132496][T16403]  ? print_irqtrace_events+0x220/0x220
[  725.137980][T16403]  ? kvm_mmu_unload+0xd0/0xd0
[  725.142683][T16403]  ? vmx_flush_tlb_all+0xa9/0x360
[  725.147715][T16403]  ? vmx_load_eoi_exitmap+0x230/0x230
[  725.153100][T16403]  ? kvm_apic_accept_events+0x156/0x590
[  725.158660][T16403]  ? kvm_apic_has_interrupt+0x93a/0xa20
[  725.164234][T16403]  ? kvm_lapic_set_pv_eoi+0x180/0x180
[  725.169627][T16403]  vcpu_enter_guest+0x6fe4/0xa010
[  725.174672][T16403]  ? mark_lock+0x191/0x1e00
[  725.179188][T16403]  ? trace_kvm_fpu+0x260/0x260
[  725.183958][T16403]  ? rcu_lock_release+0x5/0x20
[  725.188720][T16403]  ? __lock_acquire+0x2b00/0x2b00
[  725.193747][T16403]  ? xas_find+0xef/0x9e0
[  725.197985][T16403]  ? reacquire_held_locks+0x620/0x620
[  725.203348][T16403]  ? mark_lock+0x191/0x1e00
[  725.207850][T16403]  ? __print_lock_name+0x1d0/0x1d0
[  725.212954][T16403]  ? __lock_acquire+0x1382/0x2b00
[  725.217991][T16403]  ? rcu_read_lock_sched_held+0x89/0x130
[  725.223615][T16403]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  725.229751][T16403]  ? __lock_acquire+0x1382/0x2b00
[  725.234801][T16403]  ? trace_lock_acquire+0x190/0x190
[  725.240009][T16403]  ? read_lock_is_recursive+0x10/0x10
[  725.245378][T16403]  ? ept_invlpg+0xcf0/0xcf0
[  725.249897][T16403]  vcpu_run+0x572/0xdf0
[  725.254074][T16403]  kvm_arch_vcpu_ioctl_run+0x4b0/0xb70
[  725.259539][T16403]  kvm_vcpu_ioctl+0x894/0xe20
[  725.264221][T16403]  ? kvm_stat_data_clear+0x390/0x390
[  725.269497][T16403]  ? memset+0x1f/0x40
[  725.273472][T16403]  ? smack_file_ioctl+0x34c/0x3a0
[  725.278489][T16403]  ? smack_file_alloc_security+0xd0/0xd0
[  725.284127][T16403]  ? bpf_lsm_file_ioctl+0x5/0x10
[  725.289052][T16403]  ? security_file_ioctl+0x9d/0xb0
[  725.294168][T16403]  ? kvm_stat_data_clear+0x390/0x390
[  725.299463][T16403]  __se_sys_ioctl+0xfb/0x170
[  725.304084][T16403]  do_syscall_64+0x44/0xd0
[  725.308523][T16403]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  725.314411][T16403] RIP: 0033:0x7f9e23c17059
[  725.318825][T16403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  725.338422][T16403] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  725.346825][T16403] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
[  725.354789][T16403] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  725.362768][T16403] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  725.370730][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.378689][T16403] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  725.386665][T16403]  </TASK>
07:49:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x25)

07:49:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5421, 0x0)

07:49:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5450, 0x0)

07:49:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 8)

07:49:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:49:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x28)

[  725.694282][T14355] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  725.730497][T16428] FAULT_INJECTION: forcing a failure.
[  725.730497][T16428] name failslab, interval 1, probability 0, space 0, times 0
[  725.790061][T16428] CPU: 1 PID: 16428 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  725.800599][T16428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  725.810665][T16428] Call Trace:
[  725.813948][T16428]  <TASK>
[  725.816875][T16428]  dump_stack_lvl+0x201/0x2d8
[  725.821556][T16428]  ? show_regs_print_info+0x12/0x12
[  725.826754][T16428]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  725.832477][T16428]  ? __might_sleep+0xe0/0xe0
[  725.837059][T16428]  ? rcu_read_lock_sched_held+0x89/0x130
[  725.842687][T16428]  should_fail+0x384/0x4b0
[  725.847097][T16428]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  725.852902][T16428]  should_failslab+0x5/0x20
[  725.857399][T16428]  kmem_cache_alloc+0x72/0x310
[  725.862153][T16428]  ? kvm_mmu_topup_memory_cache+0xdb/0x290
[  725.867956][T16428]  kvm_mmu_topup_memory_cache+0xdb/0x290
[  725.873612][T16428]  kvm_mmu_load+0xfe/0x2870
[  725.878109][T16428]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  725.884081][T16428]  ? __lock_acquire+0x2b00/0x2b00
[  725.889096][T16428]  ? print_irqtrace_events+0x220/0x220
[  725.894551][T16428]  ? kvm_mmu_unload+0xd0/0xd0
[  725.899212][T16428]  ? vmx_flush_tlb_all+0xa9/0x360
[  725.904226][T16428]  ? vmx_load_eoi_exitmap+0x230/0x230
[  725.909586][T16428]  ? kvm_apic_accept_events+0x156/0x590
[  725.915128][T16428]  ? kvm_apic_has_interrupt+0x93a/0xa20
[  725.920663][T16428]  ? kvm_lapic_set_pv_eoi+0x180/0x180
[  725.926035][T16428]  vcpu_enter_guest+0x6fe4/0xa010
[  725.931069][T16428]  ? mark_lock+0x191/0x1e00
[  725.935571][T16428]  ? trace_kvm_fpu+0x260/0x260
[  725.940325][T16428]  ? rcu_lock_release+0x5/0x20
[  725.945079][T16428]  ? __lock_acquire+0x2b00/0x2b00
[  725.950099][T16428]  ? xas_find+0xef/0x9e0
[  725.954337][T16428]  ? reacquire_held_locks+0x620/0x620
[  725.959698][T16428]  ? mark_lock+0x191/0x1e00
[  725.964207][T16428]  ? __print_lock_name+0x1d0/0x1d0
[  725.969312][T16428]  ? __lock_acquire+0x1382/0x2b00
[  725.974353][T16428]  ? rcu_read_lock_sched_held+0x89/0x130
[  725.979976][T16428]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  725.985950][T16428]  ? __lock_acquire+0x1382/0x2b00
[  725.990987][T16428]  ? trace_lock_acquire+0x190/0x190
[  725.996223][T16428]  ? read_lock_is_recursive+0x10/0x10
[  726.001621][T16428]  ? ept_invlpg+0xcf0/0xcf0
[  726.006160][T16428]  vcpu_run+0x572/0xdf0
[  726.010336][T16428]  kvm_arch_vcpu_ioctl_run+0x4b0/0xb70
[  726.015817][T16428]  kvm_vcpu_ioctl+0x894/0xe20
[  726.020498][T16428]  ? kvm_stat_data_clear+0x390/0x390
[  726.025788][T16428]  ? memset+0x1f/0x40
[  726.029784][T16428]  ? smack_file_ioctl+0x34c/0x3a0
[  726.034829][T16428]  ? smack_file_alloc_security+0xd0/0xd0
[  726.040493][T16428]  ? bpf_lsm_file_ioctl+0x5/0x10
[  726.045434][T16428]  ? security_file_ioctl+0x9d/0xb0
[  726.050544][T16428]  ? kvm_stat_data_clear+0x390/0x390
[  726.055833][T16428]  __se_sys_ioctl+0xfb/0x170
[  726.060474][T16428]  do_syscall_64+0x44/0xd0
[  726.064923][T16428]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  726.070913][T16428] RIP: 0033:0x7f9e23c17059
[  726.075515][T16428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  726.095124][T16428] RSP: 002b:00007f9e2258c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  726.103542][T16428] RAX: ffffffffffffffda RBX: 00007f9e23d29f60 RCX: 00007f9e23c17059
[  726.111515][T16428] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  726.119482][T16428] RBP: 00007f9e2258c1d0 R08: 0000000000000000 R09: 0000000000000000
[  726.127445][T16428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.135513][T16428] R13: 00007fff38fad4df R14: 00007f9e2258c300 R15: 0000000000022000
[  726.143587][T16428]  </TASK>
[  726.564790][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  726.573854][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.582431][T14355] usb 6-1: Product: syz
[  726.587030][T14355] usb 6-1: Manufacturer: syz
[  726.591714][T14355] usb 6-1: SerialNumber: syz
[  726.645310][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  727.224605][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  728.069890][ T4508] usb 6-1: USB disconnect, device number 88
07:49:10 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5450, 0x0)

07:49:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5451, 0x0)

07:49:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x2, 0x0)

07:49:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x41)

07:49:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9)

[  728.684850][T14355] usb 6-1: Service connection timeout for: 258
[  728.691635][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:49:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5452, 0x0)

[  728.738810][T14355] ath9k_htc: Failed to initialize the device
[  728.769796][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x10, 0x0)

07:49:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:49:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5451, 0x0)

07:49:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x48)

07:49:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x541b, 0x0)

[  729.002492][T16459] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  729.184350][ T4508] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  729.774457][ T4508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  729.783525][ T4508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.791798][ T4508] usb 6-1: Product: syz
[  729.796290][ T4508] usb 6-1: Manufacturer: syz
[  729.800897][ T4508] usb 6-1: SerialNumber: syz
[  729.859497][ T4508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  730.524672][ T4508] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  731.368906][ T4510] usb 6-1: USB disconnect, device number 89
07:49:13 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5460, 0x0)

07:49:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5452, 0x0)

07:49:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x2, 0x0)

07:49:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4c)

07:49:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5421, 0x0)

[  732.044365][ T4508] usb 6-1: Service connection timeout for: 258
[  732.050725][ T4508] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  732.083644][ T4508] ath9k_htc: Failed to initialize the device
07:49:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5c)

07:49:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8933, 0x0)

[  732.094363][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5460, 0x0)

07:49:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5450, 0x0)

07:49:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x10, 0x0)

07:49:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x60)

[  732.474304][ T4510] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  733.094562][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  733.103630][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.111996][ T4510] usb 6-1: Product: syz
[  733.116472][ T4510] usb 6-1: Manufacturer: syz
[  733.121072][ T4510] usb 6-1: SerialNumber: syz
[  733.185663][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  733.814405][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  734.439941][ T3677] usb 6-1: USB disconnect, device number 90
07:49:16 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xaece, 0x0)

07:49:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5451, 0x0)

07:49:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x541b, 0x0)

07:49:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8933, 0x0)

07:49:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x68)

07:49:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5452, 0x0)

[  735.094553][ T4510] usb 6-1: Service connection timeout for: 256
[  735.115048][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  735.142967][ T4510] ath9k_htc: Failed to initialize the device
[  735.151874][ T3677] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6c)

07:49:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x5421, 0x0)

07:49:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xaece, 0x0)

07:49:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400448c9, 0x0)

07:49:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5460, 0x0)

[  735.544571][ T3677] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  736.104517][ T3677] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  736.113616][ T3677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.121981][ T3677] usb 6-1: Product: syz
[  736.126500][ T3677] usb 6-1: Manufacturer: syz
[  736.131094][ T3677] usb 6-1: SerialNumber: syz
[  736.186090][ T3677] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  736.754543][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  737.381119][ T4510] usb 6-1: USB disconnect, device number 91
07:49:19 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x5450, 0x0)

07:49:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x74)

07:49:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8933, 0x0)

07:49:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400448c9, 0x0)

07:49:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400448dd, 0x0)

[  738.044491][ T2365] usb 6-1: Service connection timeout for: 256
[  738.054487][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  738.073382][ T2365] ath9k_htc: Failed to initialize the device
[  738.092571][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400454ca, 0x0)

07:49:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400448dd, 0x0)

07:49:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7a)

07:49:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xaece, 0x0)

07:49:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x5451, 0x0)

07:49:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40049409, 0x0)

[  738.504469][ T4510] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  739.094461][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  739.103588][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.112035][ T4510] usb 6-1: Product: syz
[  739.116446][ T4510] usb 6-1: Manufacturer: syz
[  739.121046][ T4510] usb 6-1: SerialNumber: syz
[  739.166104][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  739.805848][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  740.419150][ T4502] usb 6-1: USB disconnect, device number 92
07:49:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300)

07:49:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x5452, 0x0)

07:49:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400454ca, 0x0)

07:49:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400448c9, 0x0)

07:49:22 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0)

[  741.084488][ T4510] usb 6-1: Service connection timeout for: 256
[  741.093181][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:49:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x500)

07:49:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400448dd, 0x0)

07:49:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x5460, 0x0)

[  741.128363][ T4510] ath9k_htc: Failed to initialize the device
[  741.155868][ T4502] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40049409, 0x0)

07:49:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4004ae99, 0x0)

07:49:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x600)

07:49:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x400454ca, 0x0)

07:49:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x8933, 0x0)

[  741.564448][ T4502] usb 6-1: new high-speed USB device number 93 using dummy_hcd
07:49:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x700)

07:49:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0)

[  742.164396][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  742.173568][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.181737][ T4502] usb 6-1: Product: syz
[  742.185952][ T4502] usb 6-1: Manufacturer: syz
[  742.190551][ T4502] usb 6-1: SerialNumber: syz
[  742.245005][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  742.874458][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  743.702520][ T3677] usb 6-1: USB disconnect, device number 93
07:49:25 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40086602, 0x0)

07:49:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40049409, 0x0)

07:49:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xaece, 0x0)

07:49:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x900)

07:49:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4004ae99, 0x0)

[  744.134663][ T4502] usb 6-1: Service connection timeout for: 256
[  744.141017][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  744.149309][ T4502] ath9k_htc: Failed to initialize the device
[  744.159937][ T3677] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x400448c9, 0x0)

07:49:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40086602, 0x0)

07:49:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0)

07:49:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40186366, 0x0)

07:49:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xa00)

07:49:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40186366, 0x0)

[  744.665549][ T3677] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  745.184461][ T3677] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  745.193736][ T3677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.209185][ T3677] usb 6-1: Product: syz
[  745.213373][ T3677] usb 6-1: Manufacturer: syz
[  745.218183][ T3677] usb 6-1: SerialNumber: syz
[  745.266844][ T3677] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  745.834433][ T3677] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  746.661425][ T4510] usb 6-1: USB disconnect, device number 94
[  747.005578][ T1226] ieee802154 phy0 wpan0: encryption failed: -22
[  747.011897][ T1226] ieee802154 phy1 wpan1: encryption failed: -22
[  747.084412][ T3677] usb 6-1: Service connection timeout for: 256
[  747.091826][ T3677] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  747.108208][ T3677] ath9k_htc: Failed to initialize the device
[  747.119318][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:28 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x400448dd, 0x0)

07:49:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb00)

07:49:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x401c5820, 0x0)

07:49:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4004ae99, 0x0)

07:49:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x401c5820, 0x0)

07:49:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4020940d, 0x0)

07:49:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40086602, 0x0)

07:49:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xc00)

07:49:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x400454ca, 0x0)

07:49:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0)

07:49:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4020940d, 0x0)

[  747.704266][ T4510] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  748.334423][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  748.343640][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.353035][ T4510] usb 6-1: Product: syz
[  748.357405][ T4510] usb 6-1: Manufacturer: syz
[  748.362260][ T4510] usb 6-1: SerialNumber: syz
[  748.428500][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  749.034357][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  749.850600][ T3774] usb 6-1: USB disconnect, device number 95
[  750.284423][ T4510] usb 6-1: Service connection timeout for: 256
[  750.290603][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  750.299925][ T4510] ath9k_htc: Failed to initialize the device
[  750.307203][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:32 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x40186366, 0x0)

07:49:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x40049409, 0x0)

07:49:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4090ae82, 0x0)

07:49:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xd00)

07:49:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0)

07:49:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe00)

07:49:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0)

07:49:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4090ae82, 0x0)

07:49:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x401c5820, 0x0)

07:49:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4138ae84, 0x0)

07:49:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x4004ae99, 0x0)

[  750.824253][ T3774] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  751.404553][ T3774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  751.413618][ T3774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.422029][ T3774] usb 6-1: Product: syz
[  751.426856][ T3774] usb 6-1: Manufacturer: syz
[  751.431472][ T3774] usb 6-1: SerialNumber: syz
[  751.476166][ T3774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  752.064378][ T3774] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  752.498070][ T3774] usb 6-1: ath9k_htc: Invalid TX pipe: 0
[  752.503754][ T3774] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  752.902430][ T4510] usb 6-1: USB disconnect, device number 96
[  752.917578][ T3774] ath9k_htc: Failed to initialize the device
[  752.923880][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:35 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1100)

07:49:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4020940d, 0x0)

07:49:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4138ae84, 0x0)

07:49:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0)

07:49:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x40086602, 0x0)

07:49:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0)

07:49:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x40186366, 0x0)

07:49:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1200)

07:49:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8004ae98, 0x0)

07:49:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0)

07:49:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4090ae82, 0x0)

[  753.794326][ T4502] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  754.354567][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  754.363629][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.371869][ T4502] usb 6-1: Product: syz
[  754.376273][ T4502] usb 6-1: Manufacturer: syz
[  754.380879][ T4502] usb 6-1: SerialNumber: syz
[  754.436682][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  755.064412][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  755.507996][ T4502] usb 6-1: ath9k_htc: Invalid TX pipe: 0
[  755.513685][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  755.918705][ T3677] usb 6-1: USB disconnect, device number 97
[  755.947917][ T4502] ath9k_htc: Failed to initialize the device
[  755.955408][ T3677] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:38 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x401c5820, 0x0)

07:49:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8004ae98, 0x0)

07:49:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x80086301, 0x0)

07:49:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4138ae84, 0x0)

07:49:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1560)

07:49:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1800)

07:49:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0)

07:49:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x80086301, 0x0)

07:49:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x4020940d, 0x0)

07:49:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x80086601, 0x0)

07:49:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8004ae98, 0x0)

[  756.854416][ T4502] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  757.245533][    T5] kworker/dying (5) used greatest stack depth: 18520 bytes left
[  757.474429][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  757.483488][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.492053][ T4502] usb 6-1: Product: syz
[  757.496614][ T4502] usb 6-1: Manufacturer: syz
[  757.501219][ T4502] usb 6-1: SerialNumber: syz
[  757.545979][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  758.144376][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  758.576479][ T4502] usb 6-1: ath9k_htc: Invalid TX pipe: 0
[  758.582152][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  758.981294][ T4510] usb 6-1: USB disconnect, device number 98
[  758.997111][ T4502] ath9k_htc: Failed to initialize the device
[  759.014947][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:41 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x80086601, 0x0)

07:49:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2000)

07:49:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0)

07:49:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x801c581f, 0x0)

07:49:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x80086301, 0x0)

07:49:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x801c581f, 0x0)

07:49:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2100)

07:49:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x4090ae82, 0x0)

07:49:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x80086601, 0x0)

07:49:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8090ae81, 0x0)

07:49:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8090ae81, 0x0)

[  759.884585][ T4510] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  760.445440][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  760.454662][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.462635][ T4510] usb 6-1: Product: syz
[  760.466894][ T4510] usb 6-1: Manufacturer: syz
[  760.471491][ T4510] usb 6-1: SerialNumber: syz
[  760.525872][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  761.194361][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  761.850254][ T3677] usb 6-1: USB disconnect, device number 99
07:49:44 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2500)

07:49:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x801c581f, 0x0)

07:49:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8138ae83, 0x0)

07:49:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x4138ae84, 0x0)

07:49:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8138ae83, 0x0)

07:49:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8090ae81, 0x0)

07:49:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

07:49:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0)

07:49:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2800)

07:49:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

[  762.684631][ T4502] usb 6-1: Service connection timeout for: 258
[  762.691775][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  762.724447][ T4502] ath9k_htc: Failed to initialize the device
[  762.732867][ T3677] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x8138ae83, 0x0)

[  763.094369][ T3677] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  763.624485][ T3677] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  763.633528][ T3677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.649686][ T3677] usb 6-1: Product: syz
[  763.653857][ T3677] usb 6-1: Manufacturer: syz
[  763.660921][ T3677] usb 6-1: SerialNumber: syz
[  763.705325][ T3677] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  764.274475][   T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  764.919459][ T4502] usb 6-1: USB disconnect, device number 100
07:49:47 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:49:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:49:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000)

07:49:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:49:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x8004ae98, 0x0)

07:49:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

07:49:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:49:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4100)

07:49:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:49:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:49:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x80086301, 0x0)

[  765.734076][   T39] usb 6-1: Service connection timeout for: 258
[  765.746766][   T39] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  765.764627][   T39] ath9k_htc: Failed to initialize the device
[  765.771024][ T4502] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

[  766.204377][ T4502] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  766.794437][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  766.803618][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.812209][ T4502] usb 6-1: Product: syz
[  766.816730][ T4502] usb 6-1: Manufacturer: syz
[  766.821448][ T4502] usb 6-1: SerialNumber: syz
[  766.875398][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  767.496077][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  768.132455][ T4508] usb 6-1: USB disconnect, device number 101
07:49:50 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)

07:49:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0189436, 0x0)

07:49:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4800)

07:49:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0189436, 0x0)

07:49:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x80086601, 0x0)

07:49:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc0189436, 0x0)

07:49:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x801c581f, 0x0)

07:49:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc018ae85, 0x0)

07:49:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc018ae85, 0x0)

07:49:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc018ae85, 0x0)

07:49:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4c00)

07:49:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x8090ae81, 0x0)

[  769.014525][ T4502] usb 6-1: Service connection timeout for: 258
[  769.020766][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  769.055391][ T4502] ath9k_htc: Failed to initialize the device
[  769.082630][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
[  769.484337][ T4508] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  770.114504][ T4508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  770.123650][ T4508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.132296][ T4508] usb 6-1: Product: syz
[  770.136861][ T4508] usb 6-1: Manufacturer: syz
[  770.141563][ T4508] usb 6-1: SerialNumber: syz
[  770.200665][ T4508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  770.854373][ T4508] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  771.722642][ T2365] usb 6-1: USB disconnect, device number 102
07:49:53 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)

07:49:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc020660b, 0x0)

07:49:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc020660b, 0x0)

07:49:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x8138ae83, 0x0)

07:49:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xc020660b, 0x0)

07:49:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5c00)

[  772.364465][ T4508] usb 6-1: Service connection timeout for: 258
[  772.370807][ T4508] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  772.391886][ T4508] ath9k_htc: Failed to initialize the device
07:49:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2)

[  772.409463][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6000)

07:49:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

07:49:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2)

07:49:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2)

07:49:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3)

[  772.784462][ T2365] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  773.304447][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  773.313617][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.321783][ T2365] usb 6-1: Product: syz
[  773.326264][ T2365] usb 6-1: Manufacturer: syz
[  773.330936][ T2365] usb 6-1: SerialNumber: syz
[  773.385635][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  773.954443][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  774.802262][ T4508] usb 6-1: USB disconnect, device number 103
07:49:56 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)

07:49:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6015)

07:49:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3)

07:49:56 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:49:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3)

07:49:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4)

[  775.414611][ T2365] usb 6-1: Service connection timeout for: 258
[  775.420807][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  775.447406][ T2365] ath9k_htc: Failed to initialize the device
[  775.457320][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
07:49:57 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:49:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5)

07:49:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4)

07:49:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4)

07:49:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6800)

07:49:57 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xc0189436, 0x0)

[  775.834784][ T4508] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  776.416440][ T4508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  776.425658][ T4508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.433635][ T4508] usb 6-1: Product: syz
[  776.437883][ T4508] usb 6-1: Manufacturer: syz
[  776.442484][ T4508] usb 6-1: SerialNumber: syz
[  776.495910][ T4508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  777.064377][ T4508] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  777.911022][T14355] usb 6-1: USB disconnect, device number 104
07:50:00 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x0, 0x0, "bf169103"})

07:50:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x6)

07:50:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6c00)

07:50:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5)

07:50:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5)

07:50:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xc018ae85, 0x0)

[  778.524341][ T4508] usb 6-1: Service connection timeout for: 258
[  778.532950][ T4508] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:50:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7400)

[  778.569775][ T4508] ath9k_htc: Failed to initialize the device
[  778.585936][T14355] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x6)

07:50:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xc020660b, 0x0)

07:50:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x6)

07:50:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7)

07:50:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7)

[  779.014488][T14355] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  779.594551][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  779.603647][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.612564][T14355] usb 6-1: Product: syz
[  779.617044][T14355] usb 6-1: Manufacturer: syz
[  779.621629][T14355] usb 6-1: SerialNumber: syz
[  779.665342][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  780.234462][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  781.080047][ T3774] usb 6-1: USB disconnect, device number 105
07:50:03 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x0, 0x0, "bf169103"})

07:50:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7a00)

07:50:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8)

07:50:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7)

07:50:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x2)

07:50:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8)

[  781.724402][T14355] usb 6-1: Service connection timeout for: 258
[  781.735414][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:50:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xff00)

07:50:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x9)

[  781.772026][T14355] ath9k_htc: Failed to initialize the device
[  781.799586][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x3)

07:50:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x9)

07:50:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8)

07:50:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x4)

[  782.209996][ T3774] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  782.814437][ T3774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  782.823502][ T3774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.832483][ T3774] usb 6-1: Product: syz
[  782.836975][ T3774] usb 6-1: Manufacturer: syz
[  782.841623][ T3774] usb 6-1: SerialNumber: syz
[  782.885192][ T3774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  783.524509][ T3774] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  784.363833][ T4510] usb 6-1: USB disconnect, device number 106
07:50:06 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x0, 0x0, "bf169103"})

07:50:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x219256)

07:50:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa)

07:50:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa)

07:50:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x9)

07:50:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x5)

[  785.014474][ T3774] usb 6-1: Service connection timeout for: 258
[  785.020957][ T3774] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  785.051957][ T3774] ath9k_htc: Failed to initialize the device
07:50:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb)

[  785.069176][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa)

07:50:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x6)

07:50:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb)

07:50:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff)

07:50:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc)

[  785.484368][ T4510] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  786.084623][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  786.093695][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.102322][ T4510] usb 6-1: Product: syz
[  786.106818][ T4510] usb 6-1: Manufacturer: syz
[  786.111500][ T4510] usb 6-1: SerialNumber: syz
[  786.165391][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  786.844389][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  787.690474][ T3774] usb 6-1: USB disconnect, device number 107
07:50:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd)

07:50:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc)

07:50:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe0ffff)

07:50:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb)

07:50:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x7)

07:50:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x6)

07:50:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe)

[  788.384358][ T4510] usb 6-1: Service connection timeout for: 258
[  788.402365][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  788.433288][ T4510] ath9k_htc: Failed to initialize the device
[  788.449698][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc)

07:50:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x8)

07:50:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

07:50:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd)

07:50:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

07:50:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10)

07:50:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

07:50:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe)

07:50:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd)

07:50:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x9)

07:50:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

07:50:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x11)

07:50:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0)

07:50:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10)

07:50:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

07:50:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe)

07:50:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xa)

07:50:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x12)

07:50:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd)

07:50:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x11)

07:50:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000000)

07:50:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xb)

07:50:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10)

07:50:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x18)

07:50:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0x5450, 0x0)

07:50:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x12)

07:50:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5000000)

07:50:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x11)

07:50:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xc)

07:50:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x25)

07:50:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x5421, 0x0)

07:50:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x18)

07:50:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

07:50:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x12)

07:50:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xd)

07:50:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0x541b, 0x0)

07:50:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x28)

07:50:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x25)

07:50:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x18)

07:50:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7000000)

07:50:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xe)

07:50:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x21)

07:50:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x41)

07:50:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x8000000)

07:50:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x25)

07:50:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x10)

07:50:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x28)

07:50:12 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000410000000"])

07:50:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c)

07:50:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x9000000)

07:50:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x41)

07:50:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x28)

07:50:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x11)

07:50:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf0)

[  790.984734][T14355] usb 6-1: new high-speed USB device number 108 using dummy_hcd
07:50:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xa000000)

07:50:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c)

07:50:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x41)

07:50:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x12)

07:50:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x300)

[  791.514574][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  791.523644][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.532898][T14355] usb 6-1: Product: syz
[  791.537434][T14355] usb 6-1: Manufacturer: syz
[  791.542046][T14355] usb 6-1: SerialNumber: syz
[  791.597361][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  792.164559][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  793.010755][   T39] usb 6-1: USB disconnect, device number 108
07:50:15 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000410000000"])

07:50:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb000000)

07:50:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf0)

07:50:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c)

07:50:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x18)

07:50:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x500)

[  793.644413][T14355] usb 6-1: Service connection timeout for: 258
[  793.651917][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  793.682649][T14355] ath9k_htc: Failed to initialize the device
07:50:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf0)

[  793.700518][   T39] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x21)

07:50:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5a0)

07:50:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x300)

07:50:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xc000000)

07:50:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x300)

[  794.074369][   T39] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  794.634397][   T39] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  794.644012][   T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.652654][   T39] usb 6-1: Product: syz
[  794.657136][   T39] usb 6-1: Manufacturer: syz
[  794.661734][   T39] usb 6-1: SerialNumber: syz
[  794.705228][   T39] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  795.284437][   T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  795.698881][ T4510] usb 6-1: USB disconnect, device number 109
07:50:17 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000410000000"])

07:50:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x500)

07:50:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x25)

07:50:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xd000000)

07:50:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x600)

07:50:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x500)

07:50:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x28)

07:50:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe000000)

07:50:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5a0)

07:50:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5a0)

07:50:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x700)

[  796.524438][   T39] usb 6-1: Service connection timeout for: 256
[  796.530633][   T39] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:50:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x41)

[  796.580088][   T39] ath9k_htc: Failed to initialize the device
[  796.599091][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
[  796.984397][ T4510] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  797.564505][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  797.573611][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.581938][ T4510] usb 6-1: Product: syz
[  797.586701][ T4510] usb 6-1: Manufacturer: syz
[  797.591299][ T4510] usb 6-1: SerialNumber: syz
[  797.635284][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  798.296786][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  798.956498][ T4508] usb 6-1: USB disconnect, device number 110
07:50:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x600)

07:50:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x600)

07:50:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x900)

07:50:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x10000000)

07:50:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x48)

07:50:21 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x7f, &(0x7f0000000180)=@generic={0x5, 0x0, 0x77, "f76f2aff", "23db43e2654115daee06ced8421fe6452fe0113330e881cec4493e4c57b646b186313cf4f8809cce325f6e550af513a0231b57c253b4abcb6f512f08dce9f852e52c1b468679d11d090df0f5c9dbc5bc4ce16f81a79e02fd76ab577329360b558b6031349fc6617d68c0c0f4c7459b304ab806c330e8c2"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000000280)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x16, &(0x7f0000000080)=@generic={0x1, 0x2, 0xe, "c6ce0f4d", "2d3955c016f17ccfd3b3b9139da8"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

07:50:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x700)

07:50:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x4c)

07:50:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa00)

07:50:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x700)

[  799.814518][ T4510] usb 6-1: Service connection timeout for: 258
[  799.820735][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  799.836732][ T4510] ath9k_htc: Failed to initialize the device
[  799.843233][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x12000000)

07:50:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x900)

07:50:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x900)

07:50:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb00)

07:50:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c)

07:50:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x18000000)

[  800.254580][ T4508] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  800.874502][ T4508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  800.884348][ T4508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.892358][ T4508] usb 6-1: Product: syz
[  800.897454][ T4508] usb 6-1: Manufacturer: syz
[  800.902071][ T4508] usb 6-1: SerialNumber: syz
[  800.955394][ T4508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  801.564645][ T4508] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  802.218683][T17458] UDC core: couldn't find an available UDC or it's busy: -16
[  802.226238][T17458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  802.437435][ T4509] usb 6-1: USB disconnect, device number 111
07:50:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc00)

07:50:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa00)

07:50:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x60)

07:50:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa00)

07:50:24 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x7f, &(0x7f0000000180)=@generic={0x5, 0x0, 0x77, "f76f2aff", "23db43e2654115daee06ced8421fe6452fe0113330e881cec4493e4c57b646b186313cf4f8809cce325f6e550af513a0231b57c253b4abcb6f512f08dce9f852e52c1b468679d11d090df0f5c9dbc5bc4ce16f81a79e02fd76ab577329360b558b6031349fc6617d68c0c0f4c7459b304ab806c330e8c2"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000000280)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x16, &(0x7f0000000080)=@generic={0x1, 0x2, 0xe, "c6ce0f4d", "2d3955c016f17ccfd3b3b9139da8"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x7f, &(0x7f0000000180)=@generic={0x5, 0x0, 0x77, "f76f2aff", "23db43e2654115daee06ced8421fe6452fe0113330e881cec4493e4c57b646b186313cf4f8809cce325f6e550af513a0231b57c253b4abcb6f512f08dce9f852e52c1b468679d11d090df0f5c9dbc5bc4ce16f81a79e02fd76ab577329360b558b6031349fc6617d68c0c0f4c7459b304ab806c330e8c2"}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_connect(0x0, 0x34, &(0x7f0000000280)=ANY=[], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x16, &(0x7f0000000080)=@generic={0x1, 0x2, 0xe, "c6ce0f4d", "2d3955c016f17ccfd3b3b9139da8"}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)

07:50:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x20000000)

[  803.084401][ T4508] usb 6-1: Service connection timeout for: 257
[  803.090625][ T4508] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  803.103465][ T4508] ath9k_htc: Failed to initialize the device
[  803.111518][ T4509] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x68)

07:50:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x21000000)

07:50:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd00)

07:50:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb00)

07:50:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb00)

07:50:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x6c)

07:50:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x25000000)

07:50:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x74)

[  803.534497][ T4509] usb 6-1: new high-speed USB device number 112 using dummy_hcd
07:50:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe00)

07:50:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc00)

[  804.144549][ T4509] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  804.153625][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.163294][ T4509] usb 6-1: Product: syz
[  804.167814][ T4509] usb 6-1: Manufacturer: syz
[  804.172423][ T4509] usb 6-1: SerialNumber: syz
[  804.237880][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  804.964411][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  805.619510][T17513] UDC core: couldn't find an available UDC or it's busy: -16
[  805.627044][T17513] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:50:27 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x7f, &(0x7f0000000180)=@generic={0x5, 0x0, 0x77, "f76f2aff", "23db43e2654115daee06ced8421fe6452fe0113330e881cec4493e4c57b646b186313cf4f8809cce325f6e550af513a0231b57c253b4abcb6f512f08dce9f852e52c1b468679d11d090df0f5c9dbc5bc4ce16f81a79e02fd76ab577329360b558b6031349fc6617d68c0c0f4c7459b304ab806c330e8c2"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000000280)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x16, &(0x7f0000000080)=@generic={0x1, 0x2, 0xe, "c6ce0f4d", "2d3955c016f17ccfd3b3b9139da8"}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc00)

07:50:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x28000000)

07:50:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x7a)

07:50:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd00)

07:50:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1100)

[  805.840292][T17513] UDC core: couldn't find an available UDC or it's busy: -16
[  805.840315][T17547] UDC core: couldn't find an available UDC or it's busy: -16
[  805.848193][T17513] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  805.862651][T17547] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  805.877889][ T2365] usb 6-1: USB disconnect, device number 112
07:50:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe00)

07:50:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1200)

07:50:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x10d)

07:50:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd00)

07:50:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x40000000)

07:50:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1100)

[  806.444545][ T4509] usb 6-1: Service connection timeout for: 257
[  806.450855][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  806.469916][ T4509] ath9k_htc: Failed to initialize the device
[  806.476501][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
[  806.844414][ T2365] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  807.364476][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  807.373618][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.387281][ T2365] usb 6-1: Product: syz
[  807.391436][ T2365] usb 6-1: Manufacturer: syz
[  807.397738][ T2365] usb 6-1: SerialNumber: syz
[  807.446061][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  808.014355][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  808.226384][T17588] UDC core: couldn't find an available UDC or it's busy: -16
[  808.233972][T17588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  808.445613][ T1226] ieee802154 phy0 wpan0: encryption failed: -22
[  808.450152][ T4508] usb 6-1: USB disconnect, device number 113
[  808.452015][ T1226] ieee802154 phy1 wpan1: encryption failed: -22
07:50:30 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "10a94867", {0x1, 0xca9, 0x8, 0x80, 0x6}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x27, &(0x7f0000000100)=ANY=[@ANYBLOB="0400001ff7ac8f9cddc47997e296901e53467b89441d42da54725c47976522614f87e50904860000000000"])
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1800)

07:50:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x41000000)

07:50:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x300)

07:50:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe00)

07:50:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1200)

07:50:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000)

07:50:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x500)

07:50:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x48000000)

07:50:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1800)

07:50:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1100)

[  809.324478][ T2365] usb 6-1: Service connection timeout for: 256
[  809.331159][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:50:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2500)

[  809.366383][ T2365] ath9k_htc: Failed to initialize the device
[  809.393389][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
[  809.774281][ T4508] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  810.384535][ T4508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  810.393703][ T4508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.402547][ T4508] usb 6-1: Product: syz
[  810.408598][ T4508] usb 6-1: Manufacturer: syz
[  810.413292][ T4508] usb 6-1: SerialNumber: syz
[  810.475290][ T4508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  811.074457][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  812.321814][   T39] usb 6-1: USB disconnect, device number 114
07:50:34 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "10a94867", {0x1, 0xca9, 0x8, 0x80, 0x6}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x27, &(0x7f0000000100)=ANY=[@ANYBLOB="0400001ff7ac8f9cddc47997e296901e53467b89441d42da54725c47976522614f87e50904860000000000"])
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000)

07:50:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x600)

07:50:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1200)

07:50:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4c000000)

07:50:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2800)

[  812.936650][ T4509] usb 6-1: Service connection timeout for: 258
[  812.943573][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:50:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x56922100)

07:50:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000)

07:50:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x700)

[  812.990822][ T4509] ath9k_htc: Failed to initialize the device
[  813.007253][   T39] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1800)

07:50:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2500)

07:50:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5c000000)

[  813.384439][   T39] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[  813.904469][   T39] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  813.913593][   T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.922114][   T39] usb 6-1: Product: syz
[  813.926868][   T39] usb 6-1: Manufacturer: syz
[  813.931459][   T39] usb 6-1: SerialNumber: syz
[  813.975400][   T39] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  814.544342][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  815.591561][ T4502] usb 6-1: USB disconnect, device number 115
07:50:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x900)

07:50:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x60000000)

07:50:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4100)

07:50:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000)

07:50:37 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "10a94867", {0x1, 0xca9, 0x8, 0x80, 0x6}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x27, &(0x7f0000000100)=ANY=[@ANYBLOB="0400001ff7ac8f9cddc47997e296901e53467b89441d42da54725c47976522614f87e50904860000000000"]) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2800)

07:50:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000)

07:50:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2500)

07:50:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xa00)

07:50:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x60150000)

07:50:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c00)

07:50:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4100)

[  816.444540][ T2365] usb 6-1: Service connection timeout for: 258
[  816.451378][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  816.488257][ T2365] ath9k_htc: Failed to initialize the device
[  816.500717][ T4502] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2800)

[  816.904314][ T4502] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[  817.494644][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  817.503708][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.512320][ T4502] usb 6-1: Product: syz
[  817.516860][ T4502] usb 6-1: Manufacturer: syz
[  817.521472][ T4502] usb 6-1: SerialNumber: syz
[  817.575372][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  818.194539][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  819.257314][ T3774] usb 6-1: USB disconnect, device number 116
07:50:41 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12d4, &(0x7f00000004c0)={[{0x11, 0x4e00, "c20f797e0a97477a9b9d4b9c6a549a5b51"}, {0x4f, 0x4e00, "537912699da85ba163022d2dc774cfdfe045ddff8882cd05b851fa12ead7655d9b85829a55567830d3558d0f1d77c767a4b07682e173551940acae4fb77c4e011b7150df4a5babfe31d26ff02bfb64"}, {0xdd, 0x4e00, "f8f48bf1b4524f9413e68ab5e9c3b55ae06a2a5c6ed115231538247d42c6664c84832fa482dbabe5d2019dbfa2a0c389e3f244b55e636cb7df7dfc200c949b0cca159a236c955a817926293e3f509f3db3ff6c602130b690c776ad01c7c0820d596cac35b6a3a77ac28d28abbd925ba84955f327cd4bac3e707063da95088de3c9f49bfdae3c690d7a39a786f85acbf64a9db5fe968263a61614a75a88da698ffd3806d3b10fd27c54e78c50f427508f59f89d1553ddbd31e19a35ab8e81a0d1213d5ca8eaff12e714895e6abb6c507caf783c6ddd8cc21858741569ad"}, {0x1a, 0x4e00, "0966f5d4ca5e326228253aba2b63fd4039c1ba8473d63d30defc"}, {0x8f, 0x4e00, "be3923ed0419e8fb37bd84e109875dcf225f9a2a3d5a60b54ce57c98ebc55e9f917919ac77ee9aaf871dfb04ddf0bfb87f4010b8c88eabe0bf10b016cdc76b1130b577e5b743ffced4f792b263645815eae5de76329ce82305db05ecaec717b06d5b822af4b00f4703c643920517ad80b267c1bc4b3808a0698f6a34a252b3207bfbce5d20b3a9f23fa1085b5686d7"}, {0x59, 0x4e00, "cd45dd791cdd01abd2a20eb7039dc0c0c69ab0820c440c2378bcb11b5594287ae925b82d139d8652492c2bb7e66ef56d413668c1ff0c0142d7fee77b7f5dc7bf81be3ca9868707258e657cc3ccc452327b2537850f4ad82cf9"}, {0x67, 0x4e00, "601f80a4824bee6e1418ca7ce338eee425d9324c7c3bdd7b4bd008341f1122da9b329655e176887766178385a3935fe8e336b42544f13f7b701a5ae93719ea34e9e5d74876f6d6b431fa89ef05004dcf5a6b00dd3047a7b4683f118c541429f1c37c16238d7eb7"}, {0x1000, 0x4e00, "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"}]})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "7cb1e4af", {0x1, 0x2, 0x1, 0x0, 0x4}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x100, &(0x7f0000000180)=@generic={0x3, 0x2, 0xf8, "d0f464ff", "7eaaf726905c322ed5506904ba1b69e5912582ce194394e4c38f362875c3563dd1b01a3fbc0ee08ea0606ce857d836cbeb237a5d02b1f609335ea79050107129f9335f27df0cb6f06500884370d8eb377e55ed53963be0f194784dacaa17f6952b84aa7ab2b70153d049636e10045925ee86d4eb8754da30a61ceb745de630f230da5755fcd833d44e3ddf6bb2b1921cbe2defcface52dbc65f5192a35da560389bcd0bc95b5893299e657764291f9466b38791f670493a064fcf4feb32f97a7c477771b66ed7e7cb823bea1a3f803145c5c511ef352a4ec90443d2c3bf70255562a862b49e805f076c236b4a1e90bd70e6c3a886f613edb"})

07:50:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xb00)

07:50:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa005)

07:50:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x68000000)

07:50:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c00)

07:50:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000)

[  819.894403][ T4502] usb 6-1: Service connection timeout for: 258
[  819.900917][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:50:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf000)

[  819.935799][ T4502] ath9k_htc: Failed to initialize the device
[  819.959906][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4100)

07:50:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xc00)

07:50:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6c000000)

07:50:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa005)

07:50:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff00)

[  820.344381][ T3774] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[  820.924646][ T3774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  820.933718][ T3774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.942049][ T3774] usb 6-1: Product: syz
[  820.946487][ T3774] usb 6-1: Manufacturer: syz
[  820.951087][ T3774] usb 6-1: SerialNumber: syz
[  820.995401][ T3774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  821.704411][ T3774] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  823.196490][ T4509] usb 6-1: USB disconnect, device number 117
[  823.404432][ T3774] usb 6-1: Service connection timeout for: 258
[  823.412630][ T3774] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  823.422082][ T3774] ath9k_htc: Failed to initialize the device
[  823.428710][ T4509] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:45 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12d4, &(0x7f00000004c0)={[{0x11, 0x4e00, "c20f797e0a97477a9b9d4b9c6a549a5b51"}, {0x4f, 0x4e00, "537912699da85ba163022d2dc774cfdfe045ddff8882cd05b851fa12ead7655d9b85829a55567830d3558d0f1d77c767a4b07682e173551940acae4fb77c4e011b7150df4a5babfe31d26ff02bfb64"}, {0xdd, 0x4e00, "f8f48bf1b4524f9413e68ab5e9c3b55ae06a2a5c6ed115231538247d42c6664c84832fa482dbabe5d2019dbfa2a0c389e3f244b55e636cb7df7dfc200c949b0cca159a236c955a817926293e3f509f3db3ff6c602130b690c776ad01c7c0820d596cac35b6a3a77ac28d28abbd925ba84955f327cd4bac3e707063da95088de3c9f49bfdae3c690d7a39a786f85acbf64a9db5fe968263a61614a75a88da698ffd3806d3b10fd27c54e78c50f427508f59f89d1553ddbd31e19a35ab8e81a0d1213d5ca8eaff12e714895e6abb6c507caf783c6ddd8cc21858741569ad"}, {0x1a, 0x4e00, "0966f5d4ca5e326228253aba2b63fd4039c1ba8473d63d30defc"}, {0x8f, 0x4e00, "be3923ed0419e8fb37bd84e109875dcf225f9a2a3d5a60b54ce57c98ebc55e9f917919ac77ee9aaf871dfb04ddf0bfb87f4010b8c88eabe0bf10b016cdc76b1130b577e5b743ffced4f792b263645815eae5de76329ce82305db05ecaec717b06d5b822af4b00f4703c643920517ad80b267c1bc4b3808a0698f6a34a252b3207bfbce5d20b3a9f23fa1085b5686d7"}, {0x59, 0x4e00, "cd45dd791cdd01abd2a20eb7039dc0c0c69ab0820c440c2378bcb11b5594287ae925b82d139d8652492c2bb7e66ef56d413668c1ff0c0142d7fee77b7f5dc7bf81be3ca9868707258e657cc3ccc452327b2537850f4ad82cf9"}, {0x67, 0x4e00, "601f80a4824bee6e1418ca7ce338eee425d9324c7c3bdd7b4bd008341f1122da9b329655e176887766178385a3935fe8e336b42544f13f7b701a5ae93719ea34e9e5d74876f6d6b431fa89ef05004dcf5a6b00dd3047a7b4683f118c541429f1c37c16238d7eb7"}, {0x1000, 0x4e00, "0723492a7ff5c384d25584104fc1bb6e2628dad7572b9a009552cd993111dd0a5eda6bb5d5dc66a73d3b2ac278ce0d41cf68ac22453a5007a4f072c31cbe584113f75f51a30dc03ad482f876ed6951a88fb7006d412d2387de2ddb001066d8638278a52e532e4c78920295ef3b6c33129ac0d23cf6f0a6ee450e1ab2009cdeb216f333ce8e833c58ebe2375dc70fa1069d2284b561f873f6fd734b4b8c461c8123c4496faf5d897e74c7da2d5db47d6b4c1f9e2df30b6b380d668341a48b6cd4436e1e88fccf54bc356842e463175998a4732b6fa3a546fd6c951ee0b041bc2ae857c7c6c4dc038d5efb41f5a211e01b26ce534d386276f595252c412d88e17622c38563924508edbd0bd55cb16cbbad3f035b07ae61ff4be1a277e3aa7aff16cfdc74c054ef165f5e34e346b2dd89cca40d6289b0daba5766f6bb6ad330969cecaf27bdd35b081873b620283b02769c40e1cc56e355712493e96dde54649bee91b2bcdc732ddceb9f8e9b37823a5a8872c97b6c71e534642512b4fdb0f7b86b1a3a2962a62a93f9a1668a15815dbc915c0933d5d7eadac22f553c05a2a589bee39fce57586faf7694bd3411e53cc928c630e8c12b6079de129d41c35215e29108d271e75a1ec351a702d4c4770d4d6ce044b1f586e44ad319fc27c4a29fc0e020ac98b9d5206913c2bfc79a06e8c7cb75c083c0a92c3d230d027e8ce41025f8e5a3b28c3c1c885028e1a2671fa8d3b17f57e296866ce13a8412ed4ce428d3d230c4a7ee669745360007e6682326ea1a70b8138eab89d9fc36a6abda1d670e8355941362d67f342558442602128799d5ad79043ce7c41f842f96439fdfcf597ec0890b4c4ca7d9447917fabca010d2c2166b8a14080e2d713d6d28cc496045b863dd7e5048d88d72a050d52dccbe3987d3c75d6f9cf63238e9132aa6d4d99fcf89bc5ad6e39725ae4528cb296ef44d1975e40d0f847bf78ea46fbd4477bd9f4ba06b5e3cef78d80be1a88c7c3086277c51db0e67d8000d085fc1b5d46055bf645f14123f78c23c36b55159efd344a55e03a461fab1491666870d0a54e12269ea90be30321e32aab2eae830db41627c721784d0a598a75495b7ab2347f38c7d16209ddfdf65da2816a2c7f650643ec177465c344b94ad94b2cb1fe797aadf50d271387fd76aae1637f7789c4eebfd823552a9e14bc54d75ca4b8486548af3febc9833dd9682efb2dc9005f2f40b9b7c98811b91baad4cf2bbe7f1fba4369f26a19e8b2bdf031e6d8ba621b3dba9d22de9c6c5662f2b022ff4695cbaa85d625a2637fb8531caa50fa5ee093b65a94a76dfb155123e2b55bcb897b206208d0ae2decc31c1813c6066971c3fa7407fd14611141cd7cf2224dcfe1e96a53d74e8f142b77b3db5926bfaae6fe9d736321ce71c6e92e9ea2953856c8bf157fc945d0289fdd1fcb96a61c0aa23bb1ef090aa4b2f1b787f5b929711bd4f2cac83f124f38445896c2ac45bf8fc988b6f9a5440f85e5ad19266c3b0ad4213ca8b99f0241fe123df16096bfdc0567193b9ee7f71abc693f4f82803a7d1243a7504815f11f668d804361e674d9e9daceeeba5fd5ea57d137bc96303632937ef7d51d71ddf6ead5d290af752f282f3c2cd591eca21b99759b119d668dd1ba43252fbd142b856827dd9283dae60288838905fcd30f73808a03b386cf6ea293e3b32a81b3402c83669bda15fe5059935d0916fa73060ccf94a5646c98f6ad2a404440bf0a0c48aa9ee936d20a7af967d4ef4c371fcad70c50a15eadaacc4a3e3c29990ac10d2ec70d8c969cd814e01ca94571bc5f0e276786e0ae0803562ef641ae00095ae2ff5eb9b79b56fd46ba2f265dca8dc0919a1446054f1442bd16458bd4d60cfef14a458726d110b2800e663936db95fdd9582228685d9c852826448637ce89a11e95c3c84c327175aae59bb0d6a5146e3db830eeca9aacec5bce25548cf35df317a74c61af35a2f3e2b7accfee6cdb515de57b40992749fa5e6a54e12aa6504fe1bf42bcfd98984857f14121ccfa0e6cec5eda82c5f25ed8b242a740cbee4eac12eb3d13c7dd1ba5ba8c7b9432d27b4b6b19b4a52fb784fabd8c08026cc36a64656026b8575354ae8fcf678c5b820b4c2cdae506e55c29823d7a3ffd9099c21d457d4a7c18f47b57fbb6a92ecfefe39f686b19ec5eb0794223d07997d9b77a9d0d3c042aa2f8c1de19cf90ca3c2208067f4410a087348d793b169c1890b191dc5fb5c59bf9e0984af2580d342958393ecd73112eb5c573a5eae6c7255eb694ebce01f7ff3823f4429132d8703826c78445d1977b5041fb9ae6c6ba9e7b9ee426bd660c89858d46e29beb87be1b7698a1f2ad8cf97ad591edfeb6e8e97897fbdda35bf7b93209be09d663d16e1cc99e575aae28720c8018d2c56a44e872151fff7c52dc6ad627d8c3a29c1d662f864e14866abc74c05e1d51e85e0b63695054493245ef8735df2ca422dcb834e80ea01c700ee5c1d9f4c9e2703a029cbc189626d19502b29969371f84c60dc8f38d6cc180d6074e2f9fb3d9fa8f9a5c49519333cbfbc1b5c664aec99bb73d82bed42a70a9dcd0a99f0f91b88b441fe51aeb2c144f19d309d7593f0872a2eb7b54c7d15cb35c0666fa979b6495309426cd3419365d84709dc5429d989607901c971b05a3032598d8ad40374a61977486804171aa83a48b4f06a74f324505ed0859096f75c0c1bc01d8a9c00408d1676c84187599fc4824b3ca8b8821ec64f02fb51e85d535c5745006de8ee6201aea192c966abced2e6674b47df5c3b8612b1b9d96734da7bd41a70573143481d7e09a598d8955cbc2cc6baa7351f009952de9c044a1b22ead9688ae7fc98b1e77bde2eb385e91dbb2cbd35a724d21d3b16bcf96ba758275ac17d8b4f841e9522c06c9b732297fbcbde9cf1b4b456e666623dd3eb4ad0e5d7090e16d4b6f6c45a3c9aa4629389fe0c085280cf3ae2187e2d06b67163758ff2410c86600db6c82b2908c0516d516d9fdc81f5b65ef871b3e5f5416b0d381917770df5e3e94c1791faf69c411a812ef17503bd17f1e511a0261a0a89847e0eea455127394207a48d12e8dc9fae5bf2b866da5f260e4c26c061580b4bd47330d0d76ea794e317308a38a4ed659fa53d73dc4ac83fb112018f89b223fe42ab08e74a9b6b6b018dc8a630f96aa71bd30b3b446c7344c65b0101985fc10e23f7c0348cc47314c5150b6f27e9671cc22450e2656c8926c799feeffd5daac898fa93ff434c8637345128c2899ddd4a6b9f1d55216edf09dbbe4856f92365ff556bfea6922ba1d389d2dbc61d99d2d830def443cf7d6c099ff8248fde8a1b8f645b8aed6925f1cd6d61e5b8a8f8c83fd4d08edf1e6ba319d106022807b941971e865ecd13bf7bf0f3fea16b59aa8b5a9e49f7d632d3743fcf83088a6a25e4dfe9241efcfc0ef3b6327999529e77c9bc4ac870ab1ae3c6bb2ac931d345c73459b57991b31ed584d8dd57a02f02cd2c4ddf394c78dab3c2d16d6d77a98c02159ec0d0d79600671ecbb4582c79d8f1b63b19ebe6519c3b05df5e25de2777b58a019e78df26fb61f6104506e9187761a14868c3bc4380c96d2b96e3db5a71223a50791681a72866d971152a9aad909027117367cd79678f93659370d73b734376457f461bf17091c6114c24dcc7609ebb3d95b1272b6d4cd2d7f38a6c2da4ba9e1cf452c9cdac5a6568a251df9f6e0d3ea0788117b6aa9ecc16a08b9dfb75a1646f97fc2b505daaba27386629c395a22d632e19513d6905742f47da6504a82d96d52a832001e549a82a3694de44250e887868e831264f7dde2e984af8c65955e92d32d9bbb1b8a043d371f3f45bdb0519a2aa22196e35148be3d04f0b862543383985f950c385cf96ac1d85ff71a02843301feec14d9abd7e10b0c5f85293e27a3aba27d52ba2c37547e703b3f00f5354385c913145015b88045d6bc64a7183ad76bb989394b1275d5143c76e14ff5e88d9f5b6895df2f0a68a8417ba245fb48f6abc7b4f1714d2fa94f35c160834deea92188a815f5ee3d68c6c4e26752721addf3555e6b3f0e06197ecfff993160cd6604144352f3a36812d02a040dcfd18d5d79b0c815b0330d50167c84d279953eccf0fb5514cbf3cb396e580bd22e6fba282ce2dc0e3680bd9fd0122a1829d7a05c6b41fc7f07e515347225a24bccf419eecd3f3d59a4c414b4b907e03a0be2194bdfec1b9da1c5bba14da741cfb141c9c372809ef2c2db0057fe272ba6430b09ed7827dcf8397f90f662f250f699785082d553debbe5b8e74b08a4a1797ca5d9fc5032ad3ef0e687e9f1119d7f8b744ad09b2ed444f1b8633655cfd9bc9179dd08caf08116e4774f9cbbfbb70fa1615fd48aacd4d8ac411bc5ae2b090921515f0a855a3cdeb521ab259bad1848ebdbfdf880bf8b07dc155f31b9255679ed6c86916a2f198667c5d0cf77bc8596bb6515d4f77c3eb5d9513a896579d4dd06d2529483e6985e8ea969669713f03c16a10996b152aa7c1dd854effbac2471dc1a2383734f6582e303ae2cc886d4f453d3b97f9197ded744be4baf59801f992c90ee1166eeba97f391957ebd72d7a784222902cb929111684d782f27b0338b19e4180cb517a465832a1df4c5947766391c786c95ba37eb4cc3f2345fa0d6a35781ffd701587643a3b3abc0dfb831070ecb38ad19fbfdc8b90513cf0930574b3fed0e7572ccb5c7a64a66904b46783c00c50d6568500cc963ede201650be2c11235a451c366b1ae74842216c20db0224749050aad02bce6fafc8619a5d6ec193e212f73c1a3c3eb2d84a5a5087589fd821833e25af36864a8edaaf50bee9dc59c93e2b53060121de4d3b9e2cae11c1ac85fc8fe6c48d809abbe52b89c58847389f54a3b2f5978a05a5b312ba4ee0376e3f6f816e8d1aaa480f91d2cfcb82016652139cd93e4eac28abcc11bd95d8def7aa9ee67d23ef47acb00e1abeb3255413cc2ef2a0e10b76d153376d687338251eac40c44ff9125eaf640b9fe16efaca14de978d3be92393fd062086459f1fc93976160bd163ea21b17b86864c8bfe23cf92817188925999f9e64a661665af0189d09b0810611bf8892a69254b766fccb471ab2859d35584638f4d45503c6028c4962b879b5a22297675bdf3acb63872cd81145553d5a41addd82e6773b3346779d88f1baa2a5f8c59380bb0b64e2221b776f20fee2ec0a4cdbf87a66e0b2fe4f26ec686d520548ce5ef099681dc3fa4d7c275a4e4899179d3b46e3ee65a491704f77fddaeaaa6144c5a98cfa410b57f0d37a885235f268127a61b894d9725edb7b7af63139c2aab413c5363685ae3a94b1cd4e724e6a8d8324346778cfdb7e6be24659908cb89cd5357a137282aba56e6c1e578f84651408eea46d8284fbe40074f7591a6b8d798dee1c0151f4799b19348582d7abc0d6a5acad2715d79057766f123ad2ab2a4701ed0693de1199e619fca51675a8aa8742a2b09b57f93edd35e7bf87483fc520a51a2b393405da695a0e4949c9d22be5c65b132caee2fc7a95f800ce5f412b130ab2e151ffb7828e7654ac0e7477586d9f0ffa20f651ed2e32e084d4895effa56e2ace09df62c3841084db3e3bd413b3bd4281176b75ddf631967121f750f5701289b16089b541cddf916efbbf7eae959ed96b4e956fdaf8da09076ce3459e6700f01556c4736737eb7f5e3026a14be08f97dda7f117a1c902e47abbaabb2674294176fd03d1444f08612c7178f9f558e720769"}]})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "7cb1e4af", {0x1, 0x2, 0x1, 0x0, 0x4}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x100, &(0x7f0000000180)=@generic={0x3, 0x2, 0xf8, "d0f464ff", "7eaaf726905c322ed5506904ba1b69e5912582ce194394e4c38f362875c3563dd1b01a3fbc0ee08ea0606ce857d836cbeb237a5d02b1f609335ea79050107129f9335f27df0cb6f06500884370d8eb377e55ed53963be0f194784dacaa17f6952b84aa7ab2b70153d049636e10045925ee86d4eb8754da30a61ceb745de630f230da5755fcd833d44e3ddf6bb2b1921cbe2defcface52dbc65f5192a35da560389bcd0bc95b5893299e657764291f9466b38791f670493a064fcf4feb32f97a7c477771b66ed7e7cb823bea1a3f803145c5c511ef352a4ec90443d2c3bf70255562a862b49e805f076c236b4a1e90bd70e6c3a886f613edb"})

07:50:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xd00)

07:50:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf000)

07:50:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c00)

07:50:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x74000000)

07:50:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff01)

07:50:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7a000000)

07:50:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x279c1)

07:50:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xd01)

07:50:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa005)

07:50:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff00)

[  824.054503][ T4509] usb 6-1: new high-speed USB device number 118 using dummy_hcd
07:50:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff)

[  824.574392][ T4509] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  824.583525][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.592125][ T4509] usb 6-1: Product: syz
[  824.596820][ T4509] usb 6-1: Manufacturer: syz
[  824.601475][ T4509] usb 6-1: SerialNumber: syz
[  824.645434][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  825.264521][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  826.517028][ T2365] usb 6-1: USB disconnect, device number 118
[  826.924328][ T4509] usb 6-1: Service connection timeout for: 258
[  826.930614][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  826.939717][ T4509] ath9k_htc: Failed to initialize the device
[  826.946305][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:48 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12d4, &(0x7f00000004c0)={[{0x11, 0x4e00, "c20f797e0a97477a9b9d4b9c6a549a5b51"}, {0x4f, 0x4e00, "537912699da85ba163022d2dc774cfdfe045ddff8882cd05b851fa12ead7655d9b85829a55567830d3558d0f1d77c767a4b07682e173551940acae4fb77c4e011b7150df4a5babfe31d26ff02bfb64"}, {0xdd, 0x4e00, "f8f48bf1b4524f9413e68ab5e9c3b55ae06a2a5c6ed115231538247d42c6664c84832fa482dbabe5d2019dbfa2a0c389e3f244b55e636cb7df7dfc200c949b0cca159a236c955a817926293e3f509f3db3ff6c602130b690c776ad01c7c0820d596cac35b6a3a77ac28d28abbd925ba84955f327cd4bac3e707063da95088de3c9f49bfdae3c690d7a39a786f85acbf64a9db5fe968263a61614a75a88da698ffd3806d3b10fd27c54e78c50f427508f59f89d1553ddbd31e19a35ab8e81a0d1213d5ca8eaff12e714895e6abb6c507caf783c6ddd8cc21858741569ad"}, {0x1a, 0x4e00, "0966f5d4ca5e326228253aba2b63fd4039c1ba8473d63d30defc"}, {0x8f, 0x4e00, "be3923ed0419e8fb37bd84e109875dcf225f9a2a3d5a60b54ce57c98ebc55e9f917919ac77ee9aaf871dfb04ddf0bfb87f4010b8c88eabe0bf10b016cdc76b1130b577e5b743ffced4f792b263645815eae5de76329ce82305db05ecaec717b06d5b822af4b00f4703c643920517ad80b267c1bc4b3808a0698f6a34a252b3207bfbce5d20b3a9f23fa1085b5686d7"}, {0x59, 0x4e00, "cd45dd791cdd01abd2a20eb7039dc0c0c69ab0820c440c2378bcb11b5594287ae925b82d139d8652492c2bb7e66ef56d413668c1ff0c0142d7fee77b7f5dc7bf81be3ca9868707258e657cc3ccc452327b2537850f4ad82cf9"}, {0x67, 0x4e00, "601f80a4824bee6e1418ca7ce338eee425d9324c7c3bdd7b4bd008341f1122da9b329655e176887766178385a3935fe8e336b42544f13f7b701a5ae93719ea34e9e5d74876f6d6b431fa89ef05004dcf5a6b00dd3047a7b4683f118c541429f1c37c16238d7eb7"}, {0x1000, 0x4e00, "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"}]}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "7cb1e4af", {0x1, 0x2, 0x1, 0x0, 0x4}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x100, &(0x7f0000000180)=@generic={0x3, 0x2, 0xf8, "d0f464ff", "7eaaf726905c322ed5506904ba1b69e5912582ce194394e4c38f362875c3563dd1b01a3fbc0ee08ea0606ce857d836cbeb237a5d02b1f609335ea79050107129f9335f27df0cb6f06500884370d8eb377e55ed53963be0f194784dacaa17f6952b84aa7ab2b70153d049636e10045925ee86d4eb8754da30a61ceb745de630f230da5755fcd833d44e3ddf6bb2b1921cbe2defcface52dbc65f5192a35da560389bcd0bc95b5893299e657764291f9466b38791f670493a064fcf4feb32f97a7c477771b66ed7e7cb823bea1a3f803145c5c511ef352a4ec90443d2c3bf70255562a862b49e805f076c236b4a1e90bd70e6c3a886f613edb"})

07:50:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xe00)

07:50:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x77269)

07:50:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf000)

07:50:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff01)

07:50:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xff000000)

07:50:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x1100)

07:50:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff00)

07:50:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x36f91)

07:50:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffff8000)

07:50:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7cb04)

07:50:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x506f1)

[  827.531029][ T2365] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  828.054406][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  828.063551][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.071755][ T2365] usb 6-1: Product: syz
[  828.076142][ T2365] usb 6-1: Manufacturer: syz
[  828.080841][ T2365] usb 6-1: SerialNumber: syz
[  828.127552][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  828.694396][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  829.362476][ T4509] usb 6-1: USB disconnect, device number 119
07:50:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff01)

07:50:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x1200)

07:50:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffe000)

07:50:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80080)

07:50:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x52368)

07:50:51 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "46fe13bf", {0x1, 0xce, 0x6, 0x80, 0x7}})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "6d9a9bc5", {0x3, 0x100, 0x0, 0x80, 0x1, 0x1, 0x4}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80080)

07:50:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd)

07:50:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfffff)

07:50:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x1619)

07:50:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x22e3a)

07:50:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfffff)

[  830.204502][ T2365] usb 6-1: Service connection timeout for: 258
[  830.216624][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  830.272113][ T2365] ath9k_htc: Failed to initialize the device
[  830.290165][ T4509] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x1800)

07:50:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7ff7ee0d0700)

07:50:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x27690)

07:50:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000)

07:50:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000)

[  830.704363][ T4509] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  831.306574][ T4509] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  831.315792][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.323766][ T4509] usb 6-1: Product: syz
[  831.328848][ T4509] usb 6-1: Manufacturer: syz
[  831.333462][ T4509] usb 6-1: SerialNumber: syz
[  831.385243][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  832.004369][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  832.425896][T17837] UDC core: couldn't find an available UDC or it's busy: -16
[  832.433287][T17837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  833.050931][T14355] usb 6-1: USB disconnect, device number 120
07:50:55 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "46fe13bf", {0x1, 0xce, 0x6, 0x80, 0x7}}) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "6d9a9bc5", {0x3, 0x100, 0x0, 0x80, 0x1, 0x1, 0x4}}) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000)

07:50:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7cd05)

07:50:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100080)

07:50:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x1916)

07:50:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100080)

[  833.724602][ T4509] usb 6-1: Service connection timeout for: 257
[  833.730803][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  833.760098][ T4509] ath9k_htc: Failed to initialize the device
07:50:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x219256)

07:50:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80080)

[  833.775741][T14355] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000)

07:50:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x219256)

07:50:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x70deef77f0000)

07:50:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff)

[  834.134381][T14355] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[  834.664504][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  834.679443][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.688838][T14355] usb 6-1: Product: syz
[  834.692997][T14355] usb 6-1: Manufacturer: syz
[  834.697919][T14355] usb 6-1: SerialNumber: syz
[  834.745402][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  835.314390][   T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  835.517359][T17910] UDC core: couldn't find an available UDC or it's busy: -16
[  835.524921][T17910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:50:58 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "46fe13bf", {0x1, 0xce, 0x6, 0x80, 0x7}})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "6d9a9bc5", {0x3, 0x100, 0x0, 0x80, 0x1, 0x1, 0x4}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:50:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfffff)

07:50:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x2100)

07:50:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff)

07:50:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000)

07:50:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

[  836.746958][ T2365] usb 6-1: USB disconnect, device number 121
[  836.774402][   T39] usb 6-1: Service connection timeout for: 257
[  836.780602][   T39] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  836.816595][   T39] ath9k_htc: Failed to initialize the device
[  836.822872][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
07:50:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x2500)

07:50:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

07:50:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

07:50:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000)

07:50:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe0ffff00000000)

07:50:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

[  837.264323][ T2365] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  837.794417][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  837.803486][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.812221][ T2365] usb 6-1: Product: syz
[  837.816698][ T2365] usb 6-1: Manufacturer: syz
[  837.821294][ T2365] usb 6-1: SerialNumber: syz
[  837.876579][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  838.444531][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  838.647427][T17951] UDC core: couldn't find an available UDC or it's busy: -16
[  838.654871][T17951] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  838.906923][ T4509] usb 6-1: USB disconnect, device number 122
07:51:01 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "9829c03f", {0x1, 0x7ff, 0x8, 0x1f, 0x7f}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x2800)

07:51:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100080)

07:51:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000)

07:51:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

07:51:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000000)

07:51:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x219256)

07:51:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000)

07:51:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000)

07:51:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

07:51:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5000000)

[  839.734395][ T2365] usb 6-1: Service connection timeout for: 257
[  839.740864][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  839.751132][ T2365] ath9k_htc: Failed to initialize the device
[  839.758902][ T4509] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff)

[  840.164426][ T4509] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  840.744567][ T4509] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  840.753630][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.761761][ T4509] usb 6-1: Product: syz
[  840.766264][ T4509] usb 6-1: Manufacturer: syz
[  840.770867][ T4509] usb 6-1: SerialNumber: syz
[  840.815298][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  841.434564][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  841.641100][T17971] UDC core: couldn't find an available UDC or it's busy: -16
[  841.649186][T17971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  842.292787][ T3774] usb 6-1: USB disconnect, device number 123
07:51:04 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "9829c03f", {0x1, 0x7ff, 0x8, 0x1f, 0x7f}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "9829c03f", {0x1, 0x7ff, 0x8, 0x1f, 0x7f}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)

07:51:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000)

07:51:04 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

07:51:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x4100)

07:51:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000000)

07:51:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

[  842.924592][ T4509] usb 6-1: Service connection timeout for: 258
[  842.932086][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  842.975836][ T4509] ath9k_htc: Failed to initialize the device
[  842.988771][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:04 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7000000)

07:51:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x4800)

07:51:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000)

07:51:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

07:51:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4cb0700)

07:51:04 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8000000)

[  843.376505][ T3774] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  844.004434][ T3774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  844.013578][ T3774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.021724][ T3774] usb 6-1: Product: syz
[  844.026072][ T3774] usb 6-1: Manufacturer: syz
[  844.030744][ T3774] usb 6-1: SerialNumber: syz
[  844.075873][ T3774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  844.674452][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  844.875549][T18010] UDC core: couldn't find an available UDC or it's busy: -16
[  844.882935][T18010] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:51:07 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "9829c03f", {0x1, 0x7ff, 0x8, 0x1f, 0x7f}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x4c00)

07:51:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000)

07:51:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5000000)

07:51:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

07:51:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x9000000)

[  845.520616][T18010] UDC core: couldn't find an available UDC or it's busy: -16
[  845.524723][T18029] UDC core: couldn't find an available UDC or it's busy: -16
[  845.530930][T18010] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  845.537467][T18029] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  845.559101][ T2365] usb 6-1: USB disconnect, device number 124
[  845.692376][T18053] UDC core: couldn't find an available UDC or it's busy: -16
[  845.736351][T18053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:51:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c00)

07:51:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000000)

07:51:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa000000)

07:51:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

07:51:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000)

07:51:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x6000)

[  846.134620][ T4502] usb 6-1: Service connection timeout for: 258
[  846.144129][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  846.152605][ T4502] ath9k_htc: Failed to initialize the device
[  846.159486][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
[  846.544312][ T2365] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  847.075806][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  847.084934][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.092910][ T2365] usb 6-1: Product: syz
[  847.097656][ T2365] usb 6-1: Manufacturer: syz
[  847.102264][ T2365] usb 6-1: SerialNumber: syz
[  847.145389][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  847.724468][   T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  847.937762][ T4509] usb 6-1: USB disconnect, device number 125
07:51:10 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "046067d1", {0x1, 0x2, 0x8000, 0x9, 0x9}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "2b1ce6ea", {0x3, 0x100, 0x0, 0xff, 0x7fff, 0x46, 0x7f}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7000000)

07:51:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5000000)

07:51:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb000000)

07:51:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x6800)

07:51:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000)

07:51:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8000000)

07:51:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000)

07:51:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc000000)

07:51:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x6c00)

07:51:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5cd0700)

[  848.764653][   T39] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  848.776262][   T39] ath9k_htc: Failed to initialize the device
[  848.796623][ T4509] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x9000000)

[  849.204299][ T4509] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  849.804662][ T4509] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  849.813864][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.822118][ T4509] usb 6-1: Product: syz
[  849.826448][ T4509] usb 6-1: Manufacturer: syz
[  849.832158][ T4509] usb 6-1: SerialNumber: syz
[  849.897755][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  850.524568][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  850.946066][T18091] UDC core: couldn't find an available UDC or it's busy: -16
[  850.953653][T18091] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  851.572626][T14355] usb 6-1: USB disconnect, device number 126
07:51:13 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "046067d1", {0x1, 0x2, 0x8000, 0x9, 0x9}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "2b1ce6ea", {0x3, 0x100, 0x0, 0xff, 0x7fff, 0x46, 0x7f}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "046067d1", {0x1, 0x2, 0x8000, 0x9, 0x9}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "2b1ce6ea", {0x3, 0x100, 0x0, 0xff, 0x7fff, 0x46, 0x7f}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)

07:51:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000)

07:51:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x7400)

07:51:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

07:51:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd000000)

07:51:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa000000)

[  852.054377][ T4509] usb 6-1: Service connection timeout for: 258
[  852.060569][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  852.072226][ T4509] ath9k_htc: Failed to initialize the device
[  852.099565][T14355] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb000000)

07:51:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x7a00)

07:51:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7000000)

07:51:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe000000)

07:51:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000)

07:51:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc000000)

[  852.614294][T14355] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[  853.134556][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  853.143985][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.152204][T14355] usb 6-1: Product: syz
[  853.156605][T14355] usb 6-1: Manufacturer: syz
[  853.161209][T14355] usb 6-1: SerialNumber: syz
[  853.220176][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  853.784431][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  854.206801][T18129] UDC core: couldn't find an available UDC or it's busy: -16
[  854.214532][T18129] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:51:16 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "046067d1", {0x1, 0x2, 0x8000, 0x9, 0x9}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "2b1ce6ea", {0x3, 0x100, 0x0, 0xff, 0x7fff, 0x46, 0x7f}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000)

07:51:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xe0fe)

07:51:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd000000)

07:51:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000000)

07:51:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8000000)

[  854.832797][T18129] UDC core: couldn't find an available UDC or it's busy: -16
[  854.836134][T18150] UDC core: couldn't find an available UDC or it's busy: -16
[  854.849173][T18150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  854.853666][T18129] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  854.875139][ T2365] usb 6-1: USB disconnect, device number 127
07:51:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe000000)

07:51:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xff00)

07:51:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x9000000)

07:51:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

07:51:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000)

07:51:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000000)

[  855.244630][T14355] usb 6-1: Service connection timeout for: 258
[  855.252796][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  855.277723][T14355] ath9k_htc: Failed to initialize the device
[  855.291432][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
[  855.674400][ T2365] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  856.194424][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  856.203491][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.217738][ T2365] usb 6-1: Product: syz
[  856.221907][ T2365] usb 6-1: Manufacturer: syz
[  856.229065][ T2365] usb 6-1: SerialNumber: syz
[  856.275905][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  856.844601][   T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  857.046668][T18193] UDC core: couldn't find an available UDC or it's busy: -16
[  857.054133][T18193] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  857.268811][ T4509] usb 6-1: USB disconnect, device number 2
07:51:19 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "21be82a0", {0x1, 0x1000, 0x4, 0x2, 0x4}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x40000)

07:51:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000)

07:51:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa000000)

07:51:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x12000000)

07:51:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

07:51:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x80000)

07:51:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xb000000)

07:51:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000)

07:51:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x18000000)

07:51:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x12000000)

[  858.125564][   T39] usb 6-1: Service connection timeout for: 256
[  858.131764][   T39] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  858.145374][   T39] ath9k_htc: Failed to initialize the device
[  858.151931][ T4509] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xc0000)

[  858.544500][ T4509] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  859.134444][ T4509] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  859.143738][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.153623][ T4509] usb 6-1: Product: syz
[  859.158141][ T4509] usb 6-1: Manufacturer: syz
[  859.162725][ T4509] usb 6-1: SerialNumber: syz
[  859.205369][ T4509] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  859.854448][ T4509] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  860.902441][ T4502] usb 6-1: USB disconnect, device number 3
07:51:23 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "21be82a0", {0x1, 0x1000, 0x4, 0x2, 0x4}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (rerun: 32)

07:51:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x20000000)

07:51:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000)

07:51:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc000000)

07:51:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x18000000)

07:51:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x219256)

07:51:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x25000000)

[  861.574568][ T4509] usb 6-1: Service connection timeout for: 258
[  861.581205][ T4509] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  861.594001][ T4509] ath9k_htc: Failed to initialize the device
[  861.609742][ T4502] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xd000000)

07:51:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff)

07:51:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x20000000)

07:51:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000)

07:51:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x28000000)

[  862.024476][ T4502] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  862.605075][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  862.614158][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.630723][ T4502] usb 6-1: Product: syz
[  862.635391][ T4502] usb 6-1: Manufacturer: syz
[  862.640007][ T4502] usb 6-1: SerialNumber: syz
[  862.685979][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  863.264386][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
07:51:26 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "21be82a0", {0x1, 0x1000, 0x4, 0x2, 0x4}})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "21be82a0", {0x1, 0x1000, 0x4, 0x2, 0x4}}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)

07:51:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xe000000)

07:51:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000)

07:51:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xe0ffff)

07:51:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x25000000)

07:51:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x40000000)

[  864.902207][ T4508] usb 6-1: USB disconnect, device number 4
07:51:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x41000000)

07:51:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x28000000)

07:51:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000)

07:51:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000000)

07:51:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

07:51:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x56922100)

[  865.814317][ T4502] usb 6-1: Service connection timeout for: 264
[  865.820606][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  865.831673][ T4502] ath9k_htc: Failed to initialize the device
[  865.838312][ T4508] usb 6-1: ath9k_htc: USB layer deinitialized
[  866.214284][ T4508] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  866.734368][ T4508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  866.743601][ T4508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.752241][ T4508] usb 6-1: Product: syz
[  866.756830][ T4508] usb 6-1: Manufacturer: syz
[  866.761443][ T4508] usb 6-1: SerialNumber: syz
[  866.805056][ T4508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  867.434424][ T4508] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  868.500272][T18289] UDC core: couldn't find an available UDC or it's busy: -16
[  868.507730][T18289] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  868.717605][ T3774] usb 6-1: USB disconnect, device number 5
07:51:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x10d0000)

07:51:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000)

07:51:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

07:51:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x40000000)

07:51:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c000000)

[  869.164363][ T4508] usb 6-1: Service connection timeout for: 258
[  869.170646][ T4508] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  869.179328][ T4508] ath9k_htc: Failed to initialize the device
[  869.186107][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:31 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "81a5b782", {0x3, 0x102, 0x0, 0x40, 0x85f, 0x7, 0x8}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x68230500)

07:51:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

07:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2100000000000000)

07:51:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x12000000)

07:51:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x41000000)

07:51:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80000800)

07:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2500000000000000)

07:51:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x56922100)

07:51:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

07:51:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x18000000)

[  869.764473][ T3774] usb 6-1: new high-speed USB device number 6 using dummy_hcd
07:51:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80001000)

[  869.895270][ T1226] ieee802154 phy0 wpan0: encryption failed: -22
[  869.902197][ T1226] ieee802154 phy1 wpan1: encryption failed: -22
[  870.394412][ T3774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  870.403482][ T3774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.412922][ T3774] usb 6-1: Product: syz
[  870.417433][ T3774] usb 6-1: Manufacturer: syz
[  870.422157][ T3774] usb 6-1: SerialNumber: syz
[  870.485057][ T3774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  871.094388][ T4508] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  871.506240][T18329] UDC core: couldn't find an available UDC or it's busy: -16
[  871.513758][T18329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  872.139917][ T2365] usb 6-1: USB disconnect, device number 6
07:51:34 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "81a5b782", {0x3, 0x102, 0x0, 0x40, 0x85f, 0x7, 0x8}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "81a5b782", {0x3, 0x102, 0x0, 0x40, 0x85f, 0x7, 0x8}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)

07:51:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2800000000000000)

07:51:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x4000000)

07:51:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c000000)

07:51:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x20000000)

07:51:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x916f0300)

[  872.774612][ T4508] usb 6-1: Service connection timeout for: 258
[  872.781135][ T4508] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  872.807413][ T4508] ath9k_htc: Failed to initialize the device
[  872.817334][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x25000000)

07:51:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000)

07:51:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x5000000)

07:51:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x69720700)

07:51:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa0050000)

07:51:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x28000000)

[  873.184319][ T2365] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  873.714610][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  873.723696][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.732590][ T2365] usb 6-1: Product: syz
[  873.737153][ T2365] usb 6-1: Manufacturer: syz
[  873.741774][ T2365] usb 6-1: SerialNumber: syz
[  873.786589][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  874.354464][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  874.776207][T18380] UDC core: couldn't find an available UDC or it's busy: -16
[  874.784044][T18380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:51:37 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "81a5b782", {0x3, 0x102, 0x0, 0x40, 0x85f, 0x7, 0x8}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf0000000)

07:51:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

07:51:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4100000000000000)

07:51:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3a2e0200)

07:51:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80000800)

[  875.401440][T18380] UDC core: couldn't find an available UDC or it's busy: -16
[  875.409200][T18380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  875.430761][ T2365] usb 6-1: USB disconnect, device number 7
07:51:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf1060500)

07:51:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80001000)

07:51:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x7000000)

07:51:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4800000000000000)

07:51:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x40000000)

07:51:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff)

[  876.044339][T14355] usb 6-1: Service connection timeout for: 258
[  876.050643][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  876.061665][T14355] ath9k_htc: Failed to initialize the device
[  876.068221][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
[  876.424271][ T2365] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  876.944501][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  876.953605][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.966503][ T2365] usb 6-1: Product: syz
[  876.970688][ T2365] usb 6-1: Manufacturer: syz
[  876.975593][ T2365] usb 6-1: SerialNumber: syz
[  877.025373][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  877.594405][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  877.803910][T18446] UDC core: couldn't find an available UDC or it's busy: -16
[  877.811514][T18446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  878.042386][ T4502] usb 6-1: USB disconnect, device number 8
07:51:40 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x41, &(0x7f0000000180)=@generic={0x6, 0x0, 0x39, "22b4e66f", "3e683106296c9db8d632244a92f0f5654b3ee02c9578228f6fc7cafd9208509c56bcdb6adf8fce4292258f5aec485aa93ae34d0e8c5835594f"})

07:51:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x8000000)

07:51:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4c00000000000000)

07:51:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa0050000)

07:51:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x41000000)

07:51:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff000000)

07:51:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x56922100)

07:51:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x9000000)

07:51:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xc1790200)

07:51:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5692210000000000)

07:51:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff010000)

07:51:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x5c000000)

[  878.844607][ T2365] usb 6-1: Service connection timeout for: 258
[  878.850811][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  878.866225][ T2365] ath9k_htc: Failed to initialize the device
[  878.885430][ T4502] usb 6-1: ath9k_htc: USB layer deinitialized
[  879.314298][ T4502] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  879.884856][ T4502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  879.894020][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.902886][ T4502] usb 6-1: Product: syz
[  879.907306][ T4502] usb 6-1: Manufacturer: syz
[  879.911912][ T4502] usb 6-1: SerialNumber: syz
[  879.975255][ T4502] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  880.624494][ T4502] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  881.449847][T18465] UDC core: couldn't find an available UDC or it's busy: -16
[  881.457613][T18465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  881.467687][ T3774] usb 6-1: USB disconnect, device number 9
07:51:43 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x41, &(0x7f0000000180)=@generic={0x6, 0x0, 0x39, "22b4e66f", "3e683106296c9db8d632244a92f0f5654b3ee02c9578228f6fc7cafd9208509c56bcdb6adf8fce4292258f5aec485aa93ae34d0e8c5835594f"})

07:51:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xa000000)

07:51:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xffff0f00)

07:51:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5c00000000000000)

07:51:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf0000000)

07:51:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80000800)

07:51:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80001000)

[  882.134531][ T4502] usb 6-1: Service connection timeout for: 258
[  882.140836][ T4502] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  882.164129][ T4502] ath9k_htc: Failed to initialize the device
[  882.172442][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff)

07:51:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xffff8000)

07:51:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xb000000)

07:51:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000)

07:51:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x90760200)

[  882.585064][ T3774] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  883.165265][ T3774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  883.174768][ T3774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.182767][ T3774] usb 6-1: Product: syz
[  883.187456][ T3774] usb 6-1: Manufacturer: syz
[  883.192153][ T3774] usb 6-1: SerialNumber: syz
[  883.269201][ T3774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  883.874477][ T3774] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  884.298248][T18502] UDC core: couldn't find an available UDC or it's busy: -16
[  884.308687][T18502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  884.520939][ T4510] usb 6-1: USB disconnect, device number 10
07:51:46 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x41, &(0x7f0000000180)=@generic={0x6, 0x0, 0x39, "22b4e66f", "3e683106296c9db8d632244a92f0f5654b3ee02c9578228f6fc7cafd9208509c56bcdb6adf8fce4292258f5aec485aa93ae34d0e8c5835594f"})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x41, &(0x7f0000000180)=@generic={0x6, 0x0, 0x39, "22b4e66f", "3e683106296c9db8d632244a92f0f5654b3ee02c9578228f6fc7cafd9208509c56bcdb6adf8fce4292258f5aec485aa93ae34d0e8c5835594f"}) (async)

07:51:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff000000)

07:51:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6015000000000000)

07:51:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd)

07:51:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xc000000)

07:51:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa0050000)

07:51:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xf0000000)

07:51:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff010000)

07:51:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x200000003)

07:51:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6800000000000000)

07:51:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xd000000)

[  885.334375][ T3774] usb 6-1: Service connection timeout for: 258
[  885.368387][ T3774] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:51:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff)

[  885.387617][ T3774] ath9k_htc: Failed to initialize the device
[  885.394089][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
[  885.814391][ T4510] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  886.357738][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  886.366970][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.375756][ T4510] usb 6-1: Product: syz
[  886.379935][ T4510] usb 6-1: Manufacturer: syz
[  886.384855][ T4510] usb 6-1: SerialNumber: syz
[  886.438893][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  887.114382][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  887.960476][T18545] UDC core: couldn't find an available UDC or it's busy: -16
[  887.972500][T18545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  887.981371][T18545] UDC core: couldn't find an available UDC or it's busy: -16
[  887.993987][T18545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
07:51:49 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "fff40950", {0x3, 0x100, 0x0, 0x3f, 0x7, 0x9, 0xda}})

07:51:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0xe000000)

07:51:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6c00000000000000)

07:51:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3e00fffff)

07:51:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xffff0f00)

07:51:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff000000)

[  888.008266][ T2365] usb 6-1: USB disconnect, device number 11
07:51:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000000)

07:51:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000)

07:51:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff010000)

07:51:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xffff8000)

07:51:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7400000000000000)

07:51:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000060)

[  888.604795][ T4510] usb 6-1: Service connection timeout for: 258
[  888.611197][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  888.620174][ T4510] ath9k_htc: Failed to initialize the device
[  888.628172][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
[  889.004486][ T2365] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  889.554556][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  889.564822][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.572924][ T2365] usb 6-1: Product: syz
[  889.578140][ T2365] usb 6-1: Manufacturer: syz
[  889.582754][ T2365] usb 6-1: SerialNumber: syz
[  889.636599][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  890.204587][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  891.253416][ T4510] usb 6-1: USB disconnect, device number 12
07:51:53 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "fff40950", {0x3, 0x100, 0x0, 0x3f, 0x7, 0x9, 0xda}})

07:51:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3e00fffff016)

07:51:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xffff0f00)

07:51:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd)

07:51:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7a00000000000000)

07:51:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

[  891.724358][ T2365] usb 6-1: Service connection timeout for: 258
[  891.730689][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  891.739080][ T2365] ath9k_htc: Failed to initialize the device
[  891.751465][ T4510] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x200000003)

07:51:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7efc165ea700)

07:51:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000)

07:51:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x12000000)

07:51:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xffff8000)

07:51:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3e00fffff)

[  892.264417][ T4510] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  892.814529][ T4510] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  892.823706][ T4510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.832284][ T4510] usb 6-1: Product: syz
[  892.837483][ T4510] usb 6-1: Manufacturer: syz
[  892.842224][ T4510] usb 6-1: SerialNumber: syz
[  892.885735][ T4510] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  893.564470][ T4510] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  893.986845][T14355] usb 6-1: USB disconnect, device number 13
07:51:56 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "fff40950", {0x3, 0x100, 0x0, 0x3f, 0x7, 0x9, 0xda}})

07:51:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000)

07:51:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd)

07:51:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000)

07:51:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000)

07:51:56 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x16190000)

07:51:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8008000000000)

07:51:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x200000003)

07:51:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3e00fffff016)

07:51:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xff00000000000000)

07:51:56 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x18000000)

[  894.844770][ T4510] usb 6-1: Service connection timeout for: 256
[  894.852257][ T4510] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  894.869726][ T4510] ath9k_htc: Failed to initialize the device
07:51:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7f50c0f9f700)

[  894.898450][T14355] usb 6-1: ath9k_htc: USB layer deinitialized
[  895.324506][T14355] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  895.844483][T14355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  895.853527][T14355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.861838][T14355] usb 6-1: Product: syz
[  895.869990][T14355] usb 6-1: Manufacturer: syz
[  895.874846][T14355] usb 6-1: SerialNumber: syz
[  895.916169][T14355] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  896.484420][T14355] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  896.908950][ T2365] usb 6-1: USB disconnect, device number 14
07:51:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000)

07:51:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000036f91807)

07:51:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x20000000)

07:51:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3e00fffff)

07:51:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000)

07:51:59 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000080)=@generic={0x7, 0x0, 0x38, "3a5f0190", "e537d17a61f95d683b14b8be5b8a1a9e303f65d1b599f2fcda6a6e052e901d9e01f2cf475539408a4e35030102e8b1a29ede1234f24017da"})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x290, &(0x7f00000004c0)={[{0xd, 0x4e00, "64e19cb39acbed9202c80b4946"}, {0xe7, 0x4e00, "e60d3288427613ddd6f1cd6645d2097dccfb96bd5b7d2c81c45828504ea76738506d40240070436461b6e4567a9fc8a7832cdf6d711c4db9ebd3cac5c38ab858e2c9f951be7b5ab5aad06cb979fa142d2383bb4a2728a9527b5d015aa8968fc21459076141dd3c15376ee860b726267052869840e36feff1a2627e43093bbb6f17d6f7437023dea898c17d1a5104c1dae09dd1f02cdc76f2341c706f5cf3a7fc5a3b8d865a6081c32a2e096ada6832a490e458d5c60d4d19b9cf4618fe517568e9e31906d8ac440a4e1c8b5fcc4a2f21cf33cc404340044d916b3ce073ca66c2be7230d3cf6d10"}, {0x89, 0x4e00, "2278d0fd12bb6bcb2bdd54de9fab43f05618f74fe5a3632594c7594b64f191ff4eb26135bc6387c41bb39cf23decb07697a625ba252e84ac5cb7e0ec4a9c09062a483696361dc39d3ec3639f11773686cbe48e67234e6e4d69125a7215d180e14c2e2fece3b97b9ea759ae047c4213eb0ed8b59a403fd79d4fee2186a6bc15d361a6622034a872be52"}, {0x2f, 0x4e00, "83feaef8fa1d3761e86a17500c0d2bd9307f1c62f39d7a64f52e1155e45a1bbc3ee6e930aa4a788c868c5e0042f095"}, {0xc7, 0x4e00, "54abb07b45e232de4d622788f7d3b3507cdba405ddbd4a34b1572f1f858d0373960524f023ef2c81f9664c977aed9fba50c5596783d8b7013f584765cac8ba55606713b49f0c695c57708074654c42f7ca17b6cdbba6be82165f407bc8c090861c658ff1a2226bd0d717b0030f0d5cd817c415b5323d1b206c84e2aed33fbc7a19fa8d736cd2e06ccc5e2502afa6164181da4e3ecfcb94f7adee02a41b9c146b62f489ca9cbc2de03c0d5bd22e06c6f53d026383aa587776c0cba089d12f9b24175a1904b9751d"}]})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffc80, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xfffffffffffffd91, "0712706e", {0x3, 0x107}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"})

07:51:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000506f1807)

07:51:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x21000000)

07:51:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x8008000000000)

07:51:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x6, 0xfffffffa, 0x7fff, 0x7fffffff})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:51:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000)

[  897.724650][T14355] usb 6-1: Service connection timeout for: 256
[  897.730853][T14355] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
07:51:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000052368807)

[  897.787615][T14355] ath9k_htc: Failed to initialize the device
[  897.809032][ T2365] usb 6-1: ath9k_htc: USB layer deinitialized
07:51:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x25000000)

[  897.911868][T18719] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:51:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000279c1807)

07:51:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x3e00fffff016)

07:51:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10008000000000)

07:51:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x28000000)

[  898.174376][ T2365] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  898.714521][ T2365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  898.723556][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.736768][ T2365] usb 6-1: Product: syz
[  898.740928][ T2365] usb 6-1: Manufacturer: syz
[  898.748053][ T2365] usb 6-1: SerialNumber: syz
[  898.797962][ T2365] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  899.364480][ T2365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  899.987388][T18707] UDC core: couldn't find an available UDC or it's busy: -16
[  899.994834][T18707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  900.612159][ T3774] usb 6-1: USB disconnect, device number 15
07:52:02 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x56, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000080)=@generic={0x7, 0x0, 0x38, "3a5f0190", "e537d17a61f95d683b14b8be5b8a1a9e303f65d1b599f2fcda6a6e052e901d9e01f2cf475539408a4e35030102e8b1a29ede1234f24017da"}) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4c, 0x79, 0x4a, 0x40, 0x8ca, 0x2018, 0x7c91, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x1f, 0x5a}}]}}]}}, 0x0) (rerun: 64)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x290, &(0x7f00000004c0)={[{0xd, 0x4e00, "64e19cb39acbed9202c80b4946"}, {0xe7, 0x4e00, "e60d3288427613ddd6f1cd6645d2097dccfb96bd5b7d2c81c45828504ea76738506d40240070436461b6e4567a9fc8a7832cdf6d711c4db9ebd3cac5c38ab858e2c9f951be7b5ab5aad06cb979fa142d2383bb4a2728a9527b5d015aa8968fc21459076141dd3c15376ee860b726267052869840e36feff1a2627e43093bbb6f17d6f7437023dea898c17d1a5104c1dae09dd1f02cdc76f2341c706f5cf3a7fc5a3b8d865a6081c32a2e096ada6832a490e458d5c60d4d19b9cf4618fe517568e9e31906d8ac440a4e1c8b5fcc4a2f21cf33cc404340044d916b3ce073ca66c2be7230d3cf6d10"}, {0x89, 0x4e00, "2278d0fd12bb6bcb2bdd54de9fab43f05618f74fe5a3632594c7594b64f191ff4eb26135bc6387c41bb39cf23decb07697a625ba252e84ac5cb7e0ec4a9c09062a483696361dc39d3ec3639f11773686cbe48e67234e6e4d69125a7215d180e14c2e2fece3b97b9ea759ae047c4213eb0ed8b59a403fd79d4fee2186a6bc15d361a6622034a872be52"}, {0x2f, 0x4e00, "83feaef8fa1d3761e86a17500c0d2bd9307f1c62f39d7a64f52e1155e45a1bbc3ee6e930aa4a788c868c5e0042f095"}, {0xc7, 0x4e00, "54abb07b45e232de4d622788f7d3b3507cdba405ddbd4a34b1572f1f858d0373960524f023ef2c81f9664c977aed9fba50c5596783d8b7013f584765cac8ba55606713b49f0c695c57708074654c42f7ca17b6cdbba6be82165f407bc8c090861c658ff1a2226bd0d717b0030f0d5cd817c415b5323d1b206c84e2aed33fbc7a19fa8d736cd2e06ccc5e2502afa6164181da4e3ecfcb94f7adee02a41b9c146b62f489ca9cbc2de03c0d5bd22e06c6f53d026383aa587776c0cba089d12f9b24175a1904b9751d"}]}) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffc80, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xfffffffffffffd91, "0712706e", {0x3, 0x107}}) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x5, 0x0, 0x0, "bf169103"}) (rerun: 32)

07:52:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x6, 0xfffffffa, 0x7fff, 0x7fffffff})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x6, 0xfffffffa, 0x7fff, 0x7fffffff}) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) (async)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"1b00ee8aac2e163c1b87444b47fdc424acf0eb567e8cc7e41d43f604b65fc18486d40c65f4412367760e9f9b8bc2febfed7151039f8d78e0206469ba04872fc0056dae88b0333005178e15efd6bfc8900f181e05226186bafb0ff0496d6ab17983ec4f7dde83a267e9c50f1c9f96201581bfc9c1ce250d486543bc2d7eab2705e3a2134fedda73c80a1082222c9c59f987da997fae4ee80501480a2f2b0a0ac6dcea8a1026269e196c32a0705fa20b7d1b8bb5320f746914569b32b7f74ff0f272dbb31ee530d4b837de1607b02b3d3e2a85b00a7236f9ef4fe19e8326bd6e3a35df145cb6d5564e54eb7e89c0d09847fbb5930d26ca6ff114f335057ea2d782dbaf608f6fae1f963c02c02c7674a856351a9c88730b6be9fa57a56207ba745cc39e2b07e4548f8298f273608412d65eafaf677da0797e3645566a27f3b50d13d280d54c78c2c434661919ee88fd86322637c1f6beed9a8ae0b2fa4160114d9852e8556a60941e3c73d12ecc304a37edfd5a3dbe5f96edab74fa32fe343097ec590b7c5ec6a2f6cd59dce4516b5d890a821cf8fad0bef6b84d95b9ae3b391c1efbe6fd9f59c0358282998d1eadd13087d8019ac0cb15da63c0ea256f7372f65bbbc86b91d13b8d09101e625d3488052104ca43f3228aeae7e1e9ccca1b6b4a0080945692a8dc0a5c3631547dbe6e95e3287e8a7df3028175b906354be15629e966a1e05b75e922b1774c7cde68c39aebbc3a54a1881593227cf1f3b57172067b36287de3f896809935ca96b5748646a06928351935ddd634872c46bf7821e2a0b0a343c73a226770653ddd53739819e6bff1166bfdab4731889f8745eacb3da13214c16d25d429b61224fd413f2536fa883e3fd4f627793b8069d6e52cf1cebdc10abf32ff82fe64b91396bec133f0845daa0f1cec3f831731c396e9d89a1d8e7731a4a82e00c40d4662858f6d03c92c361aeb1f00e07b319172e3fa885f4ab473277e79436d7dc428d006c4059487771a84893ab7de84f34ccc4ce0085c8ee9c4171930cd9552f5f8640bf9677565d1db1a1305e091e10ba441618088c83472ceb28eb1a3921beea8597695eeedd344751cd4f0d0defd784caa03732e58b50dc6705939d15ccecb0193f8a4e0afb13100e733ef19f286cf7ad34ebd72e2c17b7f7d85ebef8b2b2a2005b5068f1169dd5644b06a91a9147b639a435cf64a1af5961f8085191c42843349ccfdba922272bccf9d357991bd240eb78604fcb382fa98b446242886aa112ef3c95af8024f7d6c298860ac7db843ba243a8a73ce46c30533f788dfb173ea304ab21fe65ecd44c638286396c88ba4c041a3e5a1bb9c1c158c844bb31f1cef02c03e1444c04d480eb1e6de103118f1be5bcf3bf59d81e08397e350dcaeabdecf311eb73d92661005bc11e9eec44e9f8ab1124632839361"}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

07:52:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x10000077269807)

07:52:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x7fcbc3ad3700)

07:52:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000)

07:52:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x40000000)

[  901.244513][ T2365] usb 6-1: Service connection timeout for: 257
[  901.250710][ T2365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  901.259693][T18754] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:52:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x41000000)

07:52:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xa75e16fc7e0000)

[  901.292997][ T2365] ath9k_htc: Failed to initialize the device
[  901.326445][ T3774] usb 6-1: ath9k_htc: USB layer deinitialized
07:52:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000)

07:52:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x1000007cb04807)

07:52:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x48000000)

07:52:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000)

[  901.734530][ T3774] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  902.324386][ T3774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  902.333564][ T3774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.342269][ T3774] usb 6-1: Product: syz
[  902.346536][ T3774] usb 6-1: Manufacturer: syz
[  902.351134][ T3774] usb 6-1: SerialNumber: syz
[  902.395284][ T3774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  903.014384][ T3774] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  903.217434][T18791] UDC core: couldn't find an available UDC or it's busy: -16
[  903.224983][T18791] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  903.232881][T18791] UDC core: couldn't find an available UDC or it's busy: -16
[  903.241020][T18791] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  903.249072][T18791] UDC core: couldn't find an available UDC or it's busy: -16
[  903.257249][T18791] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  903.265798][T18791] UDC core: couldn't find an available UDC or it's busy: -16
[  903.273232][T18791] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  903.281271][T18791] UDC core: couldn't find an available UDC or it's busy: -16
[  903.289594][T18791] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  904.518531][ T4502] usb 6-1: USB disconnect, device number 16
[  904.525169][    C0] INFO: trying to register non-static key.
[  904.525182][    C0] The code is fine but needs lockdep annotation, or maybe
[  904.525190][    C0] you didn't initialize this object before use?
[  904.525198][    C0] turning off the locking correctness validator.
[  904.525206][    C0] CPU: 0 PID: 4502 Comm: kworker/0:10 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  904.525232][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  904.525245][    C0] Workqueue: usb_hub_wq hub_event
[  904.525305][    C0] Call Trace:
[  904.525312][    C0]  <IRQ>
[  904.525320][    C0]  dump_stack_lvl+0x1dc/0x2d8
[  904.525348][    C0]  ? show_regs_print_info+0x12/0x12
[  904.525369][    C0]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  904.525393][    C0]  ? __is_module_percpu_address+0x29e/0x3d0
[  904.525457][    C0]  ? cpumask_next+0xe9/0x100
[  904.525479][    C0]  register_lock_class+0xf4b/0x1390
[  904.525502][    C0]  ? __print_lock_name+0x1d0/0x1d0
[  904.525522][    C0]  ? lockdep_init_map_type+0x9b0/0x9b0
[  904.525540][    C0]  ? stack_trace_save+0x1e0/0x1e0
[  904.525559][    C0]  ? __print_lock_name+0x1d0/0x1d0
[  904.525577][    C0]  ? arch_stack_walk+0x112/0x140
[  904.525607][    C0]  __lock_acquire+0x149/0x2b00
[  904.525631][    C0]  ? rcu_read_lock_sched_held+0x89/0x130
[  904.525652][    C0]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  904.525672][    C0]  ? trace_lock_acquire+0x190/0x190
[  904.525695][    C0]  lock_acquire+0x19f/0x4d0
[  904.525714][    C0]  ? skb_queue_tail+0x32/0x120
[  904.525739][    C0]  ? read_lock_is_recursive+0x10/0x10
[  904.525766][    C0]  _raw_spin_lock_irqsave+0xd1/0x120
[  904.525785][    C0]  ? skb_queue_tail+0x32/0x120
[  904.525805][    C0]  ? _raw_spin_lock+0x40/0x40
[  904.525823][    C0]  ? do_raw_spin_unlock+0x134/0x8a0
[  904.525844][    C0]  ? skb_pull+0x8b/0x130
[  904.525862][    C0]  skb_queue_tail+0x32/0x120
[  904.525882][    C0]  hif_usb_regout_cb+0x12a/0x160
[  904.525938][    C0]  __usb_hcd_giveback_urb+0x375/0x520
[  904.525960][    C0]  dummy_timer+0x808/0x3150
[  904.526024][    C0]  ? __lock_acquire+0x1382/0x2b00
[  904.526049][    C0]  ? trace_lock_acquire+0x190/0x190
[  904.526081][    C0]  ? dummy_free_streams+0x310/0x310
[  904.526105][    C0]  ? dummy_free_streams+0x310/0x310
[  904.526126][    C0]  call_timer_fn+0xf6/0x210
[  904.526145][    C0]  ? dummy_free_streams+0x310/0x310
[  904.526165][    C0]  ? __run_timers+0x910/0x910
[  904.526186][    C0]  ? dummy_free_streams+0x310/0x310
[  904.526206][    C0]  ? dummy_free_streams+0x310/0x310
[  904.526224][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  904.526242][    C0]  ? lockdep_hardirqs_on+0x95/0x140
[  904.526258][    C0]  ? dummy_free_streams+0x310/0x310
[  904.526277][    C0]  __run_timers+0x71a/0x910
[  904.526301][    C0]  ? trace_timer_cancel+0x220/0x220
[  904.526327][    C0]  run_timer_softirq+0x63/0xf0
[  904.526347][    C0]  __do_softirq+0x392/0x7a3
[  904.526369][    C0]  ? __irq_exit_rcu+0xec/0x170
[  904.526389][    C0]  ? __entry_text_end+0x1fecb5/0x1fecb5
[  904.526412][    C0]  __irq_exit_rcu+0xec/0x170
[  904.526427][    C0]  ? irq_exit_rcu+0x20/0x20
[  904.526446][    C0]  irq_exit_rcu+0x5/0x20
[  904.526461][    C0]  sysvec_apic_timer_interrupt+0x91/0xb0
[  904.526478][    C0]  </IRQ>
[  904.526484][    C0]  <TASK>
[  904.526490][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  904.526510][    C0] RIP: 0010:console_unlock+0xc88/0xe90
[  904.526534][    C0] Code: 00 e9 71 fa ff ff e8 b7 a8 1a 00 e8 72 d4 a7 08 48 83 7c 24 38 00 74 dd 66 2e 0f 1f 84 00 00 00 00 00 e8 9b a8 1a 00 fb 31 ff <44> 89 f6 e8 a0 ac 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 0f
[  904.526549][    C0] RSP: 0018:ffffc9000ff8efe0 EFLAGS: 00000246
[  904.526565][    C0] RAX: ffffffff816b04f5 RBX: 0000000000000000 RCX: 0000000000040000
[  904.526578][    C0] RDX: ffffc9000f1af000 RSI: 0000000000001cf0 RDI: 0000000000000000
[  904.526592][    C0] RBP: ffffc9000ff8f1f0 R08: ffffffff816b04ac R09: fffffbfff1ffc3c5
[  904.526618][    C0] R10: fffffbfff1ffc3c5 R11: 0000000000000000 R12: ffffffff8d3fb9e8
[  904.526630][    C0] R13: ffffffff8d3fb9b0 R14: 0000000000000000 R15: ffffc9000ff8f060
[  904.526645][    C0]  ? console_unlock+0xc3c/0xe90
[  904.526664][    C0]  ? console_unlock+0xc85/0xe90
[  904.526691][    C0]  ? console_trylock_spinning+0x3f0/0x3f0
[  904.526711][    C0]  ? vprintk_emit+0xa1/0x140
[  904.526731][    C0]  ? console_trylock+0x70/0x70
[  904.526751][    C0]  ? ptr_to_hashval+0x60/0x60
[  904.526776][    C0]  ? snprintf+0xd6/0x120
[  904.526793][    C0]  ? vscnprintf+0x80/0x80
[  904.526808][    C0]  vprintk_emit+0xba/0x140
[  904.526828][    C0]  dev_vprintk_emit+0x2e4/0x35d
[  904.526882][    C0]  ? _dev_info+0x165/0x165
[  904.526900][    C0]  ? rcu_read_lock_sched_held+0x89/0x130
[  904.526924][    C0]  dev_printk_emit+0xd9/0x118
[  904.526945][    C0]  ? dev_vprintk_emit+0x35d/0x35d
[  904.526963][    C0]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  904.526984][    C0]  ? __dev_printk+0x138/0x199
[  904.527000][    C0]  _dev_info+0x11e/0x165
[  904.527018][    C0]  ? device_shutdown+0x68c/0x68c
[  904.527035][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  904.527054][    C0]  ? kasan_set_track+0x5e/0x70
[  904.527071][    C0]  ? kasan_set_track+0x4c/0x70
[  904.527086][    C0]  ? kasan_set_free_info+0x1f/0x40
[  904.527102][    C0]  ? kfree+0xb8/0x2e0
[  904.527119][    C0]  ? recursively_mark_NOTATTACHED+0x2d4/0x380
[  904.527137][    C0]  ? hub_event+0x4ed/0xe40
[  904.527152][    C0]  usb_disconnect+0xde/0x8a0
[  904.527172][    C0]  hub_port_connect+0x29c/0x2910
[  904.527188][    C0]  ? __lock_acquire+0x2b00/0x2b00
[  904.527210][    C0]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  904.527234][    C0]  ? __mutex_unlock_slowpath+0x244/0x7d0
[  904.527255][    C0]  ? mutex_unlock+0x10/0x10
[  904.527272][    C0]  ? descriptors_changed+0x9f0/0x9f0
[  904.527290][    C0]  ? slab_free_freelist_hook+0x12e/0x1a0
[  904.527314][    C0]  hub_port_connect_change+0x5f9/0xc20
[  904.527337][    C0]  ? hub_port_reset+0x1200/0x1200
[  904.527357][    C0]  ? hub_handle_remote_wakeup+0x18d/0x3f0
[  904.527377][    C0]  port_event+0xca0/0x13e0
[  904.527401][    C0]  ? hub_quiesce+0x330/0x330
[  904.527418][    C0]  ? mutex_lock_io_nested+0x60/0x60
[  904.527435][    C0]  ? _raw_spin_lock_irq+0xdb/0x110
[  904.527456][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  904.527474][    C0]  ? lockdep_hardirqs_on+0x95/0x140
[  904.527494][    C0]  hub_event+0x4ed/0xe40
[  904.527518][    C0]  ? led_work+0x710/0x710
[  904.527533][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  904.527554][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  904.527575][    C0]  process_one_work+0x850/0x1130
[  904.527639][    C0]  ? worker_detach_from_pool+0x260/0x260
[  904.527663][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  904.527683][    C0]  ? kthread_data+0x4d/0xc0
[  904.527701][    C0]  ? wq_worker_running+0x95/0x170
[  904.527721][    C0]  worker_thread+0xab1/0x1300
[  904.527751][    C0]  kthread+0x2a3/0x2d0
[  904.527768][    C0]  ? rcu_lock_release+0x20/0x20
[  904.527787][    C0]  ? kthread_blkcg+0xd0/0xd0
[  904.527805][    C0]  ret_from_fork+0x1f/0x30
[  904.527843][    C0]  </TASK>
[  904.527875][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  904.527894][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  904.527908][    C0] CPU: 0 PID: 4502 Comm: kworker/0:10 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0
[  904.527929][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  904.527942][    C0] Workqueue: usb_hub_wq hub_event
[  904.527962][    C0] RIP: 0010:skb_queue_tail+0xb8/0x120
[  904.527987][    C0] Code: 96 b8 f9 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 82 96 b8 f9 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 69 96 b8 f9 49 89 5d 00 49 83 c4
[  904.528004][    C0] RSP: 0018:ffffc90000007808 EFLAGS: 00010046
[  904.528021][    C0] RAX: 0000000000000000 RBX: ffff888038ea3dc0 RCX: dffffc0000000000
[  904.528036][    C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076e0
[  904.528050][    C0] RBP: 1ffff11004c50734 R08: dffffc0000000000 R09: 0000000000000003
[  904.528064][    C0] R10: fffff52000000edd R11: 0000000000000004 R12: ffff888026283998
[  904.528077][    C0] R13: 0000000000000000 R14: ffff8880262839a0 R15: dffffc0000000000
[  904.528090][    C0] FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[  904.528105][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  904.528120][    C0] CR2: 00007f66122ad118 CR3: 000000000c88e000 CR4: 00000000003506f0
[  904.528136][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  904.528149][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  904.528161][    C0] Call Trace:
[  904.528167][    C0]  <IRQ>
[  904.528176][    C0]  hif_usb_regout_cb+0x12a/0x160
[  904.528198][    C0]  __usb_hcd_giveback_urb+0x375/0x520
[  904.528219][    C0]  dummy_timer+0x808/0x3150
[  904.528241][    C0]  ? __lock_acquire+0x1382/0x2b00
[  904.528269][    C0]  ? trace_lock_acquire+0x190/0x190
[  904.528301][    C0]  ? dummy_free_streams+0x310/0x310
[  904.528327][    C0]  ? dummy_free_streams+0x310/0x310
[  904.528347][    C0]  call_timer_fn+0xf6/0x210
[  904.528368][    C0]  ? dummy_free_streams+0x310/0x310
[  904.528388][    C0]  ? __run_timers+0x910/0x910
[  904.528409][    C0]  ? dummy_free_streams+0x310/0x310
[  904.528430][    C0]  ? dummy_free_streams+0x310/0x310
[  904.528450][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  904.528468][    C0]  ? lockdep_hardirqs_on+0x95/0x140
[  904.528485][    C0]  ? dummy_free_streams+0x310/0x310
[  904.528506][    C0]  __run_timers+0x71a/0x910
[  904.528531][    C0]  ? trace_timer_cancel+0x220/0x220
[  904.528560][    C0]  run_timer_softirq+0x63/0xf0
[  904.528580][    C0]  __do_softirq+0x392/0x7a3
[  904.528611][    C0]  ? __irq_exit_rcu+0xec/0x170
[  904.528631][    C0]  ? __entry_text_end+0x1fecb5/0x1fecb5
[  904.528658][    C0]  __irq_exit_rcu+0xec/0x170
[  904.528675][    C0]  ? irq_exit_rcu+0x20/0x20
[  904.528696][    C0]  irq_exit_rcu+0x5/0x20
[  904.528712][    C0]  sysvec_apic_timer_interrupt+0x91/0xb0
[  904.528731][    C0]  </IRQ>
[  904.528737][    C0]  <TASK>
[  904.528743][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  904.528763][    C0] RIP: 0010:console_unlock+0xc88/0xe90
[  904.528785][    C0] Code: 00 e9 71 fa ff ff e8 b7 a8 1a 00 e8 72 d4 a7 08 48 83 7c 24 38 00 74 dd 66 2e 0f 1f 84 00 00 00 00 00 e8 9b a8 1a 00 fb 31 ff <44> 89 f6 e8 a0 ac 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 0f
[  904.528802][    C0] RSP: 0018:ffffc9000ff8efe0 EFLAGS: 00000246
[  904.528818][    C0] RAX: ffffffff816b04f5 RBX: 0000000000000000 RCX: 0000000000040000
[  904.528832][    C0] RDX: ffffc9000f1af000 RSI: 0000000000001cf0 RDI: 0000000000000000
[  904.528845][    C0] RBP: ffffc9000ff8f1f0 R08: ffffffff816b04ac R09: fffffbfff1ffc3c5
[  904.528859][    C0] R10: fffffbfff1ffc3c5 R11: 0000000000000000 R12: ffffffff8d3fb9e8
[  904.528873][    C0] R13: ffffffff8d3fb9b0 R14: 0000000000000000 R15: ffffc9000ff8f060
[  904.528890][    C0]  ? console_unlock+0xc3c/0xe90
[  904.528910][    C0]  ? console_unlock+0xc85/0xe90
[  904.528936][    C0]  ? console_trylock_spinning+0x3f0/0x3f0
[  904.528957][    C0]  ? vprintk_emit+0xa1/0x140
[  904.528976][    C0]  ? console_trylock+0x70/0x70
[  904.528998][    C0]  ? ptr_to_hashval+0x60/0x60
[  904.529023][    C0]  ? snprintf+0xd6/0x120
[  904.529042][    C0]  ? vscnprintf+0x80/0x80
[  904.529060][    C0]  vprintk_emit+0xba/0x140
[  904.529082][    C0]  dev_vprintk_emit+0x2e4/0x35d
[  904.529100][    C0]  ? _dev_info+0x165/0x165
[  904.529118][    C0]  ? rcu_read_lock_sched_held+0x89/0x130
[  904.529141][    C0]  dev_printk_emit+0xd9/0x118
[  904.529162][    C0]  ? dev_vprintk_emit+0x35d/0x35d
[  904.529182][    C0]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  904.529203][    C0]  ? __dev_printk+0x138/0x199
[  904.529220][    C0]  _dev_info+0x11e/0x165
[  904.529248][    C0]  ? device_shutdown+0x68c/0x68c
[  904.529265][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  904.529285][    C0]  ? kasan_set_track+0x5e/0x70
[  904.529300][    C0]  ? kasan_set_track+0x4c/0x70
[  904.529316][    C0]  ? kasan_set_free_info+0x1f/0x40
[  904.529334][    C0]  ? kfree+0xb8/0x2e0
[  904.529349][    C0]  ? recursively_mark_NOTATTACHED+0x2d4/0x380
[  904.529365][    C0]  ? hub_event+0x4ed/0xe40
[  904.529379][    C0]  usb_disconnect+0xde/0x8a0
[  904.529397][    C0]  hub_port_connect+0x29c/0x2910
[  904.529413][    C0]  ? __lock_acquire+0x2b00/0x2b00
[  904.529434][    C0]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  904.529453][    C0]  ? __mutex_unlock_slowpath+0x244/0x7d0
[  904.529472][    C0]  ? mutex_unlock+0x10/0x10
[  904.529487][    C0]  ? descriptors_changed+0x9f0/0x9f0
[  904.529503][    C0]  ? slab_free_freelist_hook+0x12e/0x1a0
[  904.529523][    C0]  hub_port_connect_change+0x5f9/0xc20
[  904.529542][    C0]  ? hub_port_reset+0x1200/0x1200
[  904.529559][    C0]  ? hub_handle_remote_wakeup+0x18d/0x3f0
[  904.529575][    C0]  port_event+0xca0/0x13e0
[  904.529605][    C0]  ? hub_quiesce+0x330/0x330
[  904.529625][    C0]  ? mutex_lock_io_nested+0x60/0x60
[  904.529641][    C0]  ? _raw_spin_lock_irq+0xdb/0x110
[  904.529661][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  904.529678][    C0]  ? lockdep_hardirqs_on+0x95/0x140
[  904.529698][    C0]  hub_event+0x4ed/0xe40
[  904.529719][    C0]  ? led_work+0x710/0x710
[  904.529734][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  904.529753][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  904.529772][    C0]  process_one_work+0x850/0x1130
[  904.529798][    C0]  ? worker_detach_from_pool+0x260/0x260
[  904.529820][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  904.529839][    C0]  ? kthread_data+0x4d/0xc0
[  904.529856][    C0]  ? wq_worker_running+0x95/0x170
[  904.529875][    C0]  worker_thread+0xab1/0x1300
[  904.529904][    C0]  kthread+0x2a3/0x2d0
[  904.529920][    C0]  ? rcu_lock_release+0x20/0x20
[  904.529937][    C0]  ? kthread_blkcg+0xd0/0xd0
[  904.529954][    C0]  ret_from_fork+0x1f/0x30
[  904.529977][    C0]  </TASK>
[  904.529982][    C0] Modules linked in:
[  904.529996][    C0] ---[ end trace 0000000000000000 ]---
[  904.530006][    C0] RIP: 0010:skb_queue_tail+0xb8/0x120
[  904.530028][    C0] Code: 96 b8 f9 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 82 96 b8 f9 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 69 96 b8 f9 49 89 5d 00 49 83 c4
[  904.530044][    C0] RSP: 0018:ffffc90000007808 EFLAGS: 00010046
[  904.530061][    C0] RAX: 0000000000000000 RBX: ffff888038ea3dc0 RCX: dffffc0000000000
[  904.530074][    C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076e0
[  904.530087][    C0] RBP: 1ffff11004c50734 R08: dffffc0000000000 R09: 0000000000000003
[  904.530099][    C0] R10: fffff52000000edd R11: 0000000000000004 R12: ffff888026283998
[  904.530111][    C0] R13: 0000000000000000 R14: ffff8880262839a0 R15: dffffc0000000000
[  904.530124][    C0] FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[  904.530140][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  904.530153][    C0] CR2: 00007f66122ad118 CR3: 000000000c88e000 CR4: 00000000003506f0
[  904.530170][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  904.530181][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  904.530195][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  904.530390][    C0] Kernel Offset: disabled
[  905.972591][    C0] Rebooting in 86400 seconds..