4 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 08:10:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001240)={0x0, 0x1, r0, 0xdf8a, 0x80000}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000011c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="100f0000", @ANYRES16=0x0, @ANYBLOB="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"], 0xf10}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 08:10:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000600000018190000", @ANYRES32, @ANYBLOB="00000000000000007d6140001000000065920c000100040018000000080000000000000008000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) 08:10:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:10:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001240)={0x0, 0x1, r0, 0xdf8a, 0x80000}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000011c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 08:10:54 executing program 2: keyctl$clear(0x7, 0x0) 08:10:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) 08:10:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000600000018190000", @ANYRES32, @ANYBLOB="00000000000000007d6140001000000065920c000100040018000000080000000000000008000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) 08:10:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001240)={0x0, 0x1, r0, 0xdf8a, 0x80000}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000011c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 08:10:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 08:10:54 executing program 2: keyctl$clear(0x7, 0x0) 08:10:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00'}) 08:10:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000600000018190000", @ANYRES32, @ANYBLOB="00000000000000007d6140001000000065920c000100040018000000080000000000000008000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001240)={0x0, 0x1, r0, 0xdf8a, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) 08:10:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 08:10:54 executing program 2: keyctl$clear(0x7, 0x0) 08:10:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 08:10:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) 08:10:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:54 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 08:10:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) 08:10:54 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, 0x0, 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:54 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 08:10:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, 0x0, 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) 08:10:54 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:54 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, 0x0, 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:54 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:55 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:55 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x40000) 08:10:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:55 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x40000) 08:10:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:55 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:55 executing program 3: keyctl$clear(0x7, 0x0) 08:10:55 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x40000) 08:10:55 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:55 executing program 3: keyctl$clear(0x7, 0x0) 08:10:55 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00fdffffff"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:55 executing program 3: keyctl$clear(0x7, 0x0) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 5: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:55 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:55 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 5: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) 08:10:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x80802) ioctl$HDIO_GETGEO(r0, 0x1263, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000600000018190000", @ANYRES32, @ANYBLOB="00000000000000007d6140001000000065920c000100040018000000080000000000000008000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xa4, &(0x7f0000000200)=""/164, 0x40f00, 0x0, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x81, 0x75d}, 0x10, 0xffffffffffffffff}, 0x78) 08:10:55 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:55 executing program 5: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}}, 0x8805) 08:10:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) 08:10:55 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:55 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) 08:10:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) 08:10:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 08:10:56 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 08:10:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2", @ANYRES16=0x0], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:10:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) 08:10:56 executing program 3: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:56 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3a5e5cf0b57e008cb8135d2"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 3: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) 08:10:56 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) 08:10:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, 0x0) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 3: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) 08:10:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, 0x0) 08:10:56 executing program 3: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) 08:10:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, 0x0) 08:10:56 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x22e4, &(0x7f0000000380)={[{0xa6, 0x4e00, "26313167a3d5c5f96cda83b6437ef9d25f3893a363a7197947d9d013a2b7c834005a926d9d8a7d8200ae03f9b3443982c683429173e81baea837b877b0ca1c750a1ee47596326036b805249a6789b932d86b9dbc231a387c8613c6ccbb359a6d7b19b59c7f2a818d0dc0e68333a0f366e64039c44df080655450c2b9ee01ad4c6881f660869c92d546b3915c1b687ea0ac3b463bb61e7b3785e8e948a9bbe0fe174be7428074"}, {0xef, 0x4e00, "9fdcda29e3d8bdcabe480942a5708a333c6a12d4cb9ce6f85048e82067c25a70eb5a020ff38a15af5b516af7bb2956d11268c065fb1265626eaf47059cebd1eb67e1e3834d98924b6262ea29fc4ebcca16876ae57c5ef5f59abd8026780a88c5f5e8029714700927de82a5eb57bb3a46947f84c2b3e6bd960b457855d851f9a356bdaa00445d7d78f3343dae0234f4d7d369353251a2c313b00e63015e4c8bf1adeeb3b9baaf7ba8c3f87f7907b1930cd977478b249a138be9f1789b625db2b6f027a907a3295829c334747f05375e6b7c0befc236b6ca4b7a2fd05c294ebed6619a9733b46baaa52fd49bce2d9267"}, {0x33, 0x4e00, "e18c4eaba41a96ce44c146a9976168e07fcdee4da7c9226b524521a8052604369f905601d574dde06cda533ff77aed0213f9a0"}, {0x9f, 0x4e00, "df106743468020ce61de48f5eb64ca08ba5bb486439c2b0114761cbe795a3da4caf575ac869fd23aa7203474321080dc0c29a4f97cdb4ad2157e2aebcebb6820b30a1fdd4da3f10e29f457a767f3c4ddb46f576d46fef9984b3d06f7321ba53e419654246e292e84403007b53653e9a49a9974d5bd663ee1ff99e312918efb7b80326fd7fd2794e3637170914c6b286b56a2daf460224ecdaaffe65d2e8a09"}, {0x1000, 0x4e00, "73c47c95dc427cd6fa8fc13a4cbe6b5d588355a1120983ba5e198004a2066f3891cebdc1444544fc660d1a1147fdd1e0b4c3144a32018ec920e4577cf3d765d7f3026b01e561e214e87ba74b8824e715443b20eec44b299333c41d22c3f6f43c5b1d19302844bf5dce3dc4cce7a1f6ec47925ea4cc1db3a4a892d95106cd49a86796fbc2f9baa739995f050723151da3e1405cee0614d02a47fd0f9e16e93da7ca71ad3b224cd40651e83dc099584f18035308fdb4664c7f154e5ab65a7dda8c0fc0c26501274f6a5da5c65c2e2e0aa1af459c290a150070a811ea3983eb7cf0fcfb5efeb9b5faac16204ef80decf0701af0effd75321ca9595a722861db319235257fdfb7de88133f7f6b20e171c7b478b83dd26d2d3c1f2cb839c17faa3ce4518dc104a446fe5b8ec84eb25644ca82e9a032bf1f90d035a954c1d4ccf77979a3ad438e51e3949aa2982ce2a08eebf1c0e47a0663421398040f25aeefb27c10d879afa0f4fbaa940f3eb3df587ac140b68aee7659770295be69d4f781534c9b1c1b2e2cd15f8592d7891f28fdabe7df76ab58416b911c0f1a192cf454cbdf3f0e34857d970c3ad460e68d659feb5e1a88374c007b19c7c20864e1dd0939375f7f4699881e82c72bc70a3abf816238364196045f90033cc6871c1f219ad2f800165ccb3bfb45bd20a41c44fbb960f7a594f5783a488bca78d702ee09612d9ffb8ff83d93ef835b100101c165ec3e90a0eaa26b7ed95029c61a36b286c620b25d099c276701f26e6d27e2ef8cab2444d558264a27438645973ea159ddaed2c4fdf2c19d595302f442a53ba12cfc374d1b53980d66dc1e8e948100c7b6ecbefb5eb63d795648e0180e28c54a726d5b10d5942e1ac2aa77b609ae8f4356e6c8b3520e744b33bc9e7369a3d97a1bf55333005f3065602d6028a5762e0513006283dae1e1ac3da24ea5048bc164b5183ce0247b2f2249c9c19f6e997d09505c9427b938a26875453a7795ffcc31c97eff257ef1ddea66a5d12670bea15c418cca0b9fcc3c58fe1a383dd5258c234337b776da41734bd24fcc6f041db3bb5ae5f607c21741319b871d911c6014c38861b045a34e98f5f2f93c02705f5bb71be3c7cb9f61ad076da529ba866ce093e0b5d0c262a2a5c5327c0162167f111b7277271440d1b72404dd3d325cb88c9966c99e42deede1bf128c6fac4e9c186303082dca8241d378c5446532cd14ec20a827b3727317f410e784850044c66187c91ca93f61625533bf08a8d245d1fd429a9ab04a9cf340336bc38dd41dbe65ad47126fccd7ada2beb644c2fbcb3da211a6a1eb5443be5ce8107fb6e7aa14b1705467954db99d2bcf16457356afad4d5d62ca1dd5de442619c2ec48d036ffd3c4b21ccb9b419a1f0abcc52a63fefaddc959ec73aa824b257ec48f374857ef5281780e16f7840ec6f0e2df8aa1d0eaaa195b4543108ff96342acb54edf9a8142f1ccc1980fc5e9e7201474c167ca7b991a397d1cfd0d36660c9870e2ef41a38b012db3add1d8bf6ee1c1783a220733c30dd4d36ecda9364af16c90a7b5095ea796fa94699ad2d62b75ae96e780ad4f5e7e504198ceb424ac5152156d2b4c04c773e6c9da117b103f5b11d9f3f22727b5ee32ed617f9787ac7d76454e4011e62bdaf16c5fae3d5d909a876eb8cf7a585f91a97f608b206fbb089bd5d3577ccc0559fe649d4a0a8138b330f098c50f705f23deaf776ae1e7b8ed798efc7c043ff0a3442a7d70e353905ad56160b1740f7aefba054fcbfb72ff80371deed0da2cfff0c9bc704e8c64f7622112353bd41954089ab4ee3a73b43010b9a47ef83b4ef4fb75ef6dfd493161d988e72ce4de66b20b70cce61701a3d44dc6e59b31256bd7dba70489bcca4a8f6426d1adb814cec6ce38e52987124b0a41318de83e40bbee1df2cbdb30e4eb67e5788a22c3161e212ff8aad90ce86acc1d6feb9958e008067962170d382f612c19f77bd0f4972d97a728b78b3db420d572d8133c0a71394228665a02a1504fabb15ab378aaf89e7f92a38faf3e9b1f1da326f71a066c92bc6299d749e2ccf4e8804d0108a16b69edad81b2d61061fe921f38b6f1dd8c71f7284087efd9cc371b77f52161414e01818b3ef5751a632487fb1d62357d6fd9bcc10229d227799d31b6c5f918b90e7d3ea692b510b40de84c07e2d8fae0508589a8702f01a7d89e8347562dfa2da588ac56c693c54c416f4a24c5d0b762e3b22b64283b6728b121ad9113f048992b033531c71aae0b07efc854f45d1905a766503edd4fddae95d93ced20bb2fb829ebd44a6236db6b2a482d149ac769bc44580feef191ba9ff6cf8be092315363d4792340f77e151a6f956ec48ad96a1297232fc55bd68964fc220296ea1335433e344617fcd528abd79a41184102698209a03479260d2a8115c794cc390e77c755ca110da432a5fe0778463a96ba2d55a532ddd4775cc35221a15aa3f82ba8180441602a16a106876079b591bd436172277adb72f79da3b278f3bf0e69d632afd6ce6b664062b4f39635a6cc8c9951958613d73c0a2fff1b35459b7cf87b9d0950afa96857e899e38f908bfdd653a9fe6d962cf0804403a89fd2c9208526812b715da2e56a7807629bb1a2e4ae02c123c62bf3ffee38693a6ffe52e9672a99ee1ffb6febf3cb8a5062c6eaf5919eb46a071ee74a39d033259d8c21b6fbc6ab4823f76380bad8a8bc42cb1d51c62e6378cfab55ca44803adf64fffa959638927fe15ef268ab845d9bb007633324d35176fe2c5239e2d8060c963f7fbaa263c67fa02bcf2c24001a12ece1e404b7d36757d05c447324b16ad55f33923eb567afc5823dda068c03997772f61333b735351a52476ac684184357d60c2a104535ee5a11a70c7f02a6db3ed19596e50584dc9e429231053d8a4481e87fb6f3ce943abcff73c159eee140611ac764d333ea58297b47d8e9ef46c1661baa08811e3795f800ee216ae5f65f66cd26cde782baa3f1052e1fa40f3d9f8100cc6768dec7bbcfa004d285b4feec7623bb0634c1610aea73a9a3df1af47362eee60e41228bcc5af2b374adddff1c7595e8b0e786b3288efb4e5c8cbc21005adeef5c31420fc88f7c05dd1ce5f38b41ce2c53eff2b03d39e6319dcfb78833f275edf483ef538b7b61d377b46fbe433055c45319810c1f0bd8b019c1bddfa010e277c277350a373bd1f49d3bf139cbd96bcef81c18207947e8b10235dc1568959a758dfe46ed79734f995e679bacc41bf117246c12afb7f7fa4621338d2c28f0056661d0f47c4c326953a0d537e3884cfa2eb94caefbe9dfefdc4738b5b1336102746b5dfedc025d6bdb71ee8af6cd21e0d03bc5c480aabd72db61190788a8d75a8c3437beb56a7ac070956007c43036b6a699f3012f5c42e27841ddb5b31a21bbbe38ffb05f6b5a991c11fbc7b4d802f37ae3e494cc8a39f11ea3f5f1e1a7bb475f08350d08df9aec9d34c604c3849c0b80d40a3303328ebb6f04cb544e2efa402016bb198c9e5c34551c909b41d895b95fe38622a4be9399481eb185a3e3e1bd767a4fe02c5443023c30d399669be2dbffc989a5988306e726bfe2bb2c1930d865638e54aaa05aa5db19aeba39b1199dfda9b2d2986378a0a1d2413fa2b95a5a71d1c7cfd82e5722ca724533a73f14d2ea6a19a35bd41d8eadc6c487a1b8e8808c6c6fb45dc06c1dc9e3d33c4e29a65716a8239234f655a5d5a2f607cd4ea42d0ae181fab2dabb647e5b64bfe3c77a6df07239bb9a53ac0df175d3eb4c4519b56c9a67883bec5bb5a4d12fbef51534e91f926be90988e6a272050142881bf3acfbfb011c2ac58a28138988eb504775e215468bf0b1f9e4c80b424404a345846873e9b3d1efd3d3938df5b9ca41c551b64755d81d23771105d83437850ea4c77bc7a00512efffb0460ef6fbb0a11878c96d5e000208ba4f915ec8ecf599c07ad138310b986d27ff0cc443a4d5476ee75d2c55563f92e3878c42aad136ed2c2606918198065e14c54b175642ff83d30f1eae8b52d3efe406073b8b3025d4b7218c95619f23da96a6112be8b8fe527b23b678a984902ea4a81e20ffbfe9a4e4c31be515ee100ba846ee043d3da3cbe940bb5276f330b2aad50286b2e891e7d4cde0cfc066b608ccbdffadc7acb673983f476fb94862721bdc38fcdc86e1f25617a9557c9147ec66f3c1136090f710a9fbc4e8c1c082c7e737668a2c91119328a102164c04405a2bb9545d6c490834d9fb2b0166ebe32e31b64bd46aaa6ce5628010ee470537887e102e17d3fcec5d1098415fac35d29d28f0cfe903e7dc585d60d7d2a36b08e1a2a7edc625ccb07a36cbfba642640fcafce26f109098f30442ae0873e76ee3ddef18dca9d345130f83e585e918a43dc4f1ad0e69c8dbe5e364908699fe6b7e2832e642380f2497c1b69321551e0737a7e17dcdd00da4e4178254891a07fd2e31884a8438ceb9f99abd81c1c598e786748348e7c0457ce05d2643b18c1946cc5f09cc9f74cbe68fd0fba6b74ae864c28b255b6ac6724e4e6f5c18ccb4df6da622de38a61cd019d50a99ae2e51790fc53e410cc9630a685e46b4d706a569bc735d834cb6c2eeeb74d80d95927550089f940638aaca3157964e4d8e68c569ef26d08ae65a1c04299f81194c9fa25a300fc06e2083341816840751bc943d61c95f982751035972ee3824cd3f751e5e931c01c66bb2300a296ff5fe9e3ee4591453e39d8f7064ca5ad9b856f8f55e4c04925aeff5f011e15854b7d6ffad26ef2b933c7537bc0465787dfe5b2efde49900743978c4450b2405be583b88cb5261b6745fa7ed421175e3eb52ffdf80de70469012b8158d2e0904a726c0c313425d9e459a39cf603d0345ffb36c45f23cdfed36b06511082ba5f1ba47f2883b19e90c3e58313687537f71a1c992139175396f9c4acbfc58a5dcb9bdbaceb5944340891a6d84301007a1ae344786702a7d99996e1d3385d269aa7fd248a6ee6553dc07106c5106e67277e7cb2f8e95fe210ecb6142acc3e337a3e51bf699c3a21c33a21d75b43034e3c510262e0216a455fde39046d08edb2fea848260c6d056c2239fee48bb1bc91f79135e49f12aa0a5cf3c438599e863da0f37403c3966e73c64848d106b1d0cc40ecdb66450185e5a5bc2c8bc2c4421bfec42d0db5f3301a14fa2e217e0658b6bd7d57ff423362e0eb77181704216fed3aa68e82d010853684d53237f2a95be60741c132b0c46ad2ce69b62374848392919e9286443f2def1a85e156897a84917503db270da13dd5a2021b420d6ff0795f86389231e1c2d987367a025944f34265fd5537b3b8f7a2c2bc7fe9eb66cf05583820b5a8b38fc43c366f878ead3fa9e4f3a50ceef5d384eb79e9236c8bccc58c0c55627475a49dd8fb4ee3f7a52dfb35078f0b5a4c7151b2bf9e05f827e943e4c2356db0609bc0e12714113928750ca1a5f5d90f65845a7cbc333f58166e5fa761061acd859ef0995f60ccd6bf3056704afb85a89d809416d7344fc30ee5224da92d50821e455bf23ba5af00d309e93ad25669e1bd4515f356ca4a9839395969447cb7e93621a88230b541e00b27bc82e83213e26f7669f6ddfae13741aa69fb9c9d4ea2bb96c9c577ad7d86e044d9ea197e8839241d677f11d978e2ddcb36e1c0e95edf8a6663f1195805b0d19107c78e4b688039efb9edf037a583a217e3e2b06fc143f4fd1d8ca7161386e17aaf49b8335789f7e75dc31f9175e89f2fea08f098242562b77"}, {0x5a, 0x4e00, "f6f7c46d4f104bc9618fe93bd9d0824c2bffb93cd3f7bb6d0d32bf6a380b55a54667648f928536ed806bdc4b308656a7808f749865f0fa49eda8037e5cab21aedb2f85fb67d85ce2413ff042d67bfed5f639b9904f2aa84d20a5"}, {0x1000, 0x4e00, "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"}]}) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) 08:10:56 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xdc0841, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:56 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) 08:10:56 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) 08:10:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) 08:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:57 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) 08:10:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:57 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) 08:10:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) [ 1832.608443][ T19] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1833.128529][ T19] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1833.137664][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.146915][ T19] usb 6-1: Product: syz [ 1833.152130][ T19] usb 6-1: Manufacturer: syz [ 1833.156737][ T19] usb 6-1: SerialNumber: syz [ 1833.200014][ T19] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1833.768427][ T19] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1834.189943][T31215] usb 6-1: USB disconnect, device number 105 08:10:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:59 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) 08:10:59 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957efead3"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:59 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:59 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) 08:10:59 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:59 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101101, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0xca100, 0x0) ioctl$RNDGETENTCNT(r0, 0x10, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e22, 0x8000, @mcast1, 0x3}}}, 0x38) mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:10:59 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) [ 1834.808443][ T19] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1834.825911][ T19] ath9k_htc: Failed to initialize the device 08:10:59 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) 08:10:59 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) [ 1834.851744][T31215] usb 6-1: ath9k_htc: USB layer deinitialized 08:10:59 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 08:10:59 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) 08:10:59 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101101, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0xca100, 0x0) ioctl$RNDGETENTCNT(r0, 0x10, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e22, 0x8000, @mcast1, 0x3}}}, 0x38) mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:59 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:59 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0xc8, 0x4, 0x2, 0xfff}) 08:10:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 08:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:59 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:10:59 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101101, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0xca100, 0x0) ioctl$RNDGETENTCNT(r0, 0x10, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e22, 0x8000, @mcast1, 0x3}}}, 0x38) mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:10:59 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:59 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:10:59 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) syz_io_uring_complete(0x0) 08:10:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 08:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="880000005101"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:59 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101101, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0xca100, 0x0) ioctl$RNDGETENTCNT(r0, 0x10, 0x0) mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:10:59 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) 08:10:59 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) syz_io_uring_complete(0x0) 08:10:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 08:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="880000005101"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:10:59 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101101, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0xca100, 0x0) mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:10:59 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x68202, 0x0) 08:10:59 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) 08:10:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:10:59 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x10, 0x0) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x219, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0xffff) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1407, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 08:10:59 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101101, 0x0) mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:10:59 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) keyctl$get_persistent(0x16, r0, r1) 08:11:00 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r0, r1) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="880000005101"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:11:00 executing program 5: mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:11:00 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051013957ef"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 2: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) mq_timedreceive(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x42000) ioctl$HDIO_GETGEO(r1, 0x1263, &(0x7f0000000340)) 08:11:00 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) keyctl$get_persistent(0x16, r0, 0x0) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:11:00 executing program 5: mq_open(0x0, 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="88000000510139"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) 08:11:00 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) 08:11:00 executing program 2: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) mq_timedreceive(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x42000) ioctl$HDIO_GETGEO(r1, 0x1263, &(0x7f0000000340)) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:11:00 executing program 5: mq_open(0x0, 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:11:00 executing program 4: keyctl$get_persistent(0x16, 0x0, 0x0) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 2: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) mq_timedreceive(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x42000) ioctl$HDIO_GETGEO(r1, 0x1263, &(0x7f0000000340)) 08:11:00 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) 08:11:00 executing program 5: mq_open(0x0, 0x80, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:11:00 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:11:00 executing program 3: add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) 08:11:00 executing program 5: mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x1d, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:11:00 executing program 2: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) mq_timedreceive(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000000)) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x42000) 08:11:00 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 3: add_key$fscrypt_v1(0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:11:00 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) ioctl$HDIO_GETGEO(r1, 0x1260, &(0x7f0000000340)) 08:11:00 executing program 2: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) mq_timedreceive(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000000)) 08:11:00 executing program 5: mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xfffffffffffffff9}) 08:11:00 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) 08:11:00 executing program 2: r0 = syz_io_uring_complete(0x0) mq_timedreceive(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000000)) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="8800000051"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 5: mq_open(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0, 0x0) 08:11:00 executing program 3: add_key$fscrypt_v1(0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 08:11:00 executing program 2: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000000)) 08:11:00 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="880000005101"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 3: add_key$fscrypt_v1(0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, "3584c8c04c7172c7c47d2732914baed00019d5ce33a8e73272351696ea78db4cd775bfad8cf43f41525c574eb8fe86a5c78031d2cb0059b4492ac7dc29f4c23e", 0x3b}, 0x48, 0xfffffffffffffff8) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) 08:11:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/dev/nbd#\x00') ioctl$HDIO_GETGEO(r0, 0x1263, &(0x7f0000000340)) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000000)={0xffff, 0x2, 0x0, [{0x2, 0x7fff, 0x9, 0xff, 0x1, 0x1, 0x20}, {0x8, 0x1, 0x1000, 0xff, 0x0, 0x1, 0x2}]}) 08:11:00 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000000)) 08:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="880000005101"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:00 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:00 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x10000, &(0x7f0000000000)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, 0x0, 0x1}, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1891c2) ioctl$HDIO_GETGEO(r2, 0x1260, &(0x7f0000000340)) 08:11:00 executing program 3: add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) 08:11:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) 08:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="880000005101"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:11:01 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) 08:11:01 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_complete(0x0) 08:11:01 executing program 5: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1263, &(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) 08:11:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) ioctl$RNDGETENTCNT(r2, 0x5204, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000180)) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) 08:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="88000000510139"], 0x88}}, 0x40000) 08:11:01 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) 08:11:01 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, 0x0) 08:11:01 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) 08:11:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) ioctl$RNDGETENTCNT(r2, 0x5204, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000180)) 08:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="88000000510139"], 0x88}}, 0x0) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, 0x0) 08:11:01 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:11:01 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x357d, &(0x7f0000000100)={0x0, 0x2d27, 0x10, 0x0, 0x366}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x2) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, r0, 0x7fff, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 08:11:01 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) 08:11:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) ioctl$RNDGETENTCNT(r2, 0x5204, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000180)) 08:11:01 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x3}}, 0x20) ioctl$RNDGETENTCNT(r0, 0x2, 0x0) 08:11:01 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, 0x0) 08:11:01 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x357d, &(0x7f0000000100)={0x0, 0x2d27, 0x10, 0x0, 0x366}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x2) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, r0, 0x7fff, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 08:11:01 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') syz_io_uring_complete(0x0) 08:11:01 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, 0x0) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) keyctl$unlink(0x9, r1, r0) 08:11:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) ioctl$RNDGETENTCNT(r2, 0x5204, 0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x1, 0x3, 0x5c1cf528, 0x8000008}) 08:11:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x1, 0x3, 0x5c1cf528, 0x8000008}) 08:11:01 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') 08:11:01 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x357d, &(0x7f0000000100)={0x0, 0x2d27, 0x10, 0x0, 0x366}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x2) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, r0, 0x7fff, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) keyctl$unlink(0x9, r1, r0) 08:11:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) ioctl$RNDGETENTCNT(r2, 0x5204, 0x0) syz_io_uring_complete(0x0) 08:11:01 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) keyctl$unlink(0x9, r1, r0) 08:11:01 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x357d, &(0x7f0000000100)={0x0, 0x2d27, 0x10, 0x0, 0x366}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x2) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, r0, 0x7fff, 0x80000}) 08:11:01 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) 08:11:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) ioctl$RNDGETENTCNT(r2, 0x5204, 0x0) 08:11:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) [ 1837.298397][T31466] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1837.306077][ T9821] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1837.908451][T31466] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1837.917677][T31466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.931594][ T9821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1837.940655][ T9821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.954342][ T9821] usb 2-1: Product: syz [ 1837.962309][T31466] usb 3-1: Product: syz [ 1837.966629][T31466] usb 3-1: Manufacturer: syz [ 1837.976764][ T9821] usb 2-1: Manufacturer: syz [ 1837.984192][T31466] usb 3-1: SerialNumber: syz [ 1837.988837][ T9821] usb 2-1: SerialNumber: syz [ 1838.039080][T31466] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1838.055953][ T9821] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1838.708435][ T9821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1838.717904][T31466] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1839.327142][T25259] usb 3-1: USB disconnect, device number 98 [ 1839.336701][T25277] usb 2-1: USB disconnect, device number 106 [ 1839.768430][T31466] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1839.775334][T31466] ath9k_htc: Failed to initialize the device [ 1839.784347][ T9821] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1839.792826][ T9821] ath9k_htc: Failed to initialize the device [ 1839.798983][T25259] usb 3-1: ath9k_htc: USB layer deinitialized [ 1839.806364][T25277] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x1, 0x3, 0x5c1cf528, 0x8000008}) 08:11:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) 08:11:04 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) 08:11:04 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x357d, &(0x7f0000000100)={0x0, 0x2d27, 0x10, 0x0, 0x366}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x2) ioctl$RNDGETENTCNT(r0, 0x5204, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) 08:11:04 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r6, 0x0, 0x0, 0x80000) 08:11:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x1, 0x3, 0x5c1cf528, 0x8000008}) 08:11:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') 08:11:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) 08:11:04 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:11:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 08:11:04 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x357d, &(0x7f0000000100)={0x0, 0x2d27, 0x10, 0x0, 0x366}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x2) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) 08:11:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r6, 0x0, 0x0, 0x80000) [ 1840.308384][T25259] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1840.358420][T25277] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1840.858433][T25259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1840.867618][T25259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.881367][T25259] usb 3-1: Product: syz [ 1840.885536][T25259] usb 3-1: Manufacturer: syz [ 1840.895989][T25259] usb 3-1: SerialNumber: syz [ 1840.903792][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1840.913108][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.923233][T25277] usb 2-1: Product: syz [ 1840.930458][T25277] usb 2-1: Manufacturer: syz [ 1840.935535][T25277] usb 2-1: SerialNumber: syz [ 1840.971045][T25259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1840.990178][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1841.588468][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1841.608499][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1842.203318][T31215] usb 3-1: USB disconnect, device number 99 [ 1842.227187][ T19] usb 2-1: USB disconnect, device number 107 [ 1842.648421][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1842.655503][T25277] ath9k_htc: Failed to initialize the device [ 1842.667388][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1842.674370][T25259] ath9k_htc: Failed to initialize the device [ 1842.686825][ T19] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x1, 0x3, 0x5c1cf528, 0x8000008}) [ 1842.693006][T31215] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) 08:11:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) 08:11:07 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x357d, &(0x7f0000000100)={0x0, 0x2d27, 0x10, 0x0, 0x366}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) 08:11:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) 08:11:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x1, 0x3, 0x5c1cf528, 0x8000008}) 08:11:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) 08:11:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) 08:11:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) 08:11:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) syz_io_uring_complete(0x0) 08:11:07 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) 08:11:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) [ 1843.208403][T31215] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1843.258427][ T19] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1843.728415][T31215] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1843.737522][T31215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.746150][T31215] usb 3-1: Product: syz [ 1843.752195][T31215] usb 3-1: Manufacturer: syz [ 1843.757858][T31215] usb 3-1: SerialNumber: syz [ 1843.779666][ T19] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1843.791002][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.799499][T31215] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1843.810595][ T19] usb 2-1: Product: syz [ 1843.814763][ T19] usb 2-1: Manufacturer: syz [ 1843.822064][ T19] usb 2-1: SerialNumber: syz [ 1843.859091][ T19] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1844.378425][T31215] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1844.428419][ T19] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1845.001888][T32388] usb 3-1: USB disconnect, device number 100 [ 1845.043682][T25277] usb 2-1: USB disconnect, device number 108 [ 1845.448415][ T19] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1845.455578][T31215] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1845.462664][T31215] ath9k_htc: Failed to initialize the device [ 1845.468688][ T19] ath9k_htc: Failed to initialize the device [ 1845.476878][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 1845.476938][T32388] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) 08:11:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x0, r7, 0x9}) 08:11:10 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4000) 08:11:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) 08:11:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd26, 0x40, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) 08:11:10 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r6, 0x0, 0x0, 0x80000) 08:11:10 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x4000) 08:11:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') 08:11:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:11:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) [ 1846.048405][T32388] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1846.048403][T25277] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1846.578448][T32388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1846.587817][T32388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.599115][T32388] usb 3-1: Product: syz [ 1846.603825][T32388] usb 3-1: Manufacturer: syz [ 1846.608933][T32388] usb 3-1: SerialNumber: syz [ 1846.638545][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1846.647772][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.648709][T32388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1846.676678][T25277] usb 2-1: Product: syz [ 1846.682611][T25277] usb 2-1: Manufacturer: syz [ 1846.688244][T25277] usb 2-1: SerialNumber: syz [ 1846.728743][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1847.228537][T32388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1847.378409][ T9821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1847.835023][T25277] usb 3-1: USB disconnect, device number 101 [ 1847.984578][T25259] usb 2-1: USB disconnect, device number 109 [ 1848.248396][T32388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1848.255424][T32388] ath9k_htc: Failed to initialize the device [ 1848.264597][T25277] usb 3-1: ath9k_htc: USB layer deinitialized [ 1848.408425][ T9821] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1848.415589][ T9821] ath9k_htc: Failed to initialize the device [ 1848.427537][T25259] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00'}) 08:11:13 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:13 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x4000) 08:11:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) 08:11:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) 08:11:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00'}) 08:11:13 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$unlink(0x9, r3, r1) 08:11:13 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x4000) 08:11:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000240)) 08:11:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) syz_io_uring_complete(0x0) [ 1848.838418][T32388] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1849.008396][T25259] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1849.358628][T32388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1849.367783][T32388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.376942][T32388] usb 3-1: Product: syz [ 1849.381756][T32388] usb 3-1: Manufacturer: syz [ 1849.387242][T32388] usb 3-1: SerialNumber: syz [ 1849.428851][T32388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1849.588426][T25259] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1849.597614][T25259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.612317][T25259] usb 2-1: Product: syz [ 1849.617584][T25259] usb 2-1: Manufacturer: syz [ 1849.626330][T25259] usb 2-1: SerialNumber: syz [ 1849.668749][T25259] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1849.998439][T32388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1850.308427][T25259] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1850.604320][T25277] usb 3-1: USB disconnect, device number 102 [ 1850.914906][T25364] usb 2-1: USB disconnect, device number 110 [ 1851.048417][T32388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1851.055404][T32388] ath9k_htc: Failed to initialize the device [ 1851.064341][T25277] usb 3-1: ath9k_htc: USB layer deinitialized [ 1851.368406][T25259] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1851.375298][T25259] ath9k_htc: Failed to initialize the device [ 1851.386915][T25364] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r1) 08:11:15 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 08:11:15 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) 08:11:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 08:11:16 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) 08:11:16 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) [ 1851.798389][T32388] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1851.908400][T25364] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1852.318432][T32388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1852.327547][T32388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.339082][T32388] usb 3-1: Product: syz [ 1852.344130][T32388] usb 3-1: Manufacturer: syz [ 1852.350422][T32388] usb 3-1: SerialNumber: syz [ 1852.388633][T32388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1852.468478][T25364] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1852.477735][T25364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.491566][T25364] usb 2-1: Product: syz [ 1852.496034][T25364] usb 2-1: Manufacturer: syz [ 1852.506605][T25364] usb 2-1: SerialNumber: syz [ 1852.549585][T25364] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1852.958405][T32388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1853.188422][T25364] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1853.563995][ T19] usb 3-1: USB disconnect, device number 103 [ 1853.793697][T31466] usb 2-1: USB disconnect, device number 111 [ 1854.009646][T32388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1854.016535][T32388] ath9k_htc: Failed to initialize the device [ 1854.027866][ T19] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:18 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') 08:11:18 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 08:11:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:18 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1854.248400][T25364] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1854.255305][T25364] ath9k_htc: Failed to initialize the device [ 1854.265512][T31466] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:11:18 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) 08:11:18 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw\x00') write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) 08:11:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) 08:11:19 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) [ 1854.628488][ T19] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1854.818414][T31466] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1855.148421][ T19] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1855.157781][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.167187][ T19] usb 3-1: Product: syz [ 1855.173738][ T19] usb 3-1: Manufacturer: syz [ 1855.178885][ T19] usb 3-1: SerialNumber: syz [ 1855.218879][ T19] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1855.398422][T31466] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1855.407522][T31466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.417054][T31466] usb 2-1: Product: syz [ 1855.422348][T31466] usb 2-1: Manufacturer: syz [ 1855.428380][T31466] usb 2-1: SerialNumber: syz [ 1855.469749][T31466] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1855.788413][ T19] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1856.098443][T31466] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1856.393359][T25277] usb 3-1: USB disconnect, device number 104 [ 1856.704595][T32388] usb 2-1: USB disconnect, device number 112 [ 1856.808384][ T19] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1856.815290][ T19] ath9k_htc: Failed to initialize the device [ 1856.827029][T25277] usb 3-1: ath9k_htc: USB layer deinitialized [ 1857.128399][T31466] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1857.135332][T31466] ath9k_htc: Failed to initialize the device [ 1857.147236][T32388] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:21 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$unlink(0x9, r3, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000000)='\x00') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x10, 0x0) 08:11:21 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) 08:11:21 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$unlink(0x9, r3, r1) 08:11:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:21 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r1) 08:11:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:21 executing program 0: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) 08:11:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:21 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:21 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) [ 1857.548402][T25259] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1857.628413][T32388] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1857.638387][T31215] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1857.649477][T25435] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1858.098448][T25259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1858.107618][T25259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.117213][T25259] usb 3-1: Product: syz [ 1858.123415][T25259] usb 3-1: Manufacturer: syz [ 1858.128528][T25259] usb 3-1: SerialNumber: syz [ 1858.149114][T32388] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1858.158239][T32388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.169349][T31215] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1858.178846][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1858.188001][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.189206][T25259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1858.196111][T32388] usb 2-1: Product: syz [ 1858.209061][T31215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.217715][T31215] usb 4-1: Product: syz [ 1858.232073][T25435] usb 6-1: Product: syz [ 1858.237417][T25435] usb 6-1: Manufacturer: syz [ 1858.243693][T32388] usb 2-1: Manufacturer: syz [ 1858.251488][T31215] usb 4-1: Manufacturer: syz [ 1858.256169][T31215] usb 4-1: SerialNumber: syz [ 1858.260833][T32388] usb 2-1: SerialNumber: syz [ 1858.266337][T25435] usb 6-1: SerialNumber: syz [ 1858.309063][T32388] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1858.319045][T31215] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1858.329491][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1858.838430][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1858.898468][T32388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1858.907520][T25435] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1858.917964][T25460] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1859.444682][T19265] usb 3-1: USB disconnect, device number 105 [ 1859.515866][T31466] usb 2-1: USB disconnect, device number 113 [ 1859.525559][T25364] usb 4-1: USB disconnect, device number 97 [ 1859.548598][T31215] usb 6-1: USB disconnect, device number 106 [ 1859.848434][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1859.855375][T25259] ath9k_htc: Failed to initialize the device [ 1859.866971][T19265] usb 3-1: ath9k_htc: USB layer deinitialized [ 1859.928393][T32388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1859.935321][T25460] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1859.942244][T25460] ath9k_htc: Failed to initialize the device [ 1859.959229][T32388] ath9k_htc: Failed to initialize the device [ 1859.965327][T25364] usb 4-1: ath9k_htc: USB layer deinitialized [ 1859.969375][T31215] usb 6-1: ath9k_htc: USB layer deinitialized 08:11:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:24 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) 08:11:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1860.008420][T25435] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1860.015503][T25435] ath9k_htc: Failed to initialize the device [ 1860.029733][T31466] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:24 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) 08:11:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 08:11:24 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) 08:11:24 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) 08:11:24 executing program 4: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) [ 1860.438385][T19265] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1860.468389][T31215] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1860.488428][T25364] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1860.538416][T31466] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1860.958419][T19265] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1860.967584][T19265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.976958][T19265] usb 3-1: Product: syz [ 1860.982830][T19265] usb 3-1: Manufacturer: syz [ 1860.989097][T31215] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1860.998292][T31215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.006553][T19265] usb 3-1: SerialNumber: syz [ 1861.012886][T31215] usb 6-1: Product: syz [ 1861.017978][T31215] usb 6-1: Manufacturer: syz [ 1861.037478][T31215] usb 6-1: SerialNumber: syz [ 1861.048654][T19265] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1861.069752][T25364] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1861.079107][T31215] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1861.079718][T25364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.107173][T25364] usb 4-1: Product: syz [ 1861.113941][T25364] usb 4-1: Manufacturer: syz [ 1861.121252][T25364] usb 4-1: SerialNumber: syz [ 1861.130526][T31466] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1861.140056][T31466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.148086][T31466] usb 2-1: Product: syz [ 1861.157423][T31466] usb 2-1: Manufacturer: syz [ 1861.164414][T25364] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1861.175789][T31466] usb 2-1: SerialNumber: syz [ 1861.228740][T31466] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1861.628416][T19265] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1861.648486][T31215] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1861.808431][T25364] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1861.888468][T31466] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1862.235527][T25259] usb 3-1: USB disconnect, device number 106 [ 1862.260569][ T9821] usb 6-1: USB disconnect, device number 107 [ 1862.425650][T25277] usb 4-1: USB disconnect, device number 98 [ 1862.494373][T25435] usb 2-1: USB disconnect, device number 114 [ 1862.648388][T19265] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1862.655341][T19265] ath9k_htc: Failed to initialize the device [ 1862.667887][T25259] usb 3-1: ath9k_htc: USB layer deinitialized [ 1862.728382][T31215] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1862.735320][T31215] ath9k_htc: Failed to initialize the device [ 1862.744443][ T9821] usb 6-1: ath9k_htc: USB layer deinitialized [ 1862.888402][T25364] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1862.895403][T25364] ath9k_htc: Failed to initialize the device [ 1862.907290][T25277] usb 4-1: ath9k_htc: USB layer deinitialized 08:11:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:27 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 08:11:27 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) 08:11:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00'}) [ 1862.978425][T31466] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1862.985462][T31466] ath9k_htc: Failed to initialize the device [ 1862.999703][T25435] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:27 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 08:11:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:27 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 08:11:27 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) 08:11:27 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) 08:11:27 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) [ 1863.338424][T19265] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1863.351237][T31215] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1863.408395][T25460] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1863.468413][T25435] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1863.528401][T25277] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1863.858420][T19265] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1863.868056][T19265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.879124][T31215] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1863.888189][T31215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.896406][T19265] usb 6-1: Product: syz [ 1863.900619][T19265] usb 6-1: Manufacturer: syz [ 1863.906350][T19265] usb 6-1: SerialNumber: syz [ 1863.911086][T31215] usb 3-1: Product: syz [ 1863.916183][T31215] usb 3-1: Manufacturer: syz [ 1863.921952][T31215] usb 3-1: SerialNumber: syz [ 1863.928442][T25460] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1863.937486][T25460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.947612][T25460] usb 5-1: Product: syz [ 1863.953520][T25460] usb 5-1: Manufacturer: syz [ 1863.959883][T19265] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1863.975194][T25460] usb 5-1: SerialNumber: syz [ 1863.980381][T31215] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1864.008802][T25435] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1864.026974][T25435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.038384][T25460] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1864.051221][T25435] usb 2-1: Product: syz [ 1864.055444][T25435] usb 2-1: Manufacturer: syz [ 1864.062498][T25435] usb 2-1: SerialNumber: syz [ 1864.099867][T25435] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1864.129244][T25277] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1864.138315][T25277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.146531][T25277] usb 4-1: Product: syz [ 1864.151502][T25277] usb 4-1: Manufacturer: syz [ 1864.156126][T25277] usb 4-1: SerialNumber: syz [ 1864.198648][T25277] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1864.558406][T19265] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1864.567458][T31215] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1864.628903][T25460] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1864.668657][T25435] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1864.829448][T25277] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1865.163819][T32388] usb 3-1: USB disconnect, device number 107 [ 1865.187207][T31466] usb 6-1: USB disconnect, device number 108 [ 1865.250949][ T19] usb 5-1: USB disconnect, device number 96 [ 1865.274806][T26190] usb 2-1: USB disconnect, device number 115 [ 1865.443053][T26201] usb 4-1: USB disconnect, device number 99 [ 1865.608418][T31215] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1865.615600][T19265] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1865.622586][T19265] ath9k_htc: Failed to initialize the device [ 1865.636995][T31215] ath9k_htc: Failed to initialize the device [ 1865.645629][T32388] usb 3-1: ath9k_htc: USB layer deinitialized [ 1865.660632][T31466] usb 6-1: ath9k_htc: USB layer deinitialized [ 1865.688391][T25435] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1865.695372][T25435] ath9k_htc: Failed to initialize the device [ 1865.701418][T25460] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1865.708275][T25460] ath9k_htc: Failed to initialize the device [ 1865.730010][ T19] usb 5-1: ath9k_htc: USB layer deinitialized [ 1865.736143][T26190] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1865.848429][T25277] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1865.871165][T25277] ath9k_htc: Failed to initialize the device [ 1865.886437][T26201] usb 4-1: ath9k_htc: USB layer deinitialized 08:11:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00'}) [ 1866.148415][T25364] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1866.218411][T32388] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1866.229221][T31466] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1866.248419][T26190] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1866.256133][ T19] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1866.348366][T26201] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1866.738422][T25364] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.738423][T32388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.749129][T25364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.760146][T32388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.773913][T32388] usb 3-1: Product: syz [ 1866.779151][T32388] usb 3-1: Manufacturer: syz [ 1866.784233][T25364] usb 1-1: Product: syz [ 1866.784411][T32388] usb 3-1: SerialNumber: syz [ 1866.793150][T25364] usb 1-1: Manufacturer: syz [ 1866.793236][ T19] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.803054][T25364] usb 1-1: SerialNumber: syz [ 1866.807250][T26190] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.821472][T26190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.834055][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.840081][T31466] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.852036][T26190] usb 2-1: Product: syz [ 1866.859178][ T19] usb 5-1: Product: syz [ 1866.869163][T25364] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1866.870783][T32388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1866.881339][T31466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.886163][T26190] usb 2-1: Manufacturer: syz [ 1866.899478][T26201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.913751][ T19] usb 5-1: Manufacturer: syz [ 1866.915863][T31466] usb 6-1: Product: syz [ 1866.926830][T26201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.934961][ T19] usb 5-1: SerialNumber: syz [ 1866.937600][T31466] usb 6-1: Manufacturer: syz [ 1866.944412][T26201] usb 4-1: Product: syz [ 1866.949803][T26190] usb 2-1: SerialNumber: syz [ 1866.953433][T31466] usb 6-1: SerialNumber: syz [ 1866.955158][T26201] usb 4-1: Manufacturer: syz [ 1866.965921][T26201] usb 4-1: SerialNumber: syz [ 1866.988994][ T19] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1867.003581][T26190] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1867.020497][T26201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1867.029029][T31466] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1867.538406][T32388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1867.588435][T26190] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1867.597519][ T19] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1867.606587][T26201] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1867.648517][T25364] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1867.688449][T31466] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1868.143589][T25435] usb 3-1: USB disconnect, device number 108 [ 1868.196614][ T9821] usb 2-1: USB disconnect, device number 116 [ 1868.217181][T25277] usb 5-1: USB disconnect, device number 97 [ 1868.228744][T25259] usb 4-1: USB disconnect, device number 100 [ 1868.264732][ T9774] usb 1-1: USB disconnect, device number 101 [ 1868.305364][T25318] usb 6-1: USB disconnect, device number 109 [ 1868.568399][T32388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1868.575518][T32388] ath9k_htc: Failed to initialize the device [ 1868.587821][T25435] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1868.648449][T26201] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1868.655398][ T19] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1868.662523][T26190] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1868.669502][T26201] ath9k_htc: Failed to initialize the device [ 1868.675517][T26190] ath9k_htc: Failed to initialize the device [ 1868.688492][ T19] ath9k_htc: Failed to initialize the device [ 1868.695651][T25277] usb 5-1: ath9k_htc: USB layer deinitialized [ 1868.703524][ T9821] usb 2-1: ath9k_htc: USB layer deinitialized [ 1868.710933][T25259] usb 4-1: ath9k_htc: USB layer deinitialized [ 1868.730029][T31466] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1868.737462][T31466] ath9k_htc: Failed to initialize the device 08:11:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1868.745125][T25364] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive 08:11:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00'}) 08:11:33 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1868.795843][T25364] ath9k_htc: Failed to initialize the device [ 1868.815837][T25318] usb 6-1: ath9k_htc: USB layer deinitialized 08:11:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1868.853595][ T9774] usb 1-1: ath9k_htc: USB layer deinitialized [ 1869.148414][T25435] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1869.161495][ T9821] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1869.288456][ T9774] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1869.328439][T25318] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1869.336149][T25259] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1869.343887][T25277] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1869.668414][T25435] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.677724][T25435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.685838][T25435] usb 3-1: Product: syz [ 1869.691477][T25435] usb 3-1: Manufacturer: syz [ 1869.697462][T25435] usb 3-1: SerialNumber: syz [ 1869.738790][T25435] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1869.758750][ T9821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.770778][ T9821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.784654][ T9821] usb 2-1: Product: syz [ 1869.792072][ T9821] usb 2-1: Manufacturer: syz [ 1869.796681][ T9821] usb 2-1: SerialNumber: syz [ 1869.839880][ T9821] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1869.888413][ T9774] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.897539][ T9774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.908728][T25318] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.918554][T25277] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.927601][T25277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.935612][T25259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.944936][ T9774] usb 1-1: Product: syz [ 1869.949500][T25318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.958038][T25318] usb 6-1: Product: syz [ 1869.963133][T25259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.972433][ T9774] usb 1-1: Manufacturer: syz [ 1869.977042][ T9774] usb 1-1: SerialNumber: syz [ 1869.981761][T25277] usb 5-1: Product: syz [ 1869.986335][T25277] usb 5-1: Manufacturer: syz [ 1869.991005][T25259] usb 4-1: Product: syz [ 1869.995743][T25259] usb 4-1: Manufacturer: syz [ 1870.001240][T25318] usb 6-1: Manufacturer: syz [ 1870.005933][T25318] usb 6-1: SerialNumber: syz [ 1870.011362][T25277] usb 5-1: SerialNumber: syz [ 1870.016512][T25259] usb 4-1: SerialNumber: syz [ 1870.041123][ T9774] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1870.070949][T25277] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1870.081824][T25318] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1870.090684][T25259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1870.308405][T25435] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1870.468444][ T9821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1870.658507][ T9774] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1870.713225][T25259] usb 3-1: USB disconnect, device number 109 [ 1870.719440][T31466] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1870.728920][T25318] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1870.738024][T25277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1871.075162][ T1258] usb 2-1: USB disconnect, device number 117 08:11:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1871.272567][ T19] usb 1-1: USB disconnect, device number 102 [ 1871.339392][T26201] usb 4-1: USB disconnect, device number 101 [ 1871.348133][T25364] usb 5-1: USB disconnect, device number 98 [ 1871.368368][T25435] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1871.369845][T26371] usb 6-1: USB disconnect, device number 110 [ 1871.378772][T25435] ath9k_htc: Failed to initialize the device [ 1871.399610][T25259] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1871.538373][ T9821] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1871.545339][ T9821] ath9k_htc: Failed to initialize the device [ 1871.553294][ T1258] usb 2-1: ath9k_htc: USB layer deinitialized [ 1871.688406][ T9774] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1871.695374][ T9774] ath9k_htc: Failed to initialize the device [ 1871.707475][ T19] usb 1-1: ath9k_htc: USB layer deinitialized 08:11:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1871.768370][T25277] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1871.775319][T31466] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1871.782429][T25318] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1871.789392][T25259] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1871.797182][T25277] ath9k_htc: Failed to initialize the device [ 1871.806843][T25318] ath9k_htc: Failed to initialize the device 08:11:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1871.817027][T31466] ath9k_htc: Failed to initialize the device [ 1871.824933][T25364] usb 5-1: ath9k_htc: USB layer deinitialized [ 1871.834052][T26201] usb 4-1: ath9k_htc: USB layer deinitialized [ 1871.834353][T26371] usb 6-1: ath9k_htc: USB layer deinitialized 08:11:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) [ 1872.008581][ T1258] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1872.258410][ T19] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1872.328480][T25364] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1872.336116][T26371] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1872.338370][T26201] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1872.388439][T25259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.397706][T25259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.409324][T25259] usb 3-1: Product: syz [ 1872.415578][T25259] usb 3-1: Manufacturer: syz [ 1872.420856][T25259] usb 3-1: SerialNumber: syz [ 1872.458795][T25259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1872.578417][ T1258] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.587630][ T1258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.601650][ T1258] usb 2-1: Product: syz [ 1872.605867][ T1258] usb 2-1: Manufacturer: syz [ 1872.616520][ T1258] usb 2-1: SerialNumber: syz [ 1872.668674][ T1258] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1872.778412][ T19] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.787695][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.797747][ T19] usb 1-1: Product: syz [ 1872.803207][ T19] usb 1-1: Manufacturer: syz [ 1872.810030][ T19] usb 1-1: SerialNumber: syz [ 1872.849104][ T19] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1872.868816][T26201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.877918][T26201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.888001][T26201] usb 4-1: Product: syz [ 1872.893368][T26201] usb 4-1: Manufacturer: syz [ 1872.900457][T26201] usb 4-1: SerialNumber: syz [ 1872.920258][T26371] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.929414][T25364] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.939383][T26201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1872.940542][T25364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.955630][T26371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.974685][T26371] usb 6-1: Product: syz [ 1872.980732][T26371] usb 6-1: Manufacturer: syz [ 1872.987313][T25364] usb 5-1: Product: syz [ 1872.991510][T25364] usb 5-1: Manufacturer: syz [ 1872.996774][T25364] usb 5-1: SerialNumber: syz [ 1873.003575][T26371] usb 6-1: SerialNumber: syz [ 1873.068771][T26371] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1873.077447][T25364] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1873.108921][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1873.312152][T26371] usb 3-1: USB disconnect, device number 110 [ 1873.338994][ T1258] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1873.418403][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1873.508423][T26201] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1873.708496][T25364] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1873.717532][T25277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:11:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1873.944574][T25435] usb 2-1: USB disconnect, device number 118 [ 1874.037030][ T9774] usb 1-1: USB disconnect, device number 103 [ 1874.125470][T25318] usb 4-1: USB disconnect, device number 102 [ 1874.168526][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1874.175486][T25259] ath9k_htc: Failed to initialize the device [ 1874.187118][T26371] usb 3-1: ath9k_htc: USB layer deinitialized [ 1874.313587][T31466] usb 6-1: USB disconnect, device number 111 [ 1874.336426][ T9821] usb 5-1: USB disconnect, device number 99 08:11:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1874.408432][ T1258] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1874.416029][ T1258] ath9k_htc: Failed to initialize the device [ 1874.428147][T25435] usb 2-1: ath9k_htc: USB layer deinitialized 08:11:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1874.488430][ T19] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1874.495508][ T19] ath9k_htc: Failed to initialize the device [ 1874.508719][ T9774] usb 1-1: ath9k_htc: USB layer deinitialized 08:11:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1874.559572][T26371] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1874.571748][T26201] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1874.579948][T26201] ath9k_htc: Failed to initialize the device [ 1874.586464][T25318] usb 4-1: ath9k_htc: USB layer deinitialized [ 1874.728388][T25277] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1874.735925][T25364] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1874.742911][T25364] ath9k_htc: Failed to initialize the device [ 1874.758962][T25277] ath9k_htc: Failed to initialize the device [ 1874.765089][ T9821] usb 5-1: ath9k_htc: USB layer deinitialized [ 1874.772880][T31466] usb 6-1: ath9k_htc: USB layer deinitialized 08:11:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) 08:11:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) [ 1874.839862][T25435] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1874.988383][ T9774] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1875.078464][T25318] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1875.098425][T26371] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1875.107536][T26371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.117276][T26371] usb 3-1: Product: syz [ 1875.123800][T26371] usb 3-1: Manufacturer: syz [ 1875.129394][T26371] usb 3-1: SerialNumber: syz [ 1875.178736][T26371] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1875.288421][ T9821] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1875.296143][T31466] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1875.378621][T25435] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1875.387753][T25435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.397180][T25435] usb 2-1: Product: syz [ 1875.402220][T25435] usb 2-1: Manufacturer: syz [ 1875.410407][T25435] usb 2-1: SerialNumber: syz [ 1875.449016][T25435] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1875.528612][ T9774] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1875.537782][ T9774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.547581][ T9774] usb 1-1: Product: syz [ 1875.553052][ T9774] usb 1-1: Manufacturer: syz [ 1875.558955][ T9774] usb 1-1: SerialNumber: syz [ 1875.599230][ T9774] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1875.620298][T25318] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1875.629401][T25318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.637391][T25318] usb 4-1: Product: syz [ 1875.646314][T25318] usb 4-1: Manufacturer: syz [ 1875.654372][T25318] usb 4-1: SerialNumber: syz [ 1875.708826][T25318] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1875.798439][T26371] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1875.868838][ T9821] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1875.877998][ T9821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.886046][T31466] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1875.895495][T31466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.904782][ T9821] usb 5-1: Product: syz [ 1875.909401][T31466] usb 6-1: Product: syz [ 1875.914359][T31466] usb 6-1: Manufacturer: syz [ 1875.919001][ T9821] usb 5-1: Manufacturer: syz [ 1875.923606][ T9821] usb 5-1: SerialNumber: syz [ 1875.928363][T31466] usb 6-1: SerialNumber: syz [ 1875.979142][ T9821] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1875.988482][T31466] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1876.008900][T25277] usb 3-1: USB disconnect, device number 111 [ 1876.019881][T25435] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1876.268485][ T9774] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1876.358510][T25318] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1876.424016][ T9821] usb 2-1: USB disconnect, device number 119 08:11:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1876.638546][T25364] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1876.648070][T31466] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1876.808633][T26371] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1876.815548][T26371] ath9k_htc: Failed to initialize the device [ 1876.821608][T25277] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1876.874285][ T1258] usb 1-1: USB disconnect, device number 104 [ 1876.965471][T26201] usb 4-1: USB disconnect, device number 103 [ 1877.048449][T25435] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1877.055342][T25435] ath9k_htc: Failed to initialize the device [ 1877.067627][ T9821] usb 2-1: ath9k_htc: USB layer deinitialized [ 1877.198514][T25277] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1877.252103][ T19] usb 6-1: USB disconnect, device number 112 [ 1877.259128][T26538] usb 5-1: USB disconnect, device number 100 [ 1877.298408][ T9774] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1877.305366][ T9774] ath9k_htc: Failed to initialize the device [ 1877.311451][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized 08:11:41 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1877.428442][ T9821] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1877.458398][T25318] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1877.465416][T25318] ath9k_htc: Failed to initialize the device 08:11:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1877.483836][T26201] usb 4-1: ath9k_htc: USB layer deinitialized [ 1877.688409][T31466] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1877.695403][T25364] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1877.702613][T31466] ath9k_htc: Failed to initialize the device [ 1877.717876][T25364] ath9k_htc: Failed to initialize the device [ 1877.726842][T26538] usb 5-1: ath9k_htc: USB layer deinitialized [ 1877.740313][ T19] usb 6-1: ath9k_htc: USB layer deinitialized [ 1877.748525][T25277] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1877.758437][T25277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.766524][T25277] usb 3-1: Product: syz 08:11:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) [ 1877.788737][T25277] usb 3-1: Manufacturer: syz [ 1877.793393][T25277] usb 3-1: SerialNumber: syz [ 1877.805906][ T1258] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1877.870221][T25277] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1877.918492][T26201] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1878.018460][ T9821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1878.027608][ T9821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.037328][ T9821] usb 2-1: Product: syz [ 1878.044044][ T9821] usb 2-1: Manufacturer: syz [ 1878.049641][ T9821] usb 2-1: SerialNumber: syz [ 1878.101543][ T9821] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1878.218395][ T19] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1878.239383][T26538] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1878.418460][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1878.427571][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.437452][ T1258] usb 1-1: Product: syz [ 1878.438858][T26201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1878.444023][ T1258] usb 1-1: Manufacturer: syz [ 1878.456910][ T1258] usb 1-1: SerialNumber: syz [ 1878.464555][T26201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.484913][T26201] usb 4-1: Product: syz [ 1878.491035][T26201] usb 4-1: Manufacturer: syz [ 1878.497416][T26201] usb 4-1: SerialNumber: syz [ 1878.508809][T25277] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1878.519054][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1878.539535][T26201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1878.711787][T25318] usb 3-1: USB disconnect, device number 112 [ 1878.738804][ T19] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1878.747925][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.757830][ T19] usb 6-1: Product: syz [ 1878.764776][ T19] usb 6-1: Manufacturer: syz [ 1878.770760][ T19] usb 6-1: SerialNumber: syz [ 1878.771592][ T9821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1878.818749][ T19] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1878.828802][T26538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1878.838192][T26538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.846854][T26538] usb 5-1: Product: syz [ 1878.852186][T26538] usb 5-1: Manufacturer: syz [ 1878.858167][T26538] usb 5-1: SerialNumber: syz [ 1878.918779][T26538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1878.975323][T25435] usb 2-1: USB disconnect, device number 120 [ 1879.118407][T26201] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:11:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1879.168426][ T1258] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1879.388393][ T19] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1879.601832][T26538] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1879.611687][T25277] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1879.619326][T25277] ath9k_htc: Failed to initialize the device [ 1879.625371][T25318] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1879.724865][T31215] usb 4-1: USB disconnect, device number 104 [ 1879.774490][T26190] usb 1-1: USB disconnect, device number 105 [ 1879.848452][ T9821] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1879.855512][ T9821] ath9k_htc: Failed to initialize the device [ 1879.866863][T25435] usb 2-1: ath9k_htc: USB layer deinitialized [ 1880.002021][T25318] usb 6-1: USB disconnect, device number 113 [ 1880.168418][T26201] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1880.175388][T26201] ath9k_htc: Failed to initialize the device [ 1880.181459][T31215] usb 4-1: ath9k_htc: USB layer deinitialized [ 1880.216687][ T9821] usb 5-1: USB disconnect, device number 101 08:11:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1880.258375][ T1258] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1880.265502][ T1258] ath9k_htc: Failed to initialize the device [ 1880.290814][T26190] usb 1-1: ath9k_htc: USB layer deinitialized [ 1880.408394][ T19] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1880.415427][ T19] ath9k_htc: Failed to initialize the device [ 1880.421515][T25318] usb 6-1: ath9k_htc: USB layer deinitialized [ 1880.648455][T26538] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1880.655359][T26538] ath9k_htc: Failed to initialize the device [ 1880.667153][ T9821] usb 5-1: ath9k_htc: USB layer deinitialized 08:11:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) 08:11:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:45 executing program 1: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) [ 1880.698455][T26190] usb 1-1: new high-speed USB device number 106 using dummy_hcd 08:11:45 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:45 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:45 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:45 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:45 executing program 1: syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1881.028406][ T19] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1881.068439][T25277] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1881.218394][ T9821] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1881.218402][T26190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.218427][T26190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.244948][T26190] usb 1-1: Product: syz [ 1881.249179][T26190] usb 1-1: Manufacturer: syz [ 1881.254533][T26190] usb 1-1: SerialNumber: syz [ 1881.298648][T26190] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1881.568430][ T19] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.577527][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.586228][ T19] usb 6-1: Product: syz [ 1881.593087][ T19] usb 6-1: Manufacturer: syz [ 1881.599338][ T19] usb 6-1: SerialNumber: syz [ 1881.629938][T25277] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.638634][ T19] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1881.647309][T25277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.659271][T25277] usb 4-1: Product: syz [ 1881.663680][T25277] usb 4-1: Manufacturer: syz [ 1881.671877][T25277] usb 4-1: SerialNumber: syz [ 1881.718765][T25277] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1881.779132][ T9821] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.788218][ T9821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.802798][ T9821] usb 5-1: Product: syz [ 1881.807007][ T9821] usb 5-1: Manufacturer: syz [ 1881.816928][ T9821] usb 5-1: SerialNumber: syz [ 1881.868391][T26190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1881.868699][ T9821] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1882.218454][ T19] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1882.328413][T25277] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1882.482981][T31215] usb 1-1: USB disconnect, device number 106 [ 1882.504718][ T9821] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1882.621326][T26201] usb 6-1: USB disconnect, device number 114 [ 1882.888369][T26190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1882.895296][T26190] ath9k_htc: Failed to initialize the device [ 1882.907497][T31215] usb 1-1: ath9k_htc: USB layer deinitialized [ 1882.933243][ T1258] usb 4-1: USB disconnect, device number 105 08:11:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:47 executing program 1: syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1883.116128][T32388] usb 5-1: USB disconnect, device number 102 [ 1883.288456][ T19] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1883.295477][ T19] ath9k_htc: Failed to initialize the device [ 1883.307266][T26201] usb 6-1: ath9k_htc: USB layer deinitialized [ 1883.368435][T31215] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1883.381030][T25277] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1883.387919][T25277] ath9k_htc: Failed to initialize the device [ 1883.394000][ T1258] usb 4-1: ath9k_htc: USB layer deinitialized [ 1883.528407][ T9821] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1883.535561][ T9821] ath9k_htc: Failed to initialize the device [ 1883.547833][T32388] usb 5-1: ath9k_htc: USB layer deinitialized 08:11:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:11:48 executing program 1: syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:48 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1883.888446][T31215] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1883.897800][T31215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.908913][T31215] usb 1-1: Product: syz [ 1883.913724][T31215] usb 1-1: Manufacturer: syz [ 1883.918847][T31215] usb 1-1: SerialNumber: syz [ 1883.928417][T26201] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1883.948381][ T1258] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1883.961533][T31215] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1884.058383][T32388] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1884.448451][T26201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1884.457750][T26201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.467828][T26201] usb 4-1: Product: syz [ 1884.473891][T26201] usb 4-1: Manufacturer: syz [ 1884.479136][T26201] usb 4-1: SerialNumber: syz [ 1884.519148][T26201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1884.528493][T31215] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1884.548476][ T1258] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1884.557786][ T1258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.567562][ T1258] usb 6-1: Product: syz [ 1884.573026][ T1258] usb 6-1: Manufacturer: syz [ 1884.577797][ T1258] usb 6-1: SerialNumber: syz [ 1884.580078][T32388] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1884.592098][T32388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.612602][T32388] usb 5-1: Product: syz [ 1884.616816][T32388] usb 5-1: Manufacturer: syz [ 1884.623188][T32388] usb 5-1: SerialNumber: syz [ 1884.629244][ T1258] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1884.669098][T32388] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1885.108398][T26201] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1885.133810][ T19] usb 1-1: USB disconnect, device number 107 [ 1885.238416][T32388] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1885.278400][ T1258] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1885.481990][T25277] usb 6-1: USB disconnect, device number 115 08:11:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:50 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1885.608453][T31215] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1885.615444][T31215] ath9k_htc: Failed to initialize the device [ 1885.621676][ T19] usb 1-1: ath9k_htc: USB layer deinitialized [ 1885.712686][ T9821] usb 4-1: USB disconnect, device number 106 [ 1885.855829][T26538] usb 5-1: USB disconnect, device number 103 [ 1886.028380][ T19] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1886.168391][T26201] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1886.176434][T26201] ath9k_htc: Failed to initialize the device [ 1886.185598][ T9821] usb 4-1: ath9k_htc: USB layer deinitialized [ 1886.248389][T32388] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1886.255504][T32388] ath9k_htc: Failed to initialize the device [ 1886.274464][T26538] usb 5-1: ath9k_htc: USB layer deinitialized 08:11:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:11:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:11:50 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1886.328427][ T1258] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1886.335341][ T1258] ath9k_htc: Failed to initialize the device [ 1886.347147][T25277] usb 6-1: ath9k_htc: USB layer deinitialized 08:11:51 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:51 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:51 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:51 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:51 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1886.548694][ T19] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1886.557811][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.569257][ T19] usb 1-1: Product: syz [ 1886.574973][ T19] usb 1-1: Manufacturer: syz [ 1886.580390][ T19] usb 1-1: SerialNumber: syz [ 1886.619249][ T19] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1886.688416][T25318] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1886.818433][T25277] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1886.826241][T26538] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1886.834078][ T9821] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1887.188493][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1887.288467][T25318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1887.297845][T25318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.306233][T25318] usb 3-1: Product: syz [ 1887.325610][T25318] usb 3-1: Manufacturer: syz [ 1887.330253][T25318] usb 3-1: SerialNumber: syz [ 1887.398792][T25318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1887.448490][ T9821] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1887.457616][T26538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1887.467150][T25277] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1887.476239][ T9821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.495964][T25277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.504025][T26538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.512551][ T9821] usb 4-1: Product: syz [ 1887.516843][ T9821] usb 4-1: Manufacturer: syz [ 1887.521483][T25277] usb 6-1: Product: syz [ 1887.526869][T25277] usb 6-1: Manufacturer: syz [ 1887.532590][T26538] usb 5-1: Product: syz [ 1887.537090][T26538] usb 5-1: Manufacturer: syz [ 1887.542369][ T9821] usb 4-1: SerialNumber: syz [ 1887.547309][T26538] usb 5-1: SerialNumber: syz [ 1887.552018][T25277] usb 6-1: SerialNumber: syz [ 1887.599294][ T9821] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1887.608761][T26538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1887.619385][T25277] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1887.793225][T32388] usb 1-1: USB disconnect, device number 108 [ 1888.038490][T25318] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1888.248407][ T19] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1888.256120][ T19] ath9k_htc: Failed to initialize the device [ 1888.265609][T32388] usb 1-1: ath9k_htc: USB layer deinitialized [ 1888.269013][T26538] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1888.281192][ T1258] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:11:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:52 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1888.290688][T25277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1888.445177][T26201] usb 3-1: USB disconnect, device number 113 [ 1888.483453][T31215] usb 6-1: USB disconnect, device number 116 [ 1888.507563][T26190] usb 5-1: USB disconnect, device number 104 [ 1888.718405][T32388] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1888.873092][T25435] usb 4-1: USB disconnect, device number 107 08:11:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:11:53 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1889.048406][T25318] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1889.057584][T25318] ath9k_htc: Failed to initialize the device [ 1889.072170][T26201] usb 3-1: ath9k_htc: USB layer deinitialized [ 1889.238398][T32388] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1889.247620][T32388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.261430][T32388] usb 1-1: Product: syz [ 1889.265760][T32388] usb 1-1: Manufacturer: syz [ 1889.276006][T32388] usb 1-1: SerialNumber: syz [ 1889.318892][T32388] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1889.368405][T26538] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1889.375447][T25277] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1889.382419][ T1258] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1889.389351][ T1258] ath9k_htc: Failed to initialize the device [ 1889.395426][T25277] ath9k_htc: Failed to initialize the device [ 1889.395431][T31215] usb 6-1: ath9k_htc: USB layer deinitialized [ 1889.401817][T26538] ath9k_htc: Failed to initialize the device 08:11:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:53 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1889.417145][T26190] usb 5-1: ath9k_htc: USB layer deinitialized [ 1889.423271][T25435] usb 4-1: ath9k_htc: USB layer deinitialized 08:11:54 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:54 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1889.499213][T26201] usb 3-1: new high-speed USB device number 114 using dummy_hcd 08:11:54 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:54 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1889.778699][T26190] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1889.786664][T31215] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1889.878396][T25435] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1889.889647][T32388] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1890.018491][T26201] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1890.027590][T26201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.039043][T26201] usb 3-1: Product: syz [ 1890.043257][T26201] usb 3-1: Manufacturer: syz [ 1890.047887][T26201] usb 3-1: SerialNumber: syz [ 1890.091452][T26201] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1890.298538][T26190] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1890.307798][T26190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.318993][T31215] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1890.328220][T26190] usb 5-1: Product: syz [ 1890.332465][T31215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.340607][T26190] usb 5-1: Manufacturer: syz [ 1890.345318][T26190] usb 5-1: SerialNumber: syz [ 1890.349961][T31215] usb 6-1: Product: syz [ 1890.354714][T31215] usb 6-1: Manufacturer: syz [ 1890.359777][T31215] usb 6-1: SerialNumber: syz [ 1890.400900][T25435] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1890.410267][T26190] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1890.418998][T31215] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1890.429939][T25435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.437939][T25435] usb 4-1: Product: syz [ 1890.442990][T25435] usb 4-1: Manufacturer: syz [ 1890.447608][T25435] usb 4-1: SerialNumber: syz [ 1890.488870][T25435] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1890.510860][T26210] usb 1-1: USB disconnect, device number 109 [ 1890.658414][T26201] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1890.968429][T32388] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1890.975507][T32388] ath9k_htc: Failed to initialize the device [ 1890.983394][T26210] usb 1-1: ath9k_htc: USB layer deinitialized 08:11:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:55 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1891.019815][T26190] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1891.028881][T31215] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1891.063075][T26538] usb 3-1: USB disconnect, device number 114 [ 1891.068508][T25435] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1891.230173][T25460] usb 6-1: USB disconnect, device number 117 [ 1891.250440][T25277] usb 5-1: USB disconnect, device number 105 [ 1891.448400][T26210] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1891.480768][T19265] usb 4-1: USB disconnect, device number 108 [ 1891.688463][T26201] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1891.695461][T26201] ath9k_htc: Failed to initialize the device [ 1891.701718][T26538] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:11:56 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:11:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:56 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1891.978387][T26210] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1891.987587][T26210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.999040][T26210] usb 1-1: Product: syz [ 1892.003233][T26210] usb 1-1: Manufacturer: syz [ 1892.008645][T26210] usb 1-1: SerialNumber: syz 08:11:56 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1892.048664][T26210] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1892.088364][T25435] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1892.095246][T25435] ath9k_htc: Failed to initialize the device [ 1892.102631][T26190] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1892.111876][T31215] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1892.124778][T31215] ath9k_htc: Failed to initialize the device [ 1892.132280][T26190] ath9k_htc: Failed to initialize the device [ 1892.141511][T19265] usb 4-1: ath9k_htc: USB layer deinitialized 08:11:56 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1892.150230][T25277] usb 5-1: ath9k_htc: USB layer deinitialized [ 1892.158712][T25460] usb 6-1: ath9k_htc: USB layer deinitialized [ 1892.180520][T26538] usb 3-1: new high-speed USB device number 115 using dummy_hcd 08:11:56 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:56 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1892.498406][T19265] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1892.518747][T25460] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1892.528392][T25277] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1892.638375][T26210] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1892.768421][T26538] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1892.777561][T26538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.787435][T26538] usb 3-1: Product: syz [ 1892.792557][T26538] usb 3-1: Manufacturer: syz [ 1892.799003][T26538] usb 3-1: SerialNumber: syz [ 1892.848685][T26538] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1893.018469][T19265] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1893.027646][T19265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.038499][T25460] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1893.048194][T25460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.057610][T19265] usb 4-1: Product: syz [ 1893.062387][T19265] usb 4-1: Manufacturer: syz [ 1893.067818][T19265] usb 4-1: SerialNumber: syz [ 1893.074594][T25460] usb 6-1: Product: syz [ 1893.081411][T25460] usb 6-1: Manufacturer: syz [ 1893.087632][T25460] usb 6-1: SerialNumber: syz [ 1893.102124][T25277] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1893.118854][T25277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.121527][T19265] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1893.126865][T25277] usb 5-1: Product: syz [ 1893.139049][T25460] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1893.167792][T25277] usb 5-1: Manufacturer: syz [ 1893.176921][T25277] usb 5-1: SerialNumber: syz [ 1893.241031][T25277] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1893.253843][T25318] usb 1-1: USB disconnect, device number 110 [ 1893.448430][T26538] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1893.688373][T26210] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1893.695391][T26210] ath9k_htc: Failed to initialize the device [ 1893.701983][T25318] usb 1-1: ath9k_htc: USB layer deinitialized [ 1893.718409][T25460] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1893.727468][T26190] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:11:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:58 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 1893.853812][ T9821] usb 3-1: USB disconnect, device number 115 [ 1893.878398][T25277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1893.924686][T25364] usb 6-1: USB disconnect, device number 118 [ 1893.934820][T19265] usb 4-1: USB disconnect, device number 109 [ 1894.094306][ T1258] usb 5-1: USB disconnect, device number 106 [ 1894.168362][T25318] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1894.488514][T26538] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1894.495435][T26538] ath9k_htc: Failed to initialize the device [ 1894.510495][ T9821] usb 3-1: ath9k_htc: USB layer deinitialized 08:11:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:59 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) 08:11:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:11:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:11:59 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 1894.710462][T25318] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1894.735553][T25318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:11:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1894.757476][T25318] usb 1-1: Product: syz [ 1894.765135][T25318] usb 1-1: Manufacturer: syz [ 1894.775084][T25318] usb 1-1: SerialNumber: syz [ 1894.810075][T26190] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1894.817080][T25460] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1894.824116][T26190] ath9k_htc: Failed to initialize the device [ 1894.829147][T25318] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1894.832510][T25460] ath9k_htc: Failed to initialize the device [ 1894.851256][T25364] usb 6-1: ath9k_htc: USB layer deinitialized 08:11:59 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) 08:11:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1894.872075][T19265] usb 4-1: ath9k_htc: USB layer deinitialized [ 1894.888875][T25277] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1894.895895][T25277] ath9k_htc: Failed to initialize the device [ 1894.917124][ T1258] usb 5-1: ath9k_htc: USB layer deinitialized [ 1895.118376][ T9821] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1895.238749][T25364] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1895.288782][ T1258] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1895.498433][T25318] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1895.648462][ T9821] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1895.657567][ T9821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.672364][ T9821] usb 3-1: Product: syz [ 1895.677078][ T9821] usb 3-1: Manufacturer: syz [ 1895.688166][ T9821] usb 3-1: SerialNumber: syz [ 1895.728768][ T9821] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1895.788709][T25364] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1895.797749][T25364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.812802][T25364] usb 6-1: Product: syz [ 1895.817070][T25364] usb 6-1: Manufacturer: syz [ 1895.828644][ T1258] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1895.837736][ T1258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.845875][T25364] usb 6-1: SerialNumber: syz [ 1895.851333][ T1258] usb 5-1: Product: syz [ 1895.857071][ T1258] usb 5-1: Manufacturer: syz [ 1895.876276][ T1258] usb 5-1: SerialNumber: syz [ 1895.899152][T25364] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1895.920069][ T1258] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1896.110247][T25460] usb 1-1: USB disconnect, device number 111 [ 1896.368384][ T9821] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1896.518440][T25364] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1896.528164][ T1258] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1896.578579][T25318] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1896.585653][T25318] ath9k_htc: Failed to initialize the device [ 1896.597458][T25460] usb 1-1: ath9k_htc: USB layer deinitialized [ 1896.720649][T25277] usb 6-1: USB disconnect, device number 119 [ 1896.753432][T19265] usb 5-1: USB disconnect, device number 107 [ 1896.775820][T25259] usb 3-1: USB disconnect, device number 116 [ 1897.008374][T25460] usb 1-1: new high-speed USB device number 112 using dummy_hcd 08:12:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:01 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) 08:12:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:01 executing program 1: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) 08:12:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:02 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1897.463937][ T9821] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1897.472267][ T9821] ath9k_htc: Failed to initialize the device [ 1897.478294][T25259] usb 3-1: ath9k_htc: USB layer deinitialized [ 1897.528387][T25364] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1897.537997][T25364] ath9k_htc: Failed to initialize the device [ 1897.538434][T25460] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1897.555245][T25277] usb 6-1: ath9k_htc: USB layer deinitialized [ 1897.566384][T25460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.577386][T25460] usb 1-1: Product: syz [ 1897.583205][T25460] usb 1-1: Manufacturer: syz [ 1897.589293][T25460] usb 1-1: SerialNumber: syz [ 1897.618386][ T1258] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1897.625287][ T1258] ath9k_htc: Failed to initialize the device [ 1897.628678][T25460] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1897.654478][T19265] usb 5-1: ath9k_htc: USB layer deinitialized [ 1897.798393][T31466] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1897.858383][T25259] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1897.928412][T25277] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1898.008388][T19265] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1898.238402][T25460] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1898.338482][T31466] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1898.347536][T31466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.361438][T31466] usb 2-1: Product: syz [ 1898.365601][T31466] usb 2-1: Manufacturer: syz [ 1898.376225][T31466] usb 2-1: SerialNumber: syz [ 1898.408580][T25259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1898.417729][T25259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.430370][T31466] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1898.443345][T25259] usb 3-1: Product: syz [ 1898.447539][T25259] usb 3-1: Manufacturer: syz [ 1898.456933][T25259] usb 3-1: SerialNumber: syz [ 1898.489173][T25277] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1898.498527][T25277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.507468][T25277] usb 6-1: Product: syz [ 1898.515101][T25259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1898.526723][T25277] usb 6-1: Manufacturer: syz [ 1898.529975][T19265] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1898.533468][T25277] usb 6-1: SerialNumber: syz [ 1898.550439][T19265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.559570][T19265] usb 5-1: Product: syz [ 1898.563851][T19265] usb 5-1: Manufacturer: syz [ 1898.569936][T19265] usb 5-1: SerialNumber: syz [ 1898.589050][T25277] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1898.620482][T19265] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1898.845935][ T1258] usb 1-1: USB disconnect, device number 112 [ 1899.088842][T31466] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.168464][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.188391][T19265] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.238510][T25277] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.288439][T25460] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1899.295465][T25460] ath9k_htc: Failed to initialize the device [ 1899.304788][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:03 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1899.452074][T26210] usb 6-1: USB disconnect, device number 120 [ 1899.511839][T26190] usb 2-1: USB disconnect, device number 121 [ 1899.573970][ T9821] usb 3-1: USB disconnect, device number 117 [ 1899.798367][ T1258] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1899.816980][T25364] usb 5-1: USB disconnect, device number 108 [ 1900.168404][T31466] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1900.175387][T31466] ath9k_htc: Failed to initialize the device [ 1900.187292][T26190] usb 2-1: ath9k_htc: USB layer deinitialized [ 1900.248388][T19265] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1900.248390][T25277] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1900.255263][T19265] ath9k_htc: Failed to initialize the device [ 1900.269879][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1900.276727][T25259] ath9k_htc: Failed to initialize the device [ 1900.282761][T25364] usb 5-1: ath9k_htc: USB layer deinitialized [ 1900.290238][ T9821] usb 3-1: ath9k_htc: USB layer deinitialized 08:12:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:04 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1900.297622][T25277] ath9k_htc: Failed to initialize the device [ 1900.307909][T26210] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:04 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1900.393313][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1900.403713][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.419194][ T1258] usb 1-1: Product: syz [ 1900.423437][ T1258] usb 1-1: Manufacturer: syz [ 1900.428088][ T1258] usb 1-1: SerialNumber: syz 08:12:05 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:05 executing program 3: syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:05 executing program 3: syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1900.468647][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:05 executing program 3: syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1900.738378][T26190] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1900.759208][T26210] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1900.778409][ T9821] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1900.828445][T25364] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1901.158430][ T1258] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1901.258762][T26190] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1901.267883][T26190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.279361][T26210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1901.288643][T26190] usb 2-1: Product: syz [ 1901.293093][T26190] usb 2-1: Manufacturer: syz [ 1901.297693][T26190] usb 2-1: SerialNumber: syz [ 1901.302413][T26210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.310556][T26210] usb 6-1: Product: syz [ 1901.316588][T26210] usb 6-1: Manufacturer: syz [ 1901.326232][T26210] usb 6-1: SerialNumber: syz [ 1901.360996][ T9821] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1901.368677][T26190] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1901.373618][ T9821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.379104][T26210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1901.420281][T25364] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1901.429446][ T9821] usb 3-1: Product: syz [ 1901.433663][ T9821] usb 3-1: Manufacturer: syz [ 1901.438232][ T9821] usb 3-1: SerialNumber: syz [ 1901.444574][T25364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.454953][T25364] usb 5-1: Product: syz [ 1901.461949][T25364] usb 5-1: Manufacturer: syz [ 1901.467963][T25364] usb 5-1: SerialNumber: syz [ 1901.501801][ T9821] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1901.519551][T25364] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1901.765014][T19265] usb 1-1: USB disconnect, device number 113 [ 1901.968398][T26190] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1901.978051][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1902.148440][ T9821] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1902.168439][ T1258] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1902.175706][T25364] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1902.181458][T31215] usb 6-1: USB disconnect, device number 121 08:12:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:06 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1902.193800][ T1258] ath9k_htc: Failed to initialize the device [ 1902.210329][T19265] usb 1-1: ath9k_htc: USB layer deinitialized [ 1902.236509][T25460] usb 2-1: USB disconnect, device number 122 [ 1902.552942][T25259] usb 3-1: USB disconnect, device number 118 [ 1902.581501][T25277] usb 5-1: USB disconnect, device number 109 [ 1902.668357][T19265] usb 1-1: new high-speed USB device number 114 using dummy_hcd 08:12:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:07 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1903.048397][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1903.055331][T26190] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1903.062502][T26210] ath9k_htc: Failed to initialize the device [ 1903.128440][T26190] ath9k_htc: Failed to initialize the device [ 1903.136497][T31215] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:07 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1903.195963][T25460] usb 2-1: ath9k_htc: USB layer deinitialized [ 1903.209921][T25364] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1903.230108][ T9821] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1903.238295][ T9821] ath9k_htc: Failed to initialize the device [ 1903.253092][T25259] usb 3-1: ath9k_htc: USB layer deinitialized [ 1903.258698][T19265] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1903.263119][T25364] ath9k_htc: Failed to initialize the device [ 1903.276963][T25277] usb 5-1: ath9k_htc: USB layer deinitialized [ 1903.277121][T19265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:12:07 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:07 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1903.314945][T19265] usb 1-1: Product: syz [ 1903.320915][T19265] usb 1-1: Manufacturer: syz [ 1903.326901][T19265] usb 1-1: SerialNumber: syz 08:12:07 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:07 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1903.378839][T19265] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1903.538397][T31215] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1903.588416][T25460] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1903.638372][T25259] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1903.678411][T25277] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1903.948387][T19265] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1904.058399][T31215] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1904.058464][T31215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.058483][T31215] usb 6-1: Product: syz [ 1904.058496][T31215] usb 6-1: Manufacturer: syz [ 1904.090057][T31215] usb 6-1: SerialNumber: syz [ 1904.128819][T25460] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1904.138046][T25460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.146336][T31215] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1904.167802][T25460] usb 2-1: Product: syz [ 1904.174884][T25460] usb 2-1: Manufacturer: syz [ 1904.179546][T25460] usb 2-1: SerialNumber: syz [ 1904.208750][T25259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1904.218129][T25259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.219035][T25460] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1904.247251][T25259] usb 3-1: Product: syz [ 1904.254517][T25259] usb 3-1: Manufacturer: syz [ 1904.259672][T25277] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1904.269160][T25259] usb 3-1: SerialNumber: syz [ 1904.274032][T25277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.282667][T25277] usb 5-1: Product: syz [ 1904.287470][T25277] usb 5-1: Manufacturer: syz [ 1904.306845][T25277] usb 5-1: SerialNumber: syz [ 1904.332278][T25259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1904.359052][T25277] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1904.557003][T26190] usb 1-1: USB disconnect, device number 114 [ 1904.748399][T31215] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1904.798455][T25460] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1904.959334][ T9821] usb 6-1: USB disconnect, device number 122 [ 1904.968385][T19265] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1904.976638][T19265] ath9k_htc: Failed to initialize the device [ 1904.981773][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1904.991486][T26190] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:09 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1905.029787][T25277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1905.042178][T25364] usb 2-1: USB disconnect, device number 123 [ 1905.380056][T26210] usb 3-1: USB disconnect, device number 119 [ 1905.442356][T25435] usb 5-1: USB disconnect, device number 110 [ 1905.448518][T26190] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1905.768393][T31215] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1905.775621][T31215] ath9k_htc: Failed to initialize the device [ 1905.787729][ T9821] usb 6-1: ath9k_htc: USB layer deinitialized [ 1905.848381][T25460] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1905.855360][T25460] ath9k_htc: Failed to initialize the device [ 1905.861720][T25364] usb 2-1: ath9k_htc: USB layer deinitialized 08:12:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:10 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:10 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1905.978526][T26190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1905.987762][T26190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.003977][T26190] usb 1-1: Product: syz [ 1906.008392][T26190] usb 1-1: Manufacturer: syz [ 1906.013208][T26190] usb 1-1: SerialNumber: syz [ 1906.013257][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1906.040975][T25259] ath9k_htc: Failed to initialize the device [ 1906.059261][T26190] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1906.067387][T26210] usb 3-1: ath9k_htc: USB layer deinitialized 08:12:10 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1906.088418][T25277] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1906.098055][T25277] ath9k_htc: Failed to initialize the device [ 1906.106737][T25435] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:10 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:10 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) 08:12:10 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 1906.378401][ T9821] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1906.428749][T25364] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1906.428804][T26210] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1906.468442][T25435] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1906.648402][T26190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1906.938381][ T9821] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1906.947559][ T9821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.948752][T26210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1906.955587][ T9821] usb 6-1: Product: syz [ 1906.969058][ T9821] usb 6-1: Manufacturer: syz [ 1906.973730][ T9821] usb 6-1: SerialNumber: syz [ 1906.984952][T26210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.988410][T25364] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1906.998642][T25435] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1907.012458][T25364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.017288][T26210] usb 3-1: Product: syz [ 1907.022435][ T9821] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1907.027453][T26210] usb 3-1: Manufacturer: syz [ 1907.038602][T25435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.044666][T25364] usb 2-1: Product: syz [ 1907.052019][T26210] usb 3-1: SerialNumber: syz [ 1907.059572][T25364] usb 2-1: Manufacturer: syz [ 1907.060381][T25435] usb 5-1: Product: syz [ 1907.064962][T25364] usb 2-1: SerialNumber: syz [ 1907.069603][T25435] usb 5-1: Manufacturer: syz [ 1907.078614][T25435] usb 5-1: SerialNumber: syz [ 1907.119010][T25364] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1907.119010][T26210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1907.130695][T25435] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1907.259399][ T1258] usb 1-1: USB disconnect, device number 115 [ 1907.678374][T26201] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1907.694556][T26190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1907.701745][T26190] ath9k_htc: Failed to initialize the device [ 1907.707757][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized [ 1907.714888][ T9821] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:12 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 1907.738821][T25435] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1907.758484][T25364] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1907.928164][T25259] usb 6-1: USB disconnect, device number 123 [ 1907.974659][T25318] usb 2-1: USB disconnect, device number 124 [ 1908.085000][T25277] usb 3-1: USB disconnect, device number 120 [ 1908.160265][T26210] usb 5-1: USB disconnect, device number 111 [ 1908.228374][ T1258] usb 1-1: new high-speed USB device number 116 using dummy_hcd 08:12:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:13 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) 08:12:13 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:13 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 1908.728353][T26201] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1908.746472][T26201] ath9k_htc: Failed to initialize the device [ 1908.757122][T25277] usb 3-1: ath9k_htc: USB layer deinitialized 08:12:13 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 1908.778814][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1908.788007][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.796168][ T1258] usb 1-1: Product: syz [ 1908.801792][ T1258] usb 1-1: Manufacturer: syz [ 1908.806558][ T1258] usb 1-1: SerialNumber: syz [ 1908.808743][T25435] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1908.811453][T25364] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1908.819827][T25435] ath9k_htc: Failed to initialize the device [ 1908.825084][ T9821] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1908.840013][ T9821] ath9k_htc: Failed to initialize the device [ 1908.847279][T25364] ath9k_htc: Failed to initialize the device [ 1908.855843][T26210] usb 5-1: ath9k_htc: USB layer deinitialized [ 1908.856122][T25259] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:13 executing program 3: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 1908.875486][T25318] usb 2-1: ath9k_htc: USB layer deinitialized [ 1908.882231][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1909.138343][T25277] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1909.228378][T26210] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1909.248391][T25318] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1909.268488][ T9774] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1909.276247][T25259] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1909.538463][ T1258] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1909.699462][T25277] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.708590][T25277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.716705][T25277] usb 3-1: Product: syz [ 1909.724125][T25277] usb 3-1: Manufacturer: syz [ 1909.729242][T25277] usb 3-1: SerialNumber: syz [ 1909.748397][T26210] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.757655][T26210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.766168][T26210] usb 5-1: Product: syz [ 1909.773322][T26210] usb 5-1: Manufacturer: syz [ 1909.778658][T26210] usb 5-1: SerialNumber: syz [ 1909.781832][T25277] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1909.812496][T25318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.827786][T25318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.830692][T26210] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1909.840397][T25318] usb 2-1: Product: syz [ 1909.852741][T25318] usb 2-1: Manufacturer: syz [ 1909.868621][T25318] usb 2-1: SerialNumber: syz [ 1909.880605][ T9774] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.891147][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.903131][ T9774] usb 4-1: Product: syz [ 1909.908979][T25318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1909.917804][ T9774] usb 4-1: Manufacturer: syz [ 1909.926384][ T9774] usb 4-1: SerialNumber: syz [ 1909.932231][T25259] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.945215][T25259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.946830][T25435] usb 1-1: USB disconnect, device number 116 [ 1909.962697][T25259] usb 6-1: Product: syz [ 1909.977742][T25259] usb 6-1: Manufacturer: syz [ 1909.982536][T25259] usb 6-1: SerialNumber: syz [ 1909.991770][ T9774] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1910.048666][T25259] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1910.418378][T26210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1910.460336][T25277] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1910.568457][ T1258] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1910.575460][ T1258] ath9k_htc: Failed to initialize the device [ 1910.586933][T25435] usb 1-1: ath9k_htc: USB layer deinitialized [ 1910.668467][ T9774] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1910.678228][T25318] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1910.738537][T25259] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1910.833990][T26201] usb 5-1: USB disconnect, device number 112 [ 1910.864487][ T9821] usb 3-1: USB disconnect, device number 121 [ 1910.909960][T26190] usb 2-1: USB disconnect, device number 125 [ 1910.942253][T25460] usb 6-1: USB disconnect, device number 124 [ 1910.958354][T25435] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1911.099870][T25364] usb 4-1: USB disconnect, device number 110 08:12:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:15 executing program 2: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:16 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1911.450590][T26210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1911.457586][T26210] ath9k_htc: Failed to initialize the device [ 1911.471796][T26201] usb 5-1: ath9k_htc: USB layer deinitialized [ 1911.483076][T25435] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1911.497933][T25435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.506461][T25435] usb 1-1: Product: syz [ 1911.513378][T25435] usb 1-1: Manufacturer: syz [ 1911.518039][T25435] usb 1-1: SerialNumber: syz [ 1911.528396][T25277] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1911.538622][T25277] ath9k_htc: Failed to initialize the device [ 1911.554854][ T9821] usb 3-1: ath9k_htc: USB layer deinitialized [ 1911.559734][T25435] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1911.698370][ T9774] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1911.705344][ T9774] ath9k_htc: Failed to initialize the device [ 1911.711514][T25364] usb 4-1: ath9k_htc: USB layer deinitialized [ 1911.768432][T25259] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1911.775612][T25318] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1911.782741][T25318] ath9k_htc: Failed to initialize the device [ 1911.790269][T25259] ath9k_htc: Failed to initialize the device [ 1911.797706][T25460] usb 6-1: ath9k_htc: USB layer deinitialized [ 1911.804874][T26190] usb 2-1: ath9k_htc: USB layer deinitialized [ 1911.838636][T26201] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1911.949298][ T9821] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1912.078362][T25364] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1912.138398][T25435] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1912.168404][T25460] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1912.176300][T26190] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1912.358739][T26201] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1912.367920][T26201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.380398][T26201] usb 5-1: Product: syz [ 1912.385983][T26201] usb 5-1: Manufacturer: syz [ 1912.390690][T26201] usb 5-1: SerialNumber: syz [ 1912.428692][T26201] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1912.508402][ T9821] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1912.517900][ T9821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.527595][ T9821] usb 3-1: Product: syz [ 1912.532960][ T9821] usb 3-1: Manufacturer: syz [ 1912.538275][ T9821] usb 3-1: SerialNumber: syz [ 1912.553054][T31466] usb 1-1: USB disconnect, device number 117 [ 1912.578760][ T9821] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1912.688507][T25364] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1912.697709][T25364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.707387][T25364] usb 4-1: Product: syz [ 1912.709220][T26190] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1912.713339][T25364] usb 4-1: Manufacturer: syz [ 1912.722219][T25460] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1912.726866][T25364] usb 4-1: SerialNumber: syz [ 1912.745725][T26190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.756569][T25460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.766167][T26190] usb 2-1: Product: syz [ 1912.774771][T25460] usb 6-1: Product: syz [ 1912.780435][T26190] usb 2-1: Manufacturer: syz [ 1912.786403][T25460] usb 6-1: Manufacturer: syz [ 1912.789024][T25364] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1912.792709][T25460] usb 6-1: SerialNumber: syz [ 1912.804199][T26190] usb 2-1: SerialNumber: syz [ 1912.850499][T26190] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1912.860488][T25460] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1913.008386][T26201] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1913.208427][T25435] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1913.215685][T25435] ath9k_htc: Failed to initialize the device [ 1913.230305][ T9821] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1913.242769][T31466] usb 1-1: ath9k_htc: USB layer deinitialized [ 1913.426585][T26210] usb 5-1: USB disconnect, device number 113 [ 1913.433186][T26190] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1913.442251][T25460] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1913.458681][T25364] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1913.628484][T31466] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1913.640990][T31215] usb 6-1: USB disconnect, device number 125 [ 1913.664539][T25318] usb 3-1: USB disconnect, device number 122 08:12:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1913.899913][T25259] usb 4-1: USB disconnect, device number 111 08:12:18 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1914.088459][T26201] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1914.097169][T26201] ath9k_htc: Failed to initialize the device [ 1914.098184][ T9774] usb 2-1: USB disconnect, device number 126 [ 1914.116899][T26210] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:18 executing program 2: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1914.210240][T31466] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1914.219619][T31466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.231802][T31466] usb 1-1: Product: syz [ 1914.237984][T31466] usb 1-1: Manufacturer: syz [ 1914.244650][T31466] usb 1-1: SerialNumber: syz [ 1914.289050][T31466] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1914.328876][ T9821] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1914.335822][ T9821] ath9k_htc: Failed to initialize the device [ 1914.347318][T25318] usb 3-1: ath9k_htc: USB layer deinitialized 08:12:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1914.469960][T26210] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1914.488383][T25364] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1914.488409][T25460] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1914.497568][T25364] ath9k_htc: Failed to initialize the device [ 1914.502703][T26190] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1914.502722][T26190] ath9k_htc: Failed to initialize the device [ 1914.514879][T25460] ath9k_htc: Failed to initialize the device [ 1914.516471][ T9774] usb 2-1: ath9k_htc: USB layer deinitialized [ 1914.531286][T31215] usb 6-1: ath9k_htc: USB layer deinitialized [ 1914.537712][T25259] usb 4-1: ath9k_htc: USB layer deinitialized 08:12:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1914.728382][T25318] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1914.898350][T31215] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1914.909577][T31466] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1914.918575][T25259] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1914.988380][T26210] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1914.997509][T26210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.005562][T26210] usb 5-1: Product: syz [ 1915.009861][T26210] usb 5-1: Manufacturer: syz [ 1915.014776][T26210] usb 5-1: SerialNumber: syz [ 1915.021625][ T9774] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1915.058863][T26210] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1915.288460][T25318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1915.298980][T25318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.306974][T25318] usb 3-1: Product: syz [ 1915.312537][T25318] usb 3-1: Manufacturer: syz [ 1915.320109][T25318] usb 3-1: SerialNumber: syz [ 1915.330469][T26201] usb 1-1: USB disconnect, device number 118 [ 1915.369535][T25318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1915.418393][T31215] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1915.427677][T31215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.436421][T31215] usb 6-1: Product: syz [ 1915.442743][T31215] usb 6-1: Manufacturer: syz [ 1915.448216][T31215] usb 6-1: SerialNumber: syz [ 1915.478842][T25259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1915.488176][T25259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.489295][T31215] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1915.504639][T25259] usb 4-1: Product: syz [ 1915.515048][T25259] usb 4-1: Manufacturer: syz [ 1915.522085][T25259] usb 4-1: SerialNumber: syz [ 1915.568717][T25259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1915.609048][ T9774] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1915.618798][ T9774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.626837][ T9774] usb 2-1: Product: syz [ 1915.628496][T26210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1915.639140][ T9774] usb 2-1: Manufacturer: syz [ 1915.645038][ T9774] usb 2-1: SerialNumber: syz [ 1915.698663][ T9774] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1915.938415][T31466] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1915.945529][T31466] ath9k_htc: Failed to initialize the device [ 1915.952679][T26201] usb 1-1: ath9k_htc: USB layer deinitialized [ 1916.038414][T25318] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1916.066360][T25277] usb 5-1: USB disconnect, device number 114 [ 1916.080948][T31215] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1916.208445][T25259] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1916.283732][ T9821] usb 6-1: USB disconnect, device number 126 [ 1916.308363][T26201] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1916.338591][ T9774] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1916.442041][T25460] usb 3-1: USB disconnect, device number 123 08:12:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1916.627544][T19265] usb 4-1: USB disconnect, device number 112 [ 1916.648404][T26210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1916.655354][T26210] ath9k_htc: Failed to initialize the device [ 1916.667605][T25277] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:21 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1916.828384][T26201] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1916.837554][T26201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.849888][T26201] usb 1-1: Product: syz [ 1916.856867][T26201] usb 1-1: Manufacturer: syz [ 1916.862620][T26201] usb 1-1: SerialNumber: syz [ 1916.909034][T26201] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:21 executing program 2: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1916.957274][T25435] usb 2-1: USB disconnect, device number 127 [ 1917.018371][T25277] usb 5-1: new high-speed USB device number 115 using dummy_hcd 08:12:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1917.128352][T31215] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1917.135407][T31215] ath9k_htc: Failed to initialize the device [ 1917.138332][T25318] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1917.148385][ T9821] usb 6-1: ath9k_htc: USB layer deinitialized [ 1917.159481][T25318] ath9k_htc: Failed to initialize the device [ 1917.174790][T25460] usb 3-1: ath9k_htc: USB layer deinitialized [ 1917.288376][T25259] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1917.295315][T25259] ath9k_htc: Failed to initialize the device [ 1917.305058][T19265] usb 4-1: ath9k_htc: USB layer deinitialized [ 1917.368389][ T9774] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1917.375394][ T9774] ath9k_htc: Failed to initialize the device [ 1917.386693][T25435] usb 2-1: ath9k_htc: USB layer deinitialized 08:12:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1917.478439][T26201] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1917.518371][ T9821] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1917.538445][T25460] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1917.568774][T25277] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1917.577869][T25277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.585950][T25277] usb 5-1: Product: syz [ 1917.592211][T25277] usb 5-1: Manufacturer: syz [ 1917.597625][T25277] usb 5-1: SerialNumber: syz [ 1917.638702][T25277] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1917.659226][T19265] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1917.838408][T25435] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1917.882290][T25364] usb 1-1: USB disconnect, device number 119 [ 1918.058407][T25460] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1918.067562][T25460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.077016][T25460] usb 3-1: Product: syz [ 1918.083008][T25460] usb 3-1: Manufacturer: syz [ 1918.088706][T25460] usb 3-1: SerialNumber: syz [ 1918.119941][ T9821] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1918.128732][T25460] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1918.129402][ T9821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.159659][ T9821] usb 6-1: Product: syz [ 1918.163882][ T9821] usb 6-1: Manufacturer: syz [ 1918.174650][ T9821] usb 6-1: SerialNumber: syz [ 1918.180088][T19265] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1918.190626][T19265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.200886][T19265] usb 4-1: Product: syz [ 1918.206040][T19265] usb 4-1: Manufacturer: syz [ 1918.213626][T19265] usb 4-1: SerialNumber: syz [ 1918.229263][ T9821] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1918.248873][T25277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.260616][T19265] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1918.358408][T25435] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1918.367607][T25435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.381392][T25435] usb 2-1: Product: syz [ 1918.386388][T25435] usb 2-1: Manufacturer: syz [ 1918.398732][T25435] usb 2-1: SerialNumber: syz [ 1918.438681][T25435] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1918.488398][T26201] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1918.495431][T26201] ath9k_htc: Failed to initialize the device [ 1918.506802][T25364] usb 1-1: ath9k_htc: USB layer deinitialized [ 1918.708443][T25460] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.838381][T19265] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.868382][T25364] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1918.878241][ T9774] usb 5-1: USB disconnect, device number 115 [ 1918.898410][ T9821] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1919.018438][T25435] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1919.101889][T25318] usb 6-1: USB disconnect, device number 127 [ 1919.117345][T31215] usb 3-1: USB disconnect, device number 124 [ 1919.251372][T26210] usb 4-1: USB disconnect, device number 113 [ 1919.288476][T25277] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1919.295374][T25277] ath9k_htc: Failed to initialize the device [ 1919.301447][ T9774] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:23 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1919.448416][T25364] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1919.458837][T25364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.466936][T25364] usb 1-1: Product: syz [ 1919.480783][T25364] usb 1-1: Manufacturer: syz [ 1919.485495][T25364] usb 1-1: SerialNumber: syz [ 1919.538678][T25364] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:24 executing program 5: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:24 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1919.647162][ T1258] usb 2-1: USB disconnect, device number 2 08:12:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) [ 1919.768360][T25460] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1919.776685][T25460] ath9k_htc: Failed to initialize the device [ 1919.788474][ T9774] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1919.796422][T31215] usb 3-1: ath9k_htc: USB layer deinitialized [ 1919.848392][T19265] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1919.855460][T19265] ath9k_htc: Failed to initialize the device [ 1919.864685][T26210] usb 4-1: ath9k_htc: USB layer deinitialized [ 1919.928380][ T9821] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1919.935275][ T9821] ath9k_htc: Failed to initialize the device [ 1919.947110][T25318] usb 6-1: ath9k_htc: USB layer deinitialized [ 1920.088497][T25435] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1920.095836][T25435] ath9k_htc: Failed to initialize the device [ 1920.108075][ T1258] usb 2-1: ath9k_htc: USB layer deinitialized 08:12:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1920.158361][T31215] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1920.188784][T25364] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1920.218395][T26210] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1920.308433][T25318] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1920.348454][ T9774] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1920.357612][ T9774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.372208][ T9774] usb 5-1: Product: syz [ 1920.376458][ T9774] usb 5-1: Manufacturer: syz [ 1920.386900][ T9774] usb 5-1: SerialNumber: syz [ 1920.438732][ T9774] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1920.568430][ T1258] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1920.600326][T25277] usb 1-1: USB disconnect, device number 120 [ 1920.688385][T31215] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1920.698009][T31215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.708275][T31215] usb 3-1: Product: syz [ 1920.714468][T31215] usb 3-1: Manufacturer: syz [ 1920.722609][T31215] usb 3-1: SerialNumber: syz [ 1920.738406][T26210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1920.747565][T26210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.761060][T26210] usb 4-1: Product: syz [ 1920.766340][T26210] usb 4-1: Manufacturer: syz [ 1920.772975][T31215] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1920.781542][T26210] usb 4-1: SerialNumber: syz [ 1920.819121][T26210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1920.878402][T25318] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1920.887561][T25318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.903792][T25318] usb 6-1: Product: syz [ 1920.908022][T25318] usb 6-1: Manufacturer: syz [ 1920.918493][T25318] usb 6-1: SerialNumber: syz [ 1920.968730][T25318] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1921.108680][ T9774] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1921.158389][ T1258] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1921.167550][ T1258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.178790][ T1258] usb 2-1: Product: syz [ 1921.183785][ T1258] usb 2-1: Manufacturer: syz [ 1921.189076][ T1258] usb 2-1: SerialNumber: syz [ 1921.218467][T25364] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1921.225420][T25364] ath9k_htc: Failed to initialize the device [ 1921.231627][T25277] usb 1-1: ath9k_htc: USB layer deinitialized [ 1921.239896][ T1258] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1921.329874][ T9821] usb 5-1: USB disconnect, device number 116 [ 1921.342584][T31215] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1921.388460][T26210] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1921.598377][T31466] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1921.618468][T25277] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1921.746311][T25318] usb 3-1: USB disconnect, device number 125 08:12:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1921.792177][T25259] usb 4-1: USB disconnect, device number 114 [ 1921.804078][T26538] usb 6-1: USB disconnect, device number 2 [ 1921.898372][ T1258] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1922.168425][ T9774] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1922.175390][T25277] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1922.188082][ T9774] ath9k_htc: Failed to initialize the device [ 1922.202876][T25277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.211092][ T9821] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:26 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1922.226584][T25277] usb 1-1: Product: syz [ 1922.233716][T25277] usb 1-1: Manufacturer: syz [ 1922.242239][T25277] usb 1-1: SerialNumber: syz 08:12:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:26 executing program 5: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1922.278742][T25277] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1922.409376][T26210] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1922.416266][T26210] ath9k_htc: Failed to initialize the device [ 1922.422316][T31215] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1922.430964][T31215] ath9k_htc: Failed to initialize the device [ 1922.437539][T25318] usb 3-1: ath9k_htc: USB layer deinitialized [ 1922.443794][T25259] usb 4-1: ath9k_htc: USB layer deinitialized [ 1922.513774][T26364] usb 2-1: USB disconnect, device number 3 [ 1922.578377][ T9821] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1922.658409][T31466] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1922.665528][T31466] ath9k_htc: Failed to initialize the device [ 1922.676848][T26538] usb 6-1: ath9k_htc: USB layer deinitialized [ 1922.808367][T25259] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1922.816086][T25318] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1922.898384][T25277] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1922.968363][ T1258] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1922.975322][ T1258] ath9k_htc: Failed to initialize the device [ 1922.989496][T26364] usb 2-1: ath9k_htc: USB layer deinitialized [ 1923.048762][T26538] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1923.138515][ T9821] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1923.147587][ T9821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.159309][ T9821] usb 5-1: Product: syz [ 1923.166315][ T9821] usb 5-1: Manufacturer: syz [ 1923.171733][ T9821] usb 5-1: SerialNumber: syz [ 1923.228758][ T9821] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1923.304377][T19265] usb 1-1: USB disconnect, device number 121 [ 1923.378449][T25318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1923.387512][T25318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.395571][T25259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1923.405930][T25259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.415064][T25318] usb 3-1: Product: syz [ 1923.419288][T25259] usb 4-1: Product: syz [ 1923.423656][T25259] usb 4-1: Manufacturer: syz [ 1923.429693][T25318] usb 3-1: Manufacturer: syz [ 1923.434302][T25318] usb 3-1: SerialNumber: syz [ 1923.439463][T25259] usb 4-1: SerialNumber: syz [ 1923.468415][T26364] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1923.489222][T25318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1923.503038][T25259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1923.608460][T26538] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1923.617697][T26538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.628262][T26538] usb 6-1: Product: syz [ 1923.633663][T26538] usb 6-1: Manufacturer: syz [ 1923.638517][T26538] usb 6-1: SerialNumber: syz [ 1923.688805][T26538] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1923.848372][ T9821] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1923.928551][T25277] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1923.935856][T25277] ath9k_htc: Failed to initialize the device [ 1923.942043][T19265] usb 1-1: ath9k_htc: USB layer deinitialized [ 1924.048485][T26364] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1924.057604][T26364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.067238][T26364] usb 2-1: Product: syz [ 1924.074841][T26364] usb 2-1: Manufacturer: syz [ 1924.080717][T26364] usb 2-1: SerialNumber: syz [ 1924.128828][T26364] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1924.158475][T25318] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1924.167503][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1924.267534][T31215] usb 5-1: USB disconnect, device number 117 08:12:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1924.339441][T26538] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1924.368999][T19265] usb 4-1: USB disconnect, device number 115 [ 1924.541035][T25277] usb 6-1: USB disconnect, device number 3 [ 1924.571553][T25435] usb 3-1: USB disconnect, device number 126 08:12:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1924.758367][T26364] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1924.898421][ T9821] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1924.905628][ T9821] ath9k_htc: Failed to initialize the device [ 1924.920018][T31215] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:29 executing program 5: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:29 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1925.208405][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1925.215399][T25318] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1925.222445][T25259] ath9k_htc: Failed to initialize the device [ 1925.228575][T25318] ath9k_htc: Failed to initialize the device [ 1925.235929][T19265] usb 4-1: ath9k_htc: USB layer deinitialized [ 1925.236533][T25435] usb 3-1: ath9k_htc: USB layer deinitialized [ 1925.278348][T31215] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1925.368449][T26538] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1925.373382][T26210] usb 2-1: USB disconnect, device number 4 [ 1925.377630][T26538] ath9k_htc: Failed to initialize the device [ 1925.398870][T25277] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1925.598389][T25435] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1925.606203][T19265] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1925.758399][T25460] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1925.778371][T26364] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1925.785321][T25277] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1925.792881][T26364] ath9k_htc: Failed to initialize the device [ 1925.798415][T31215] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 08:12:30 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1925.808185][T31215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.816564][T26210] usb 2-1: ath9k_htc: USB layer deinitialized [ 1925.823352][T31215] usb 5-1: Product: syz [ 1925.831549][T31215] usb 5-1: Manufacturer: syz [ 1925.837929][T31215] usb 5-1: SerialNumber: syz [ 1925.889005][T31215] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1926.128389][T25435] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.137646][T25435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.148441][T19265] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.157747][T19265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.167070][T25435] usb 3-1: Product: syz [ 1926.171451][T25435] usb 3-1: Manufacturer: syz [ 1926.177196][T25435] usb 3-1: SerialNumber: syz [ 1926.182407][T19265] usb 4-1: Product: syz [ 1926.187743][T19265] usb 4-1: Manufacturer: syz [ 1926.192516][T19265] usb 4-1: SerialNumber: syz [ 1926.238671][T19265] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1926.247537][T25435] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1926.269217][T26210] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1926.308428][T25460] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.317753][T25460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.326559][T25460] usb 1-1: Product: syz [ 1926.333750][T25460] usb 1-1: Manufacturer: syz [ 1926.340896][T25460] usb 1-1: SerialNumber: syz [ 1926.388387][T25277] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.389284][T25460] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1926.401197][T25277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.431044][T25277] usb 6-1: Product: syz [ 1926.435287][T25277] usb 6-1: Manufacturer: syz [ 1926.447599][T25277] usb 6-1: SerialNumber: syz [ 1926.471243][T31215] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1926.490842][T25277] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1926.683685][T26190] usb 5-1: USB disconnect, device number 118 [ 1926.808430][T26210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.817943][T26210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.828950][T19265] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1926.838066][T25435] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1926.852662][T26210] usb 2-1: Product: syz [ 1926.858051][T26210] usb 2-1: Manufacturer: syz [ 1926.863348][T26210] usb 2-1: SerialNumber: syz [ 1926.909114][T26210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1926.968433][T25460] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1927.033309][T26201] usb 4-1: USB disconnect, device number 116 08:12:31 executing program 4: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1927.168386][T25277] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1927.233529][T32388] usb 3-1: USB disconnect, device number 127 [ 1927.372747][T26364] usb 6-1: USB disconnect, device number 4 [ 1927.478371][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1927.528396][T31215] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1927.536839][T31215] ath9k_htc: Failed to initialize the device [ 1927.550496][T26190] usb 5-1: ath9k_htc: USB layer deinitialized [ 1927.583206][T26211] usb 1-1: USB disconnect, device number 122 08:12:32 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:32 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1927.895530][ T19] usb 2-1: USB disconnect, device number 5 [ 1927.917469][T26190] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1927.932143][T25435] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1927.939062][T19265] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1927.951578][T25435] ath9k_htc: Failed to initialize the device [ 1927.958003][T19265] ath9k_htc: Failed to initialize the device [ 1927.977908][T32388] usb 3-1: ath9k_htc: USB layer deinitialized [ 1927.994548][T26201] usb 4-1: ath9k_htc: USB layer deinitialized [ 1928.008355][T25460] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1928.015323][T25460] ath9k_htc: Failed to initialize the device [ 1928.022680][T26211] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1928.248355][T25277] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1928.255323][T25277] ath9k_htc: Failed to initialize the device [ 1928.268534][T26364] usb 6-1: ath9k_htc: USB layer deinitialized [ 1928.328401][T32388] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1928.348366][T26201] usb 4-1: new high-speed USB device number 117 using dummy_hcd 08:12:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1928.448666][T26190] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1928.457766][T26190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.471560][T26190] usb 5-1: Product: syz [ 1928.475708][T26190] usb 5-1: Manufacturer: syz [ 1928.486276][T26211] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1928.494031][T26190] usb 5-1: SerialNumber: syz [ 1928.540258][T26190] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1928.568380][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1928.575306][T26210] ath9k_htc: Failed to initialize the device [ 1928.582638][ T19] usb 2-1: ath9k_htc: USB layer deinitialized [ 1928.678334][T26364] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1928.868412][T26201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1928.877503][T32388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1928.886956][T26201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.904966][T32388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.916131][T26201] usb 4-1: Product: syz [ 1928.923123][T32388] usb 3-1: Product: syz [ 1928.927313][T32388] usb 3-1: Manufacturer: syz [ 1928.937243][T26201] usb 4-1: Manufacturer: syz [ 1928.942200][T26201] usb 4-1: SerialNumber: syz [ 1928.949154][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1928.956670][T32388] usb 3-1: SerialNumber: syz [ 1928.999481][T32388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.009346][T26201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.018933][T26211] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1929.028035][T26211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.046600][T26211] usb 1-1: Product: syz [ 1929.054245][T26211] usb 1-1: Manufacturer: syz [ 1929.060784][T26211] usb 1-1: SerialNumber: syz [ 1929.098609][T26211] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.111594][T26190] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1929.238362][T26364] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1929.247519][T26364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.255588][T26364] usb 6-1: Product: syz [ 1929.261453][T26364] usb 6-1: Manufacturer: syz [ 1929.267663][T26364] usb 6-1: SerialNumber: syz [ 1929.323549][T25259] usb 5-1: USB disconnect, device number 119 [ 1929.330076][T26364] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.468404][ T19] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1929.468432][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.468450][ T19] usb 2-1: Product: syz [ 1929.468463][ T19] usb 2-1: Manufacturer: syz [ 1929.468478][ T19] usb 2-1: SerialNumber: syz [ 1929.539263][ T19] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.618399][T19265] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1929.639610][T26201] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1929.698441][T26211] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1929.820882][T25460] usb 4-1: USB disconnect, device number 117 [ 1929.948376][T26364] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1930.042977][T32388] usb 3-1: USB disconnect, device number 2 [ 1930.108400][ T19] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1930.151590][T26538] usb 6-1: USB disconnect, device number 5 [ 1930.168544][T26190] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1930.175532][T26190] ath9k_htc: Failed to initialize the device [ 1930.184567][T25259] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1930.303930][T26210] usb 1-1: USB disconnect, device number 123 08:12:35 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1930.558443][T25259] usb 5-1: new high-speed USB device number 120 using dummy_hcd 08:12:35 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1930.648423][T19265] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1930.655375][T19265] ath9k_htc: Failed to initialize the device [ 1930.664799][T25460] usb 4-1: ath9k_htc: USB layer deinitialized [ 1930.728425][T26211] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1930.735395][T26211] ath9k_htc: Failed to initialize the device [ 1930.741429][T26201] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1930.750184][T26201] ath9k_htc: Failed to initialize the device [ 1930.756305][T32388] usb 3-1: ath9k_htc: USB layer deinitialized [ 1930.765043][T26210] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1930.779228][T25318] usb 2-1: USB disconnect, device number 6 [ 1930.968391][T26364] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1930.975298][T26364] ath9k_htc: Failed to initialize the device [ 1930.981342][T26538] usb 6-1: ath9k_htc: USB layer deinitialized [ 1931.018359][T25460] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1931.108380][T32388] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1931.118448][T25259] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1931.127736][T25259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.128424][ T19] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1931.136127][T25259] usb 5-1: Product: syz [ 1931.148231][T25259] usb 5-1: Manufacturer: syz [ 1931.154300][ T19] ath9k_htc: Failed to initialize the device [ 1931.154561][T25259] usb 5-1: SerialNumber: syz [ 1931.171963][T25318] usb 2-1: ath9k_htc: USB layer deinitialized [ 1931.208667][T25259] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1931.219927][T26210] usb 1-1: new high-speed USB device number 124 using dummy_hcd 08:12:35 executing program 1: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1931.358422][T26538] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1931.538383][T25460] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1931.547797][T25460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.556277][T25460] usb 4-1: Product: syz [ 1931.561797][T25460] usb 4-1: Manufacturer: syz [ 1931.567656][T25460] usb 4-1: SerialNumber: syz [ 1931.609105][T25460] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1931.628752][T32388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1931.637965][T32388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.648420][T32388] usb 3-1: Product: syz [ 1931.653897][T32388] usb 3-1: Manufacturer: syz [ 1931.661205][T32388] usb 3-1: SerialNumber: syz [ 1931.688764][T25318] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1931.699177][T32388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1931.748494][T26210] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1931.757621][T26210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.766402][T26210] usb 1-1: Product: syz [ 1931.773561][T26210] usb 1-1: Manufacturer: syz [ 1931.780575][T26210] usb 1-1: SerialNumber: syz [ 1931.819842][T26210] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1931.839962][T25259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1931.918476][T26538] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1931.927584][T26538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.937179][T26538] usb 6-1: Product: syz [ 1931.944515][T26538] usb 6-1: Manufacturer: syz [ 1931.949847][T26538] usb 6-1: SerialNumber: syz [ 1931.989138][T26538] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1932.178751][T19265] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1932.268843][T25318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1932.278155][T25318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.278625][T32388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1932.298474][T25318] usb 2-1: Product: syz [ 1932.303508][T25318] usb 2-1: Manufacturer: syz [ 1932.308356][T25318] usb 2-1: SerialNumber: syz [ 1932.348728][T25318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1932.381134][ T19] usb 4-1: USB disconnect, device number 118 [ 1932.388506][T26210] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1932.456456][ T9774] usb 5-1: USB disconnect, device number 120 [ 1932.618426][T26538] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1932.701959][T26211] usb 3-1: USB disconnect, device number 3 [ 1932.821454][T25277] usb 6-1: USB disconnect, device number 6 08:12:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1932.888470][T25259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1932.895680][T25259] ath9k_htc: Failed to initialize the device [ 1932.908487][ T9774] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1932.995469][T26364] usb 1-1: USB disconnect, device number 124 [ 1933.018392][T25318] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:37 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1933.208330][T19265] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1933.217821][T19265] ath9k_htc: Failed to initialize the device [ 1933.230547][ T19] usb 4-1: ath9k_htc: USB layer deinitialized [ 1933.255172][ T9821] usb 2-1: USB disconnect, device number 7 08:12:37 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1933.368372][T32388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1933.375326][T32388] ath9k_htc: Failed to initialize the device [ 1933.384436][T26211] usb 3-1: ath9k_htc: USB layer deinitialized [ 1933.398339][ T9774] usb 5-1: new high-speed USB device number 121 using dummy_hcd 08:12:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1933.448395][T26210] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1933.455359][T26210] ath9k_htc: Failed to initialize the device [ 1933.467032][T26364] usb 1-1: ath9k_htc: USB layer deinitialized [ 1933.588354][ T19] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1933.688355][T26538] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1933.695450][T26538] ath9k_htc: Failed to initialize the device [ 1933.707802][T25277] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:38 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1933.738440][T26211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1933.938418][T26364] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1933.978421][ T9774] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1933.987892][ T9774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.998711][ T9774] usb 5-1: Product: syz [ 1934.003979][ T9774] usb 5-1: Manufacturer: syz [ 1934.009304][ T9774] usb 5-1: SerialNumber: syz [ 1934.058699][ T9774] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1934.088375][T25318] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1934.095426][T25277] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1934.103080][T25318] ath9k_htc: Failed to initialize the device [ 1934.108405][ T19] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1934.118846][ T9821] usb 2-1: ath9k_htc: USB layer deinitialized [ 1934.121843][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.133945][ T19] usb 4-1: Product: syz [ 1934.142009][ T19] usb 4-1: Manufacturer: syz [ 1934.146808][ T19] usb 4-1: SerialNumber: syz [ 1934.188641][ T19] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1934.258383][T26211] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1934.268100][T26211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.283895][T26211] usb 3-1: Product: syz [ 1934.288047][T26211] usb 3-1: Manufacturer: syz [ 1934.300320][T26211] usb 3-1: SerialNumber: syz [ 1934.339013][T26211] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1934.478452][T26364] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1934.487561][T26364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.496889][ T9821] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1934.507324][T26364] usb 1-1: Product: syz [ 1934.512265][T26364] usb 1-1: Manufacturer: syz [ 1934.517027][T26364] usb 1-1: SerialNumber: syz [ 1934.568729][T26364] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1934.648402][T25277] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1934.657649][T25277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.667489][T25277] usb 6-1: Product: syz [ 1934.672210][ T9774] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1934.683884][T25277] usb 6-1: Manufacturer: syz [ 1934.690277][T25277] usb 6-1: SerialNumber: syz [ 1934.738822][T25277] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1934.764665][ T19] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1934.908466][T26211] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1934.964848][T32388] usb 4-1: USB disconnect, device number 119 [ 1935.058444][ T9821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1935.067569][ T9821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.077767][ T9821] usb 2-1: Product: syz [ 1935.084999][ T9821] usb 2-1: Manufacturer: syz [ 1935.091692][ T9821] usb 2-1: SerialNumber: syz [ 1935.138728][ T9821] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1935.168876][T26364] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1935.300085][T19265] usb 5-1: USB disconnect, device number 121 [ 1935.316935][ T1258] usb 3-1: USB disconnect, device number 4 [ 1935.388459][T25277] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1935.593456][T26538] usb 6-1: USB disconnect, device number 7 [ 1935.768432][ T9774] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1935.775853][ T9774] ath9k_htc: Failed to initialize the device [ 1935.776610][T25460] usb 1-1: USB disconnect, device number 125 [ 1935.788775][ T9821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:40 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1935.815140][T19265] usb 5-1: ath9k_htc: USB layer deinitialized [ 1935.848414][ T19] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1935.856337][ T19] ath9k_htc: Failed to initialize the device [ 1935.867185][T32388] usb 4-1: ath9k_htc: USB layer deinitialized [ 1935.928379][T26211] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1935.935301][T26211] ath9k_htc: Failed to initialize the device [ 1935.947086][ T1258] usb 3-1: ath9k_htc: USB layer deinitialized [ 1936.000110][T26201] usb 2-1: USB disconnect, device number 8 08:12:40 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 08:12:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1936.218339][T19265] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1936.226771][T32388] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1936.248373][T26364] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1936.255304][T26364] ath9k_htc: Failed to initialize the device [ 1936.261487][T25460] usb 1-1: ath9k_htc: USB layer deinitialized [ 1936.309486][ T1258] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1936.408339][T25277] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1936.415384][T25277] ath9k_htc: Failed to initialize the device [ 1936.428511][T26538] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:41 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:12:41 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 1936.668433][T25460] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1936.748424][T19265] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1936.757811][T32388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1936.767246][T19265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.775255][T32388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.783885][T19265] usb 5-1: Product: syz [ 1936.789219][T32388] usb 4-1: Product: syz [ 1936.794723][T32388] usb 4-1: Manufacturer: syz [ 1936.801032][T32388] usb 4-1: SerialNumber: syz [ 1936.806746][T19265] usb 5-1: Manufacturer: syz [ 1936.812568][T19265] usb 5-1: SerialNumber: syz [ 1936.848774][T32388] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1936.868720][T19265] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1936.878833][ T1258] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1936.889822][ T9821] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1936.897062][ T9821] ath9k_htc: Failed to initialize the device [ 1936.905244][ T1258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.914114][ T1258] usb 3-1: Product: syz [ 1936.914198][T26201] usb 2-1: ath9k_htc: USB layer deinitialized [ 1936.918340][ T1258] usb 3-1: Manufacturer: syz [ 1936.930077][ T1258] usb 3-1: SerialNumber: syz [ 1936.969434][ T1258] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:41 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 1937.188723][T25460] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1937.198067][T25460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.213814][T25460] usb 1-1: Product: syz [ 1937.218032][T25460] usb 1-1: Manufacturer: syz [ 1937.228034][T25460] usb 1-1: SerialNumber: syz [ 1937.270492][T25460] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1937.279387][T26201] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1937.408387][T32388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1937.428431][ T19] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1937.615846][T26211] usb 4-1: USB disconnect, device number 120 [ 1937.638361][ T1258] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1937.798384][T26201] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1937.807857][T26201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.818877][T26201] usb 2-1: Product: syz [ 1937.824221][T26201] usb 2-1: Manufacturer: syz [ 1937.830060][T26201] usb 2-1: SerialNumber: syz [ 1937.858383][T25460] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1937.870691][T26201] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1937.978423][T19265] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1938.046308][ T9821] usb 3-1: USB disconnect, device number 5 [ 1938.066861][T26364] usb 5-1: USB disconnect, device number 122 08:12:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1938.438433][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1938.473020][T26201] usb 1-1: USB disconnect, device number 126 [ 1938.494247][ T19] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1938.501238][T32388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1938.508423][T19265] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1938.518593][ T19] ath9k_htc: Failed to initialize the device [ 1938.525207][T32388] ath9k_htc: Failed to initialize the device 08:12:43 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1938.539654][T19265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.547862][T19265] usb 6-1: Product: syz [ 1938.552095][T26211] usb 4-1: ath9k_htc: USB layer deinitialized [ 1938.561267][T26364] usb 5-1: ath9k_htc: USB layer deinitialized [ 1938.584310][T19265] usb 6-1: Manufacturer: syz 08:12:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1938.594281][T19265] usb 6-1: SerialNumber: syz [ 1938.638625][T19265] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1938.650367][ T1258] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1938.657265][ T1258] ath9k_htc: Failed to initialize the device [ 1938.688026][ T9821] usb 3-1: ath9k_htc: USB layer deinitialized [ 1938.701694][T26538] usb 2-1: USB disconnect, device number 9 [ 1938.888367][T25460] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1938.895340][T25460] ath9k_htc: Failed to initialize the device [ 1938.907137][T26201] usb 1-1: ath9k_htc: USB layer deinitialized [ 1938.913348][T26211] usb 4-1: new high-speed USB device number 121 using dummy_hcd 08:12:43 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1939.038390][T26364] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1939.058381][ T9821] usb 3-1: new high-speed USB device number 6 using dummy_hcd 08:12:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1939.208443][T19265] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1939.378424][T26201] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1939.419491][T29929] usb 6-1: USB disconnect, device number 8 [ 1939.448386][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1939.455372][T26211] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1939.464557][T26210] ath9k_htc: Failed to initialize the device [ 1939.470632][T26211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.478679][T26211] usb 4-1: Product: syz [ 1939.479732][T26538] usb 2-1: ath9k_htc: USB layer deinitialized [ 1939.482844][T26211] usb 4-1: Manufacturer: syz [ 1939.493802][T26211] usb 4-1: SerialNumber: syz [ 1939.538978][T26211] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1939.598423][T26364] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1939.607528][T26364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.615925][T26364] usb 5-1: Product: syz [ 1939.620854][T26364] usb 5-1: Manufacturer: syz [ 1939.626193][T26364] usb 5-1: SerialNumber: syz [ 1939.638760][ T9821] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1939.648383][ T9821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.656408][ T9821] usb 3-1: Product: syz [ 1939.663665][ T9821] usb 3-1: Manufacturer: syz [ 1939.671691][T26364] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1939.681974][ T9821] usb 3-1: SerialNumber: syz [ 1939.738641][ T9821] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1939.858394][T26538] usb 2-1: new high-speed USB device number 10 using dummy_hcd 08:12:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1939.898929][T26201] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1939.907970][T26201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.917230][T26201] usb 1-1: Product: syz [ 1939.922808][T26201] usb 1-1: Manufacturer: syz [ 1939.929307][T26201] usb 1-1: SerialNumber: syz [ 1939.969133][T26201] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1940.108377][T26211] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1940.248367][T19265] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1940.255413][T19265] ath9k_htc: Failed to initialize the device [ 1940.267389][T29929] usb 6-1: ath9k_htc: USB layer deinitialized [ 1940.318411][T26364] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1940.329656][T25460] usb 4-1: USB disconnect, device number 121 [ 1940.378424][ T9821] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1940.448499][T26538] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1940.457601][T26538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.472056][T26538] usb 2-1: Product: syz [ 1940.476380][T26538] usb 2-1: Manufacturer: syz [ 1940.487320][T26538] usb 2-1: SerialNumber: syz [ 1940.548408][T26201] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1940.548856][T26538] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1940.628390][T29929] usb 6-1: new high-speed USB device number 9 using dummy_hcd 08:12:45 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1940.783043][ T9774] usb 3-1: USB disconnect, device number 6 [ 1940.933147][T26210] usb 5-1: USB disconnect, device number 123 [ 1941.128442][T26211] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1941.135403][T26211] ath9k_htc: Failed to initialize the device [ 1941.142982][T25460] usb 4-1: ath9k_htc: USB layer deinitialized [ 1941.149650][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1941.164194][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.174094][T29929] usb 6-1: Product: syz [ 1941.180095][T29929] usb 6-1: Manufacturer: syz [ 1941.184986][T29929] usb 6-1: SerialNumber: syz [ 1941.196427][T32388] usb 1-1: USB disconnect, device number 127 [ 1941.229141][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1941.230007][T26538] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:45 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1941.368457][T26364] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1941.375412][T26364] ath9k_htc: Failed to initialize the device [ 1941.386964][T26210] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1941.448438][ T9821] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1941.456660][ T9821] ath9k_htc: Failed to initialize the device [ 1941.469971][ T9774] usb 3-1: ath9k_htc: USB layer deinitialized [ 1941.508568][T25460] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1941.608378][T26201] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1941.615319][T26201] ath9k_htc: Failed to initialize the device [ 1941.621814][T32388] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1941.798361][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1941.845862][ T1258] usb 2-1: USB disconnect, device number 10 [ 1941.850992][T26210] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1941.852237][ T9774] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1942.028386][T25460] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1942.037515][T25460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.052151][T25460] usb 4-1: Product: syz [ 1942.056318][T25460] usb 4-1: Manufacturer: syz [ 1942.067136][T25460] usb 4-1: SerialNumber: syz [ 1942.079988][T32388] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1942.108666][T25460] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1942.328436][T26538] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1942.335717][T26538] ath9k_htc: Failed to initialize the device [ 1942.343316][ T1258] usb 2-1: ath9k_htc: USB layer deinitialized [ 1942.379065][T26210] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1942.391353][T26210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.407854][T26210] usb 5-1: Product: syz [ 1942.413783][T26210] usb 5-1: Manufacturer: syz [ 1942.424172][T26210] usb 5-1: SerialNumber: syz [ 1942.426423][T25277] usb 6-1: USB disconnect, device number 9 [ 1942.479050][T26210] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1942.490136][ T9774] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1942.501013][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.511518][ T9774] usb 3-1: Product: syz [ 1942.515925][ T9774] usb 3-1: Manufacturer: syz [ 1942.522638][ T9774] usb 3-1: SerialNumber: syz [ 1942.578692][ T9774] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1942.598709][T32388] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1942.608513][T32388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.616526][T32388] usb 1-1: Product: syz [ 1942.630760][T32388] usb 1-1: Manufacturer: syz [ 1942.635434][T32388] usb 1-1: SerialNumber: syz [ 1942.678598][T32388] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1942.695835][T25460] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1942.768408][ T1258] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1942.808358][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1942.815361][T29929] ath9k_htc: Failed to initialize the device [ 1942.821992][T25277] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:47 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1942.897977][T26211] usb 4-1: USB disconnect, device number 122 [ 1943.058385][T26210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1943.178396][ T9774] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1943.238391][T32388] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:47 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1943.338441][ T1258] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1943.347552][T25277] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1943.355304][ T1258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.366555][ T1258] usb 2-1: Product: syz [ 1943.373084][ T1258] usb 2-1: Manufacturer: syz [ 1943.379450][ T1258] usb 2-1: SerialNumber: syz [ 1943.418741][ T1258] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1943.590243][T26190] usb 3-1: USB disconnect, device number 7 [ 1943.667000][ T9821] usb 5-1: USB disconnect, device number 124 [ 1943.768400][T25460] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1943.775320][T25460] ath9k_htc: Failed to initialize the device [ 1943.787356][T26211] usb 4-1: ath9k_htc: USB layer deinitialized [ 1943.844424][T26538] usb 1-1: USB disconnect, device number 2 [ 1943.928407][T25277] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1943.937749][T25277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.946014][T25277] usb 6-1: Product: syz [ 1943.954520][T25277] usb 6-1: Manufacturer: syz [ 1943.960813][T25277] usb 6-1: SerialNumber: syz [ 1944.018696][T25277] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:48 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1944.068404][ T1258] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1944.088357][T26210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1944.095338][T26210] ath9k_htc: Failed to initialize the device [ 1944.104424][ T9821] usb 5-1: ath9k_htc: USB layer deinitialized 08:12:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1944.149745][T26211] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1944.248369][T32388] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1944.255326][T32388] ath9k_htc: Failed to initialize the device [ 1944.258332][ T9774] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1944.278375][T26538] usb 1-1: ath9k_htc: USB layer deinitialized [ 1944.291564][ T9774] ath9k_htc: Failed to initialize the device [ 1944.297638][T26190] usb 3-1: ath9k_htc: USB layer deinitialized 08:12:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1944.588456][ T9821] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1944.648380][T26190] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1944.678382][T26211] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1944.687512][T26211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.689659][T26364] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1944.710680][T26211] usb 4-1: Product: syz [ 1944.714909][T26211] usb 4-1: Manufacturer: syz [ 1944.724964][T26211] usb 4-1: SerialNumber: syz [ 1944.727616][T25277] usb 2-1: USB disconnect, device number 11 [ 1944.749675][T26538] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1944.788686][T26211] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1945.118701][ T9821] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1945.127906][ T9821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.130785][T29929] usb 6-1: USB disconnect, device number 10 [ 1945.136143][ T1258] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1945.158827][ T9821] usb 5-1: Product: syz [ 1945.164208][ T9821] usb 5-1: Manufacturer: syz [ 1945.169495][ T1258] ath9k_htc: Failed to initialize the device [ 1945.176876][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 1945.188568][ T9821] usb 5-1: SerialNumber: syz [ 1945.190157][T26190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1945.205112][T26190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.217075][T26190] usb 3-1: Product: syz [ 1945.221693][T26190] usb 3-1: Manufacturer: syz [ 1945.230724][T26190] usb 3-1: SerialNumber: syz [ 1945.249111][ T9821] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:49 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1945.270666][T26190] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1945.308701][T26538] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1945.318714][T26538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.326763][T26538] usb 1-1: Product: syz [ 1945.339724][T26538] usb 1-1: Manufacturer: syz [ 1945.345233][T26538] usb 1-1: SerialNumber: syz [ 1945.358357][T26211] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1945.388648][T26538] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1945.561211][T32388] usb 4-1: USB disconnect, device number 123 08:12:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1945.698398][T25277] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1945.778409][T26364] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1945.785362][T26364] ath9k_htc: Failed to initialize the device [ 1945.797251][T29929] usb 6-1: ath9k_htc: USB layer deinitialized [ 1945.848402][T26190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1945.888360][ T9821] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:50 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1946.028439][T25318] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1946.148414][T29929] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1946.262212][ T9774] usb 3-1: USB disconnect, device number 8 [ 1946.288464][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1946.293903][T26210] usb 5-1: USB disconnect, device number 125 [ 1946.299105][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.316942][T25277] usb 2-1: Product: syz [ 1946.321278][T25277] usb 2-1: Manufacturer: syz [ 1946.326326][T25277] usb 2-1: SerialNumber: syz [ 1946.379829][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1946.408448][T26211] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1946.415417][T26211] ath9k_htc: Failed to initialize the device [ 1946.427304][T32388] usb 4-1: ath9k_htc: USB layer deinitialized [ 1946.637515][ T1258] usb 1-1: USB disconnect, device number 3 [ 1946.668593][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1946.677838][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.685913][T29929] usb 6-1: Product: syz [ 1946.690449][T29929] usb 6-1: Manufacturer: syz [ 1946.695961][T29929] usb 6-1: SerialNumber: syz 08:12:51 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1946.738653][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1946.790157][T32388] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1946.888358][T26190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1946.895386][T26190] ath9k_htc: Failed to initialize the device [ 1946.907599][ T9774] usb 3-1: ath9k_htc: USB layer deinitialized [ 1946.968353][ T9821] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1946.975441][ T9821] ath9k_htc: Failed to initialize the device [ 1946.984322][T26210] usb 5-1: ath9k_htc: USB layer deinitialized [ 1947.038362][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1947.048427][T25318] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1947.055331][T25318] ath9k_htc: Failed to initialize the device [ 1947.062882][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1947.268457][ T9774] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1947.308380][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1947.317430][T32388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1947.327054][T32388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.337025][T32388] usb 4-1: Product: syz [ 1947.342591][T32388] usb 4-1: Manufacturer: syz [ 1947.347641][T32388] usb 4-1: SerialNumber: syz [ 1947.353400][T26210] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1947.398884][T32388] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1947.454020][T26364] usb 2-1: USB disconnect, device number 12 [ 1947.522086][T25259] usb 6-1: USB disconnect, device number 11 [ 1947.528791][ T1258] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1947.828425][ T9774] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1947.837555][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.847389][ T9774] usb 3-1: Product: syz [ 1947.854552][ T9774] usb 3-1: Manufacturer: syz [ 1947.860457][ T9774] usb 3-1: SerialNumber: syz [ 1947.878355][T26210] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1947.887469][T26210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.901485][T26210] usb 5-1: Product: syz [ 1947.905642][T26210] usb 5-1: Manufacturer: syz [ 1947.909438][ T9774] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1947.919109][T26210] usb 5-1: SerialNumber: syz 08:12:52 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1947.968672][T26210] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1947.978454][T32388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1948.088420][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1948.095477][T25277] ath9k_htc: Failed to initialize the device [ 1948.107472][T26364] usb 2-1: ath9k_htc: USB layer deinitialized [ 1948.113662][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1948.126357][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.139409][ T1258] usb 1-1: Product: syz [ 1948.143588][ T1258] usb 1-1: Manufacturer: syz [ 1948.148704][ T1258] usb 1-1: SerialNumber: syz [ 1948.181724][T26190] usb 4-1: USB disconnect, device number 124 [ 1948.209042][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1948.328365][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1948.335539][T29929] ath9k_htc: Failed to initialize the device [ 1948.344335][T25259] usb 6-1: ath9k_htc: USB layer deinitialized [ 1948.508378][T26364] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1948.548367][T26210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1948.588362][ T9774] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:53 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1948.728865][T25259] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1948.758607][T26211] usb 5-1: USB disconnect, device number 126 [ 1948.838417][ T1258] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1948.993739][T25460] usb 3-1: USB disconnect, device number 9 [ 1949.048380][T32388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1949.055349][T32388] ath9k_htc: Failed to initialize the device [ 1949.062868][T26190] usb 4-1: ath9k_htc: USB layer deinitialized [ 1949.079619][T26364] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1949.090478][T26364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.101365][T26364] usb 2-1: Product: syz [ 1949.105530][T26364] usb 2-1: Manufacturer: syz [ 1949.110505][T26364] usb 2-1: SerialNumber: syz [ 1949.149072][T26364] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1949.318787][T25259] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1949.330263][T25259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.346269][T25259] usb 6-1: Product: syz [ 1949.355276][T25259] usb 6-1: Manufacturer: syz [ 1949.361960][T25259] usb 6-1: SerialNumber: syz [ 1949.409162][T25259] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1949.418497][T26190] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1949.442975][ T9821] usb 1-1: USB disconnect, device number 4 08:12:54 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1949.608443][T26210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1949.608443][ T9774] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1949.608491][ T9774] ath9k_htc: Failed to initialize the device [ 1949.630784][T25460] usb 3-1: ath9k_htc: USB layer deinitialized [ 1949.642952][T26210] ath9k_htc: Failed to initialize the device [ 1949.652409][T26211] usb 5-1: ath9k_htc: USB layer deinitialized [ 1949.788376][T26364] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1949.848406][ T1258] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1949.855388][ T1258] ath9k_htc: Failed to initialize the device [ 1949.866900][ T9821] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1949.958661][T26190] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1949.967724][T26190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.977488][T26190] usb 4-1: Product: syz [ 1949.982467][T26190] usb 4-1: Manufacturer: syz [ 1949.987850][T26190] usb 4-1: SerialNumber: syz [ 1949.995349][T25460] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1950.008475][T26211] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1950.048420][T25259] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1950.068723][T26190] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1950.229148][T19265] usb 2-1: USB disconnect, device number 13 [ 1950.262982][T29929] usb 6-1: USB disconnect, device number 12 [ 1950.378335][ T9821] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1950.528373][T26211] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1950.537493][T26211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.547802][T25460] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1950.557715][T26211] usb 5-1: Product: syz [ 1950.562359][T25460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.571191][T26211] usb 5-1: Manufacturer: syz [ 1950.577234][T26211] usb 5-1: SerialNumber: syz [ 1950.582360][T25460] usb 3-1: Product: syz [ 1950.588373][T25460] usb 3-1: Manufacturer: syz [ 1950.594054][T25460] usb 3-1: SerialNumber: syz [ 1950.638446][T26190] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1950.647728][T26211] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1950.656124][T25460] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:55 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:12:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1950.818490][T26364] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1950.825636][T26364] ath9k_htc: Failed to initialize the device [ 1950.834282][T19265] usb 2-1: ath9k_htc: USB layer deinitialized [ 1950.846896][T26210] usb 4-1: USB disconnect, device number 125 [ 1950.948381][ T9821] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1950.957559][ T9821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.967138][ T9821] usb 1-1: Product: syz [ 1950.973343][ T9821] usb 1-1: Manufacturer: syz [ 1950.978517][ T9821] usb 1-1: SerialNumber: syz [ 1951.028637][ T9821] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1951.128393][T25259] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1951.135301][T25259] ath9k_htc: Failed to initialize the device [ 1951.142674][T29929] usb 6-1: ath9k_htc: USB layer deinitialized [ 1951.198389][T19265] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1951.228386][T25460] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1951.237491][T26211] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:55 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1951.434738][T26201] usb 5-1: USB disconnect, device number 127 [ 1951.498392][T29929] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1951.635367][ T1258] usb 3-1: USB disconnect, device number 10 [ 1951.678364][ T9821] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1951.688389][T26190] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1951.695432][T26190] ath9k_htc: Failed to initialize the device [ 1951.703985][T26210] usb 4-1: ath9k_htc: USB layer deinitialized [ 1951.720068][T19265] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1951.729134][T19265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.737222][T19265] usb 2-1: Product: syz [ 1951.741586][T19265] usb 2-1: Manufacturer: syz [ 1951.748023][T19265] usb 2-1: SerialNumber: syz [ 1951.798725][T19265] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1952.018424][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1952.027611][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.041710][T29929] usb 6-1: Product: syz [ 1952.045967][T29929] usb 6-1: Manufacturer: syz [ 1952.056178][T29929] usb 6-1: SerialNumber: syz [ 1952.060868][T26210] usb 4-1: new high-speed USB device number 126 using dummy_hcd 08:12:56 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1952.108732][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1952.248358][T25460] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1952.255637][T26211] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1952.263476][T25460] ath9k_htc: Failed to initialize the device [ 1952.278782][T26211] ath9k_htc: Failed to initialize the device [ 1952.287300][T26364] usb 1-1: USB disconnect, device number 5 [ 1952.294596][ T1258] usb 3-1: ath9k_htc: USB layer deinitialized [ 1952.299219][T26201] usb 5-1: ath9k_htc: USB layer deinitialized [ 1952.358398][T19265] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1952.588399][T26210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1952.597514][T26210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.609145][T26210] usb 4-1: Product: syz [ 1952.615395][T26210] usb 4-1: Manufacturer: syz [ 1952.621123][T26210] usb 4-1: SerialNumber: syz [ 1952.658340][ T1258] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1952.670247][T26210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1952.679899][T26201] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1952.690056][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1952.728372][ T9821] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1952.735424][ T9821] ath9k_htc: Failed to initialize the device [ 1952.743032][T26364] usb 1-1: ath9k_htc: USB layer deinitialized 08:12:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1952.771095][T25259] usb 2-1: USB disconnect, device number 14 [ 1953.198450][T26201] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1953.199270][T26364] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1953.208247][T26201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.225543][T26201] usb 5-1: Product: syz [ 1953.228674][ T1258] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1953.233363][T26201] usb 5-1: Manufacturer: syz 08:12:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1953.247416][ T1258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.248048][T26201] usb 5-1: SerialNumber: syz [ 1953.260788][T26210] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1953.264183][ T1258] usb 3-1: Product: syz [ 1953.279419][ T1258] usb 3-1: Manufacturer: syz [ 1953.284115][ T1258] usb 3-1: SerialNumber: syz [ 1953.318960][T26201] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1953.337620][T25318] usb 6-1: USB disconnect, device number 13 [ 1953.344472][ T1258] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1953.368431][T19265] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1953.379520][T19265] ath9k_htc: Failed to initialize the device [ 1953.401493][T25259] usb 2-1: ath9k_htc: USB layer deinitialized [ 1953.462911][ T9774] usb 4-1: USB disconnect, device number 126 [ 1953.759514][T25259] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1953.768375][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1953.775452][T29929] ath9k_htc: Failed to initialize the device [ 1953.783150][T25318] usb 6-1: ath9k_htc: USB layer deinitialized 08:12:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1953.809657][T26364] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1953.818802][T26364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.826924][T26364] usb 1-1: Product: syz [ 1953.838786][T26364] usb 1-1: Manufacturer: syz [ 1953.843442][T26364] usb 1-1: SerialNumber: syz [ 1953.898908][T26201] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1953.899868][T26364] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:12:58 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1953.958412][ T1258] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1954.108579][T26211] usb 5-1: USB disconnect, device number 2 [ 1954.298599][T25318] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1954.328787][T26210] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1954.335809][T26210] ath9k_htc: Failed to initialize the device [ 1954.343653][ T9774] usb 4-1: ath9k_htc: USB layer deinitialized [ 1954.351017][T25259] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1954.370696][T25259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.379696][T25259] usb 2-1: Product: syz [ 1954.386204][T25259] usb 2-1: Manufacturer: syz [ 1954.391883][T25259] usb 2-1: SerialNumber: syz [ 1954.402811][ T9821] usb 3-1: USB disconnect, device number 11 [ 1954.440025][T25259] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1954.538394][T26364] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:12:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1954.728410][ T9774] usb 4-1: new high-speed USB device number 127 using dummy_hcd 08:12:59 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1954.876999][T25318] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1954.886210][T25318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.900264][T25318] usb 6-1: Product: syz [ 1954.904453][T25318] usb 6-1: Manufacturer: syz [ 1954.916087][T25318] usb 6-1: SerialNumber: syz [ 1954.959092][T25318] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1954.968320][T26201] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1954.976565][T26201] ath9k_htc: Failed to initialize the device [ 1954.986645][T26211] usb 5-1: ath9k_htc: USB layer deinitialized [ 1955.048462][ T1258] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1955.055477][T25259] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1955.064516][ T1258] ath9k_htc: Failed to initialize the device [ 1955.071429][ T9821] usb 3-1: ath9k_htc: USB layer deinitialized [ 1955.146869][T29929] usb 1-1: USB disconnect, device number 6 [ 1955.260473][T25277] usb 2-1: USB disconnect, device number 15 [ 1955.288456][ T9774] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1955.297703][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.307781][ T9774] usb 4-1: Product: syz [ 1955.314495][ T9774] usb 4-1: Manufacturer: syz [ 1955.321363][ T9774] usb 4-1: SerialNumber: syz [ 1955.349703][T26211] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1955.358965][ T9774] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1955.438320][ T9821] usb 3-1: new high-speed USB device number 12 using dummy_hcd 08:13:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1955.598360][T26538] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1955.608330][T26364] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1955.615567][T26364] ath9k_htc: Failed to initialize the device [ 1955.622842][T29929] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1955.868358][T26211] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1955.877459][T26211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.887381][T26211] usb 5-1: Product: syz [ 1955.895165][T26211] usb 5-1: Manufacturer: syz [ 1955.900986][T26211] usb 5-1: SerialNumber: syz [ 1955.938723][T26211] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1955.988443][T25318] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1956.028384][T29929] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1956.028521][ T9821] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1956.045246][ T9821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.062424][ T9821] usb 3-1: Product: syz [ 1956.066661][ T9821] usb 3-1: Manufacturer: syz [ 1956.076866][ T9821] usb 3-1: SerialNumber: syz [ 1956.098438][T25259] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1956.105436][T25259] ath9k_htc: Failed to initialize the device [ 1956.117750][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 1956.124267][ T9821] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1956.191514][T26201] usb 4-1: USB disconnect, device number 127 [ 1956.220293][T31466] usb 6-1: USB disconnect, device number 14 [ 1956.498333][T25277] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1956.508359][T26211] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1956.558421][T29929] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1956.567519][T29929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.575621][T29929] usb 1-1: Product: syz [ 1956.580191][T29929] usb 1-1: Manufacturer: syz [ 1956.584859][T29929] usb 1-1: SerialNumber: syz 08:13:01 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1956.628747][T29929] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1956.648373][T26538] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1956.655290][T26538] ath9k_htc: Failed to initialize the device [ 1956.666927][T31466] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:01 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1956.712905][T26364] usb 5-1: USB disconnect, device number 3 [ 1956.778372][ T9821] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1957.048372][T25318] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1957.055318][T25318] ath9k_htc: Failed to initialize the device [ 1957.068132][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1957.077444][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.077507][T26201] usb 4-1: ath9k_htc: USB layer deinitialized [ 1957.098378][T25277] usb 2-1: Product: syz [ 1957.102547][T25277] usb 2-1: Manufacturer: syz [ 1957.107140][T25277] usb 2-1: SerialNumber: syz [ 1957.138401][T31466] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1957.158923][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1957.183565][T25259] usb 3-1: USB disconnect, device number 12 08:13:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1957.210686][T29929] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1957.448782][T26201] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1957.528356][T26211] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1957.535334][T26211] ath9k_htc: Failed to initialize the device [ 1957.541566][T26364] usb 5-1: ath9k_htc: USB layer deinitialized 08:13:02 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1957.698659][T31466] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1957.707900][T31466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.718822][T31466] usb 6-1: Product: syz [ 1957.723594][T31466] usb 6-1: Manufacturer: syz [ 1957.729086][T31466] usb 6-1: SerialNumber: syz [ 1957.761022][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1957.770352][T31466] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1957.813905][T26538] usb 1-1: USB disconnect, device number 7 [ 1957.848418][ T9821] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1957.855418][ T9821] ath9k_htc: Failed to initialize the device [ 1957.861864][T25259] usb 3-1: ath9k_htc: USB layer deinitialized [ 1957.928341][T26364] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1957.968656][T26201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1957.970723][ T1258] usb 2-1: USB disconnect, device number 16 [ 1957.983753][T26201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.983773][T26201] usb 4-1: Product: syz [ 1957.983786][T26201] usb 4-1: Manufacturer: syz [ 1957.983798][T26201] usb 4-1: SerialNumber: syz [ 1958.020461][T26201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1958.248385][T29929] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1958.255491][T29929] ath9k_htc: Failed to initialize the device [ 1958.265235][T26538] usb 1-1: ath9k_htc: USB layer deinitialized [ 1958.271773][T25259] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1958.398361][T31466] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1958.538436][T26364] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1958.547651][T26364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.561887][T26364] usb 5-1: Product: syz [ 1958.566051][T26364] usb 5-1: Manufacturer: syz [ 1958.576628][T26364] usb 5-1: SerialNumber: syz [ 1958.598394][T26201] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1958.628741][T26364] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1958.778516][T26538] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1958.801959][T26211] usb 4-1: USB disconnect, device number 2 [ 1958.808320][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1958.822730][T25277] ath9k_htc: Failed to initialize the device [ 1958.838329][ T1258] usb 2-1: ath9k_htc: USB layer deinitialized [ 1958.845833][T25318] usb 6-1: USB disconnect, device number 15 [ 1958.868824][T25259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1958.878025][T25259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.887519][T25259] usb 3-1: Product: syz [ 1958.892247][T25259] usb 3-1: Manufacturer: syz [ 1958.898831][T25259] usb 3-1: SerialNumber: syz [ 1958.939125][T25259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1959.209033][ T1258] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1959.248415][T26364] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:03 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:13:03 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1959.328441][T26538] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1959.344559][T26538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.360006][T26538] usb 1-1: Product: syz [ 1959.364300][T26538] usb 1-1: Manufacturer: syz [ 1959.376589][T26538] usb 1-1: SerialNumber: syz [ 1959.418645][T26538] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1959.453365][T29929] usb 5-1: USB disconnect, device number 4 [ 1959.458332][T31466] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1959.466070][T31466] ath9k_htc: Failed to initialize the device [ 1959.473623][T25318] usb 6-1: ath9k_htc: USB layer deinitialized [ 1959.578403][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1959.608331][T26201] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1959.615317][T26201] ath9k_htc: Failed to initialize the device [ 1959.627684][T26211] usb 4-1: ath9k_htc: USB layer deinitialized [ 1959.838505][ T1258] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1959.847773][ T1258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.855851][ T1258] usb 2-1: Product: syz [ 1959.862217][T25318] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1959.871500][ T1258] usb 2-1: Manufacturer: syz [ 1959.876112][ T1258] usb 2-1: SerialNumber: syz 08:13:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1959.918830][ T1258] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1959.988333][T26211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1959.997025][T25277] usb 3-1: USB disconnect, device number 13 [ 1960.088374][T26538] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1960.328333][T26364] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1960.335768][T26364] ath9k_htc: Failed to initialize the device [ 1960.348101][T29929] usb 5-1: ath9k_htc: USB layer deinitialized [ 1960.438441][T25318] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1960.447689][T25318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.461716][T25318] usb 6-1: Product: syz [ 1960.465910][T25318] usb 6-1: Manufacturer: syz [ 1960.476174][T25318] usb 6-1: SerialNumber: syz 08:13:05 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1960.511303][T26211] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1960.520509][T26211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.528695][T25318] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1960.529617][T26211] usb 4-1: Product: syz [ 1960.548397][ T1258] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1960.549706][T26211] usb 4-1: Manufacturer: syz [ 1960.576400][T26211] usb 4-1: SerialNumber: syz [ 1960.618638][T26211] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1960.648343][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1960.655261][T25259] ath9k_htc: Failed to initialize the device [ 1960.666842][T25277] usb 3-1: ath9k_htc: USB layer deinitialized [ 1960.692775][T19265] usb 1-1: USB disconnect, device number 8 [ 1960.718334][T29929] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1960.770434][T26201] usb 2-1: USB disconnect, device number 17 [ 1961.048354][T25277] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1961.128340][T26538] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1961.135266][T26538] ath9k_htc: Failed to initialize the device [ 1961.146869][T19265] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1961.188375][T26211] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1961.208372][T25318] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1961.239044][T29929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1961.248220][T29929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.263323][T29929] usb 5-1: Product: syz [ 1961.267564][T29929] usb 5-1: Manufacturer: syz [ 1961.278098][T29929] usb 5-1: SerialNumber: syz 08:13:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1961.329131][T29929] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1961.393698][T26210] usb 4-1: USB disconnect, device number 3 [ 1961.608339][ T1258] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1961.615376][ T1258] ath9k_htc: Failed to initialize the device [ 1961.618841][T19265] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1961.621889][T25277] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1961.638224][T25277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.639267][T26201] usb 2-1: ath9k_htc: USB layer deinitialized [ 1961.647560][T25277] usb 3-1: Product: syz [ 1961.658701][T25277] usb 3-1: Manufacturer: syz [ 1961.671436][T26190] usb 6-1: USB disconnect, device number 16 [ 1961.673169][T25277] usb 3-1: SerialNumber: syz [ 1961.748612][T25277] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:06 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1961.898356][T29929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1962.008375][T26201] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1962.102333][T32388] usb 5-1: USB disconnect, device number 5 08:13:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1962.168375][T19265] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1962.177660][T19265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.193045][T19265] usb 1-1: Product: syz [ 1962.200962][T19265] usb 1-1: Manufacturer: syz [ 1962.205724][T19265] usb 1-1: SerialNumber: syz [ 1962.248368][T26211] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1962.255654][T19265] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1962.260050][T25318] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1962.264636][T26211] ath9k_htc: Failed to initialize the device [ 1962.272354][T25318] ath9k_htc: Failed to initialize the device [ 1962.284448][T26190] usb 6-1: ath9k_htc: USB layer deinitialized [ 1962.306362][T26210] usb 4-1: ath9k_htc: USB layer deinitialized [ 1962.358366][T25277] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1962.548397][T26201] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1962.548421][T26201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.548438][T26201] usb 2-1: Product: syz [ 1962.548473][T26201] usb 2-1: Manufacturer: syz [ 1962.548486][T26201] usb 2-1: SerialNumber: syz 08:13:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1962.590380][T26201] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1962.650950][T26190] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1962.671869][T26210] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1962.767107][ T19] usb 3-1: USB disconnect, device number 14 [ 1962.878354][T19265] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1962.968368][T29929] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1962.975291][T29929] ath9k_htc: Failed to initialize the device [ 1962.988389][T32388] usb 5-1: ath9k_htc: USB layer deinitialized [ 1963.158784][T26201] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1963.178747][T26190] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1963.188172][T26190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:13:07 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1963.201247][T26210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1963.210447][T26190] usb 6-1: Product: syz [ 1963.214589][T26190] usb 6-1: Manufacturer: syz [ 1963.220647][T26210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.228890][T26190] usb 6-1: SerialNumber: syz [ 1963.234462][T26210] usb 4-1: Product: syz [ 1963.240635][T26210] usb 4-1: Manufacturer: syz [ 1963.246010][T26210] usb 4-1: SerialNumber: syz [ 1963.289156][T26190] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1963.297615][T26210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1963.362660][T25318] usb 2-1: USB disconnect, device number 18 [ 1963.368687][T25277] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1963.369150][T32388] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1963.377611][T25277] ath9k_htc: Failed to initialize the device [ 1963.406165][ T19] usb 3-1: ath9k_htc: USB layer deinitialized [ 1963.510294][T26211] usb 1-1: USB disconnect, device number 9 [ 1963.758639][ T19] usb 3-1: new high-speed USB device number 15 using dummy_hcd 08:13:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1963.868358][T26210] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1963.881132][T26190] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1963.898344][T32388] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1963.907445][T32388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.917999][T32388] usb 5-1: Product: syz [ 1963.922493][T32388] usb 5-1: Manufacturer: syz [ 1963.928087][T32388] usb 5-1: SerialNumber: syz [ 1963.933478][T19265] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1963.942517][T19265] ath9k_htc: Failed to initialize the device [ 1963.961103][T26211] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1963.979567][T32388] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1964.071736][T29929] usb 4-1: USB disconnect, device number 4 [ 1964.168483][T26201] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1964.175575][T26201] ath9k_htc: Failed to initialize the device [ 1964.187883][T25318] usb 2-1: ath9k_htc: USB layer deinitialized [ 1964.298361][ T19] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1964.307660][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.317780][ T19] usb 3-1: Product: syz [ 1964.323150][ T19] usb 3-1: Manufacturer: syz [ 1964.333297][ T19] usb 3-1: SerialNumber: syz [ 1964.378710][ T19] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1964.428400][T26211] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1964.499890][T25435] usb 6-1: USB disconnect, device number 17 08:13:09 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1964.548421][T32388] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1964.558340][T25318] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1964.757134][T31215] usb 5-1: USB disconnect, device number 6 [ 1964.938429][ T19] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1964.949809][T26211] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1964.959322][T26211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.968784][T26210] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1964.975779][T26210] ath9k_htc: Failed to initialize the device [ 1964.981905][T26190] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive 08:13:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1964.989346][T26211] usb 1-1: Product: syz [ 1964.994511][T26211] usb 1-1: Manufacturer: syz [ 1964.999824][T26190] ath9k_htc: Failed to initialize the device [ 1965.005896][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1965.013607][T29929] usb 4-1: ath9k_htc: USB layer deinitialized [ 1965.021938][T26211] usb 1-1: SerialNumber: syz [ 1965.068600][T26211] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1965.108872][T25318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1965.119391][T25318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.127478][T25318] usb 2-1: Product: syz [ 1965.141196][T25318] usb 2-1: Manufacturer: syz [ 1965.147451][T25318] usb 2-1: SerialNumber: syz [ 1965.188708][T25318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:09 executing program 4: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1965.342855][T25277] usb 3-1: USB disconnect, device number 15 [ 1965.368796][T29929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1965.418361][T25435] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1965.608337][T32388] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1965.618174][T32388] ath9k_htc: Failed to initialize the device [ 1965.625548][T31215] usb 5-1: ath9k_htc: USB layer deinitialized [ 1965.638479][T26211] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:10 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1965.828360][T25318] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1965.888379][T29929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1965.900148][T29929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.909701][T29929] usb 4-1: Product: syz [ 1965.913870][T29929] usb 4-1: Manufacturer: syz [ 1965.918990][T29929] usb 4-1: SerialNumber: syz [ 1965.938689][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1965.947836][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.959444][T29929] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1965.968457][T25435] usb 6-1: Product: syz [ 1965.973184][T25435] usb 6-1: Manufacturer: syz [ 1965.980162][T31215] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1965.989852][T25435] usb 6-1: SerialNumber: syz [ 1966.008343][ T19] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1966.017526][ T19] ath9k_htc: Failed to initialize the device [ 1966.026646][T25277] usb 3-1: ath9k_htc: USB layer deinitialized [ 1966.028839][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1966.056363][T26538] usb 2-1: USB disconnect, device number 19 [ 1966.246359][ T1258] usb 1-1: USB disconnect, device number 10 08:13:10 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1966.498355][T31215] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1966.509948][T31215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.517965][T31215] usb 5-1: Product: syz [ 1966.528698][T31215] usb 5-1: Manufacturer: syz [ 1966.533304][T31215] usb 5-1: SerialNumber: syz [ 1966.573683][T29929] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1966.583333][T31215] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1966.618446][T26210] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1966.728392][T26211] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1966.735503][T26211] ath9k_htc: Failed to initialize the device [ 1966.756173][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized [ 1966.773291][T31215] usb 4-1: USB disconnect, device number 5 08:13:11 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1966.888340][T25318] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1966.895388][T25318] ath9k_htc: Failed to initialize the device [ 1966.904577][T26538] usb 2-1: ath9k_htc: USB layer deinitialized [ 1967.148365][T32388] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1967.208554][ T1258] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1967.235293][T25435] usb 6-1: USB disconnect, device number 18 08:13:11 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 1967.268331][T26538] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1967.353016][ T19] usb 5-1: USB disconnect, device number 7 08:13:12 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1967.608330][T29929] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1967.615415][T29929] ath9k_htc: Failed to initialize the device [ 1967.624733][T31215] usb 4-1: ath9k_htc: USB layer deinitialized [ 1967.688365][T26210] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1967.695428][T26210] ath9k_htc: Failed to initialize the device [ 1967.701531][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:12 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 1967.779805][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1967.789421][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.797420][ T1258] usb 1-1: Product: syz [ 1967.803998][ T1258] usb 1-1: Manufacturer: syz [ 1967.811116][ T1258] usb 1-1: SerialNumber: syz 08:13:12 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1967.839979][T26538] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1967.849320][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1967.871432][T26538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.882413][T26538] usb 2-1: Product: syz [ 1967.887223][T26538] usb 2-1: Manufacturer: syz [ 1967.893403][T26538] usb 2-1: SerialNumber: syz 08:13:12 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1967.948613][T26538] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1968.158352][T25435] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1968.171185][T32388] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1968.178046][T32388] ath9k_htc: Failed to initialize the device [ 1968.184523][ T19] usb 5-1: ath9k_htc: USB layer deinitialized 08:13:12 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 08:13:13 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1968.518690][ T1258] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1968.538377][ T19] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1968.578397][T26538] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1968.678336][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1968.687475][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.701492][T25435] usb 6-1: Product: syz [ 1968.705786][T25435] usb 6-1: Manufacturer: syz [ 1968.716727][T25435] usb 6-1: SerialNumber: syz [ 1968.758654][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1968.781697][T26210] usb 2-1: USB disconnect, device number 20 08:13:13 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1969.058368][ T19] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1969.067610][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.082452][ T19] usb 5-1: Product: syz [ 1969.086626][ T19] usb 5-1: Manufacturer: syz [ 1969.096894][ T19] usb 5-1: SerialNumber: syz [ 1969.128889][T26364] usb 1-1: USB disconnect, device number 11 [ 1969.145713][ T19] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1969.198338][T29929] usb 4-1: new high-speed USB device number 6 using dummy_hcd 08:13:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1969.328381][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1969.549300][T25277] usb 6-1: USB disconnect, device number 19 08:13:14 executing program 0: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:14 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1969.608348][T26538] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1969.615294][ T1258] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1969.622305][T26538] ath9k_htc: Failed to initialize the device [ 1969.628363][ T1258] ath9k_htc: Failed to initialize the device [ 1969.635105][T26364] usb 1-1: ath9k_htc: USB layer deinitialized [ 1969.644927][T26210] usb 2-1: ath9k_htc: USB layer deinitialized [ 1969.718413][ T19] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1969.727735][T29929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1969.737530][T29929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.748042][T29929] usb 4-1: Product: syz [ 1969.752395][T29929] usb 4-1: Manufacturer: syz [ 1969.758004][T29929] usb 4-1: SerialNumber: syz [ 1969.808674][T29929] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1969.921305][T29929] usb 5-1: USB disconnect, device number 8 [ 1969.998343][T26210] usb 2-1: new high-speed USB device number 21 using dummy_hcd 08:13:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1970.069370][T26364] usb 1-1: new high-speed USB device number 12 using dummy_hcd 08:13:14 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0x0, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1970.368359][T32388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:15 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1970.408442][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1970.408488][T25435] ath9k_htc: Failed to initialize the device [ 1970.415868][T25277] usb 6-1: ath9k_htc: USB layer deinitialized [ 1970.518347][T26210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1970.528768][T26210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.543809][T26210] usb 2-1: Product: syz [ 1970.547972][T26210] usb 2-1: Manufacturer: syz [ 1970.558330][T26210] usb 2-1: SerialNumber: syz [ 1970.588606][T25259] usb 4-1: USB disconnect, device number 6 [ 1970.605620][T26210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1970.628355][T26364] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1970.637523][T26364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.645558][T26364] usb 1-1: Product: syz [ 1970.650010][T26364] usb 1-1: Manufacturer: syz [ 1970.654797][T26364] usb 1-1: SerialNumber: syz 08:13:15 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0x0, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1970.698648][T26364] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1970.788416][T25277] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1970.808369][ T19] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1970.815390][ T19] ath9k_htc: Failed to initialize the device [ 1970.827162][T29929] usb 5-1: ath9k_htc: USB layer deinitialized 08:13:15 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:15 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0x0, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1971.168375][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1971.188386][T29929] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1971.328407][T26364] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1971.337520][T25277] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1971.347307][T25277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.357069][T25277] usb 6-1: Product: syz [ 1971.362579][T25277] usb 6-1: Manufacturer: syz [ 1971.369390][T25277] usb 6-1: SerialNumber: syz [ 1971.387178][ T1258] usb 2-1: USB disconnect, device number 21 [ 1971.418658][T25277] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1971.448395][T32388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1971.455402][T32388] ath9k_htc: Failed to initialize the device [ 1971.461796][T25259] usb 4-1: ath9k_htc: USB layer deinitialized [ 1971.708355][T29929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1971.717487][T29929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.725643][T29929] usb 5-1: Product: syz [ 1971.733109][T29929] usb 5-1: Manufacturer: syz [ 1971.739247][T29929] usb 5-1: SerialNumber: syz 08:13:16 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x0, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1971.778675][T29929] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1971.829236][T25259] usb 4-1: new high-speed USB device number 7 using dummy_hcd 08:13:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1971.934643][T25318] usb 1-1: USB disconnect, device number 12 [ 1972.058409][T25277] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1972.248335][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1972.255369][T26210] ath9k_htc: Failed to initialize the device [ 1972.268377][ T1258] usb 2-1: ath9k_htc: USB layer deinitialized 08:13:16 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x0, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1972.292963][T26538] usb 6-1: USB disconnect, device number 20 [ 1972.348368][T29929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1972.418371][T26364] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1972.427502][T25259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1972.442024][T26364] ath9k_htc: Failed to initialize the device [ 1972.448102][T25318] usb 1-1: ath9k_htc: USB layer deinitialized [ 1972.456622][T25259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:13:17 executing program 0: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1972.467960][T25259] usb 4-1: Product: syz [ 1972.473112][T25259] usb 4-1: Manufacturer: syz [ 1972.477847][T25259] usb 4-1: SerialNumber: syz [ 1972.520250][T25259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1972.553915][T26371] usb 5-1: USB disconnect, device number 9 [ 1972.638336][ T1258] usb 2-1: new high-speed USB device number 22 using dummy_hcd 08:13:17 executing program 5: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:17 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x0, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1972.908623][T25318] usb 1-1: new high-speed USB device number 13 using dummy_hcd 08:13:17 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1973.128378][T25277] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1973.135448][T25259] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1973.144781][T25277] ath9k_htc: Failed to initialize the device [ 1973.162981][T26538] usb 6-1: ath9k_htc: USB layer deinitialized [ 1973.198417][ T1258] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1973.207543][ T1258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.217606][ T1258] usb 2-1: Product: syz [ 1973.226315][ T1258] usb 2-1: Manufacturer: syz [ 1973.232834][ T1258] usb 2-1: SerialNumber: syz [ 1973.288722][ T1258] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:17 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x0, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1973.344669][ T1258] usb 4-1: USB disconnect, device number 7 [ 1973.368328][T29929] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1973.375467][T29929] ath9k_htc: Failed to initialize the device [ 1973.386478][T26371] usb 5-1: ath9k_htc: USB layer deinitialized [ 1973.468460][T25318] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1973.478130][T25318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.486292][T25318] usb 1-1: Product: syz [ 1973.491961][T25318] usb 1-1: Manufacturer: syz [ 1973.497259][T25318] usb 1-1: SerialNumber: syz [ 1973.518647][T26538] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1973.538578][T25318] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1973.758357][T26371] usb 5-1: new high-speed USB device number 10 using dummy_hcd 08:13:18 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:18 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x0, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1973.938878][ T9821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1974.088585][T26538] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1974.099004][T26538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.107388][T26538] usb 6-1: Product: syz [ 1974.119333][T26538] usb 6-1: Manufacturer: syz [ 1974.125172][T26538] usb 6-1: SerialNumber: syz [ 1974.145249][T31466] usb 2-1: USB disconnect, device number 22 [ 1974.168368][T25259] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1974.175829][T26538] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1974.184553][T25259] ath9k_htc: Failed to initialize the device [ 1974.195029][ T1258] usb 4-1: ath9k_htc: USB layer deinitialized [ 1974.218483][T25318] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1974.348473][T26371] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1974.357591][T26371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.372258][T26371] usb 5-1: Product: syz [ 1974.376429][T26371] usb 5-1: Manufacturer: syz [ 1974.386579][T26371] usb 5-1: SerialNumber: syz 08:13:19 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x0, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1974.438862][T26371] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1974.578345][ T1258] usb 4-1: new high-speed USB device number 8 using dummy_hcd 08:13:19 executing program 1: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1974.808452][T26538] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1974.825668][T25277] usb 1-1: USB disconnect, device number 13 08:13:19 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1974.968352][ T9821] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1974.975415][ T9821] ath9k_htc: Failed to initialize the device [ 1974.989656][T31466] usb 2-1: ath9k_htc: USB layer deinitialized [ 1975.048486][T26371] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1975.128499][ T1258] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1975.137674][ T1258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.151712][ T1258] usb 4-1: Product: syz [ 1975.155866][ T1258] usb 4-1: Manufacturer: syz [ 1975.165857][ T1258] usb 4-1: SerialNumber: syz [ 1975.218840][ T1258] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1975.251400][T25259] usb 5-1: USB disconnect, device number 10 08:13:19 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1975.298429][T25318] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1975.305399][T25318] ath9k_htc: Failed to initialize the device [ 1975.316955][T25277] usb 1-1: ath9k_htc: USB layer deinitialized [ 1975.348409][T31466] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1975.429476][T29929] usb 6-1: USB disconnect, device number 21 08:13:20 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:20 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1975.738355][T25277] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1975.848357][T26538] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1975.855865][T26538] ath9k_htc: Failed to initialize the device [ 1975.861917][ T1258] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1975.872402][T29929] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:20 executing program 5: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1975.918392][T31466] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1975.927508][T31466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.943150][T31466] usb 2-1: Product: syz [ 1975.951141][T31466] usb 2-1: Manufacturer: syz [ 1975.956071][T31466] usb 2-1: SerialNumber: syz [ 1975.999227][T31466] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:20 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1976.088455][T26371] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1976.095512][T26371] ath9k_htc: Failed to initialize the device [ 1976.108200][T25259] usb 5-1: ath9k_htc: USB layer deinitialized [ 1976.298433][T25277] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1976.307812][T25277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.317747][T25277] usb 1-1: Product: syz [ 1976.324389][T25277] usb 1-1: Manufacturer: syz [ 1976.329441][T25277] usb 1-1: SerialNumber: syz [ 1976.330769][T29929] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1976.378765][T25277] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1976.458417][T25259] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1976.486318][T26210] usb 4-1: USB disconnect, device number 8 08:13:21 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1976.618615][T31466] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1976.822391][T25318] usb 2-1: USB disconnect, device number 23 [ 1976.868355][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1976.879109][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.887154][T29929] usb 6-1: Product: syz [ 1976.898348][ T1258] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1976.898455][T29929] usb 6-1: Manufacturer: syz [ 1976.907654][ T1258] ath9k_htc: Failed to initialize the device [ 1976.922210][T29929] usb 6-1: SerialNumber: syz [ 1976.927077][T26210] usb 4-1: ath9k_htc: USB layer deinitialized 08:13:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1976.978682][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1977.008335][T25277] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1977.017439][T25259] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1977.027347][T25259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.039497][T25259] usb 5-1: Product: syz [ 1977.043756][T25259] usb 5-1: Manufacturer: syz [ 1977.054917][T25259] usb 5-1: SerialNumber: syz 08:13:21 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1977.100164][T25259] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:21 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1977.388690][T26210] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1977.548360][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:22 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1977.613452][T26371] usb 1-1: USB disconnect, device number 14 [ 1977.688363][T31466] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1977.695503][T31466] ath9k_htc: Failed to initialize the device [ 1977.703532][T25318] usb 2-1: ath9k_htc: USB layer deinitialized [ 1977.748404][T25259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1977.908724][T26210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1977.917804][T26210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.931909][T26210] usb 4-1: Product: syz [ 1977.936155][T26210] usb 4-1: Manufacturer: syz [ 1977.946820][T26210] usb 4-1: SerialNumber: syz [ 1977.963928][ T19] usb 5-1: USB disconnect, device number 11 [ 1977.989003][T26210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:22 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1978.058318][T25318] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1978.088372][T25277] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1978.095321][T25277] ath9k_htc: Failed to initialize the device [ 1978.101620][T26371] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:22 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1978.167866][ T1258] usb 6-1: USB disconnect, device number 22 08:13:23 executing program 4: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1978.528338][T26371] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1978.558422][T26210] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1978.568317][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1978.575684][T29929] ath9k_htc: Failed to initialize the device [ 1978.582503][ T1258] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:23 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1978.638382][T25318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1978.647592][T25318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.658346][T25318] usb 2-1: Product: syz [ 1978.663606][T25318] usb 2-1: Manufacturer: syz [ 1978.678377][T25318] usb 2-1: SerialNumber: syz 08:13:23 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1978.730210][T25318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1978.773141][T32388] usb 4-1: USB disconnect, device number 9 [ 1978.818385][T25259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1978.825431][T25259] ath9k_htc: Failed to initialize the device [ 1978.831557][ T19] usb 5-1: ath9k_htc: USB layer deinitialized [ 1979.108322][ T1258] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1979.121992][T26371] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1979.131335][T26371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.145552][T26371] usb 1-1: Product: syz [ 1979.152905][T26371] usb 1-1: Manufacturer: syz [ 1979.157494][T26371] usb 1-1: SerialNumber: syz 08:13:23 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1979.188328][ T19] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1979.208639][T26371] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:23 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1979.368367][T25318] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1979.572524][T25277] usb 2-1: USB disconnect, device number 24 [ 1979.608847][T26210] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1979.616121][T26210] ath9k_htc: Failed to initialize the device [ 1979.623909][T32388] usb 4-1: ath9k_htc: USB layer deinitialized [ 1979.658357][ T1258] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1979.667497][ T1258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.679504][ T1258] usb 6-1: Product: syz [ 1979.684462][ T1258] usb 6-1: Manufacturer: syz [ 1979.691310][ T1258] usb 6-1: SerialNumber: syz [ 1979.709013][ T19] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 08:13:24 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1979.718060][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.728099][ T19] usb 5-1: Product: syz [ 1979.737275][ T19] usb 5-1: Manufacturer: syz [ 1979.743579][ T19] usb 5-1: SerialNumber: syz [ 1979.748618][ T1258] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1979.800190][ T19] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1979.858377][T26371] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1979.978329][T32388] usb 4-1: new high-speed USB device number 10 using dummy_hcd 08:13:24 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:24 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1980.368344][ T19] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1980.368383][ T1258] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1980.408366][T25318] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1980.415336][T25318] ath9k_htc: Failed to initialize the device [ 1980.422867][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 1980.472219][T25259] usb 1-1: USB disconnect, device number 15 [ 1980.508673][T32388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1980.517779][T32388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.527599][T32388] usb 4-1: Product: syz [ 1980.533444][T32388] usb 4-1: Manufacturer: syz [ 1980.540832][T32388] usb 4-1: SerialNumber: syz [ 1980.582358][T32388] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1980.593601][ T9774] usb 5-1: USB disconnect, device number 12 [ 1980.620171][T26210] usb 6-1: USB disconnect, device number 23 08:13:25 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1980.808289][T25277] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1980.888346][T26371] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1980.895456][T26371] ath9k_htc: Failed to initialize the device [ 1980.907948][T25259] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:25 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:25 executing program 4: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:25 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1981.148605][T32388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:25 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 1981.378781][T31466] usb 4-1: USB disconnect, device number 10 [ 1981.390218][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1981.399302][T25259] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1981.407067][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.419957][T25277] usb 2-1: Product: syz [ 1981.424141][T25277] usb 2-1: Manufacturer: syz [ 1981.430165][T25277] usb 2-1: SerialNumber: syz [ 1981.448660][ T19] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1981.456693][ T19] ath9k_htc: Failed to initialize the device [ 1981.458818][ T1258] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1981.472114][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1981.480229][ T9774] usb 5-1: ath9k_htc: USB layer deinitialized [ 1981.500067][ T1258] ath9k_htc: Failed to initialize the device [ 1981.508098][T26210] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:26 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:26 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0x0, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1981.848322][ T9774] usb 5-1: new high-speed USB device number 13 using dummy_hcd 08:13:26 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 1981.938429][T25259] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1981.947710][T25259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.963973][T25259] usb 1-1: Product: syz [ 1981.968191][T25259] usb 1-1: Manufacturer: syz [ 1981.979365][T25259] usb 1-1: SerialNumber: syz [ 1982.028716][T25259] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1982.098402][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1982.168330][T32388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1982.175398][T32388] ath9k_htc: Failed to initialize the device [ 1982.187621][T31466] usb 4-1: ath9k_htc: USB layer deinitialized [ 1982.302543][T26210] usb 2-1: USB disconnect, device number 25 08:13:26 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0x0, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1982.398370][ T9774] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1982.407502][ T9774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.415752][ T9774] usb 5-1: Product: syz [ 1982.421740][ T9774] usb 5-1: Manufacturer: syz [ 1982.426433][ T9774] usb 5-1: SerialNumber: syz [ 1982.479946][ T9774] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1982.496563][T25435] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1982.648413][T25259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:27 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:27 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) 08:13:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1983.018343][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1983.027449][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.037057][T25435] usb 6-1: Product: syz [ 1983.043034][T25435] usb 6-1: Manufacturer: syz [ 1983.048224][T25435] usb 6-1: SerialNumber: syz [ 1983.090310][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1983.128425][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1983.135448][ T9774] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1983.144540][T25277] ath9k_htc: Failed to initialize the device [ 1983.158955][T26210] usb 2-1: ath9k_htc: USB layer deinitialized [ 1983.255675][T26371] usb 1-1: USB disconnect, device number 16 [ 1983.261760][ T1258] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1983.332498][ T19] usb 5-1: USB disconnect, device number 13 [ 1983.518351][T26210] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1983.658350][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1983.688395][T25259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1983.695367][T25259] ath9k_htc: Failed to initialize the device [ 1983.703419][T26371] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:28 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:28 executing program 4: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:28 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 1983.838373][ T1258] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1983.847478][ T1258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.855592][ T1258] usb 4-1: Product: syz [ 1983.860012][ T1258] usb 4-1: Manufacturer: syz [ 1983.864640][ T1258] usb 4-1: SerialNumber: syz [ 1983.909813][T32388] usb 6-1: USB disconnect, device number 24 [ 1983.928665][ T1258] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1984.038342][T26210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1984.047477][T26210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.061240][T26210] usb 2-1: Product: syz [ 1984.065460][T26210] usb 2-1: Manufacturer: syz [ 1984.075845][T26210] usb 2-1: SerialNumber: syz [ 1984.118616][T26210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1984.158349][T26371] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1984.178334][ T9774] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1984.185331][ T9774] ath9k_htc: Failed to initialize the device [ 1984.191524][ T19] usb 5-1: ath9k_htc: USB layer deinitialized 08:13:28 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) 08:13:28 executing program 5: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1984.548390][ T19] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1984.568651][ T1258] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1984.688332][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1984.728422][T26371] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1984.729789][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1984.738214][T26371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.753266][T26371] usb 1-1: Product: syz [ 1984.755807][T25435] ath9k_htc: Failed to initialize the device [ 1984.758776][T26371] usb 1-1: Manufacturer: syz [ 1984.768012][T32388] usb 6-1: ath9k_htc: USB layer deinitialized [ 1984.769445][T26371] usb 1-1: SerialNumber: syz [ 1984.829089][T26371] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1984.893189][T25259] usb 2-1: USB disconnect, device number 26 08:13:29 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 1985.068332][ T19] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1985.085042][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.095907][ T19] usb 5-1: Product: syz [ 1985.100161][ T19] usb 5-1: Manufacturer: syz [ 1985.105695][ T19] usb 5-1: SerialNumber: syz [ 1985.148707][ T19] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1985.156856][T32388] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1985.199717][T31215] usb 4-1: USB disconnect, device number 11 08:13:29 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:30 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1985.458364][T26371] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1985.608397][ T1258] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1985.615333][ T1258] ath9k_htc: Failed to initialize the device [ 1985.625990][T31215] usb 4-1: ath9k_htc: USB layer deinitialized 08:13:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1985.678448][T32388] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1985.687643][T32388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.698837][T32388] usb 6-1: Product: syz [ 1985.703044][T32388] usb 6-1: Manufacturer: syz [ 1985.707659][T32388] usb 6-1: SerialNumber: syz [ 1985.718319][ T19] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1985.748778][T32388] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1985.770121][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1985.777045][T26211] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1985.785595][T26210] ath9k_htc: Failed to initialize the device [ 1985.792060][T25259] usb 2-1: ath9k_htc: USB layer deinitialized [ 1985.922863][T25435] usb 5-1: USB disconnect, device number 14 [ 1986.065360][ T9821] usb 1-1: USB disconnect, device number 17 [ 1986.128362][T31215] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1986.158387][T25259] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1986.308398][T26211] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1986.317679][T26211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.325817][T32388] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1986.336015][T26211] usb 3-1: Product: syz [ 1986.341211][T26211] usb 3-1: Manufacturer: syz [ 1986.347001][T26211] usb 3-1: SerialNumber: syz [ 1986.388665][T26211] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:31 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1986.488667][T26371] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1986.495688][T26371] ath9k_htc: Failed to initialize the device [ 1986.501871][ T9821] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:31 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1986.549764][T25460] usb 6-1: USB disconnect, device number 25 [ 1986.658384][T31215] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1986.667562][T31215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.678649][T31215] usb 4-1: Product: syz [ 1986.684020][T31215] usb 4-1: Manufacturer: syz [ 1986.690309][T31215] usb 4-1: SerialNumber: syz [ 1986.728617][T31215] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1986.744255][T25259] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1986.754512][T25259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.768792][T25259] usb 2-1: Product: syz [ 1986.772957][T25259] usb 2-1: Manufacturer: syz [ 1986.777526][T25259] usb 2-1: SerialNumber: syz [ 1986.808380][ T19] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1986.818046][ T19] ath9k_htc: Failed to initialize the device [ 1986.830109][T25259] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1986.837213][T25435] usb 5-1: ath9k_htc: USB layer deinitialized [ 1986.958333][T26211] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1986.988548][ T9821] usb 1-1: new high-speed USB device number 18 using dummy_hcd 08:13:31 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1987.170605][T26210] usb 3-1: USB disconnect, device number 16 [ 1987.188736][T25435] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1987.288366][T31215] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1987.368472][T32388] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1987.375400][T32388] ath9k_htc: Failed to initialize the device [ 1987.383194][T25460] usb 6-1: ath9k_htc: USB layer deinitialized [ 1987.458411][T25259] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1987.568445][ T9821] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1987.577710][ T9821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.585775][ T9821] usb 1-1: Product: syz [ 1987.590936][ T9821] usb 1-1: Manufacturer: syz [ 1987.596926][ T9821] usb 1-1: SerialNumber: syz 08:13:32 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1987.648738][ T9821] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1987.670777][ T9774] usb 2-1: USB disconnect, device number 27 [ 1987.708386][T25435] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1987.717589][T25435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.732409][T25435] usb 5-1: Product: syz [ 1987.736865][T25435] usb 5-1: Manufacturer: syz [ 1987.741553][T25460] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1987.749257][T25435] usb 5-1: SerialNumber: syz [ 1987.789090][T25435] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1987.902139][ T1258] usb 4-1: USB disconnect, device number 12 [ 1988.008480][T26211] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1988.015406][T26211] ath9k_htc: Failed to initialize the device [ 1988.023097][T26210] usb 3-1: ath9k_htc: USB layer deinitialized 08:13:32 executing program 1: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1988.268333][T25460] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1988.277451][T25460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.292402][T25460] usb 6-1: Product: syz [ 1988.296613][T25460] usb 6-1: Manufacturer: syz [ 1988.306942][T25460] usb 6-1: SerialNumber: syz [ 1988.319695][ T9821] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1988.328428][T31215] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1988.335500][T31215] ath9k_htc: Failed to initialize the device [ 1988.348625][T25460] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:32 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1988.367542][ T1258] usb 4-1: ath9k_htc: USB layer deinitialized [ 1988.378320][T26210] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1988.389307][T25435] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1988.489252][T25259] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1988.496351][T25259] ath9k_htc: Failed to initialize the device [ 1988.503942][ T9774] usb 2-1: ath9k_htc: USB layer deinitialized [ 1988.592685][T26371] usb 5-1: USB disconnect, device number 15 [ 1988.788354][ T1258] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1988.878308][ T9774] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1988.899011][T26210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1988.908179][T26210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.916560][T26210] usb 3-1: Product: syz [ 1988.921822][T25460] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1988.931823][T26210] usb 3-1: Manufacturer: syz [ 1988.937787][T26210] usb 3-1: SerialNumber: syz [ 1988.948772][ T19] usb 1-1: USB disconnect, device number 18 [ 1988.978947][T26210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:33 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1989.136780][T26211] usb 6-1: USB disconnect, device number 26 [ 1989.348362][ T1258] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1989.359086][ T1258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.367085][ T1258] usb 4-1: Product: syz [ 1989.371335][ T9821] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1989.380501][ T9821] ath9k_htc: Failed to initialize the device [ 1989.388080][ T1258] usb 4-1: Manufacturer: syz [ 1989.388085][ T19] usb 1-1: ath9k_htc: USB layer deinitialized [ 1989.403719][ T1258] usb 4-1: SerialNumber: syz [ 1989.448427][T25435] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1989.448682][ T1258] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1989.455317][T25435] ath9k_htc: Failed to initialize the device [ 1989.463481][ T9774] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1989.480918][ T9774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.490744][ T9774] usb 2-1: Product: syz 08:13:34 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1989.494961][ T9774] usb 2-1: Manufacturer: syz [ 1989.503059][ T9774] usb 2-1: SerialNumber: syz [ 1989.517379][T26371] usb 5-1: ath9k_htc: USB layer deinitialized [ 1989.549729][ T9774] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1989.580032][T26210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:34 executing program 5: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1989.918369][T26371] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1989.938326][ T19] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1989.992209][T26190] usb 3-1: USB disconnect, device number 17 [ 1990.014095][T25460] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1990.021036][T25460] ath9k_htc: Failed to initialize the device [ 1990.027022][T26211] usb 6-1: ath9k_htc: USB layer deinitialized [ 1990.128374][ T1258] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1990.168437][ T9774] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1990.343848][T25259] usb 4-1: USB disconnect, device number 13 [ 1990.373833][T25277] usb 2-1: USB disconnect, device number 28 [ 1990.389720][T26211] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1990.458363][ T19] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1990.467541][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.476873][ T19] usb 1-1: Product: syz [ 1990.482830][ T19] usb 1-1: Manufacturer: syz [ 1990.488118][ T19] usb 1-1: SerialNumber: syz [ 1990.498656][T26371] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 08:13:35 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1990.507709][T26371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.529295][T26371] usb 5-1: Product: syz [ 1990.529980][ T19] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1990.533487][T26371] usb 5-1: Manufacturer: syz [ 1990.552332][T26371] usb 5-1: SerialNumber: syz [ 1990.608596][T26371] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1990.648325][T26210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1990.655234][T26210] ath9k_htc: Failed to initialize the device [ 1990.661715][T26190] usb 3-1: ath9k_htc: USB layer deinitialized 08:13:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:35 executing program 1: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1990.918317][T26211] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1990.927402][T26211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.944381][T26211] usb 6-1: Product: syz [ 1990.952044][T26211] usb 6-1: Manufacturer: syz [ 1990.956631][T26211] usb 6-1: SerialNumber: syz [ 1990.998720][T26211] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1991.018335][T26190] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1991.118353][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1991.208326][ T9774] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1991.215353][ T1258] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1991.222236][ T1258] ath9k_htc: Failed to initialize the device [ 1991.228592][T26371] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1991.248978][ T9774] ath9k_htc: Failed to initialize the device [ 1991.255056][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 1991.264756][T25259] usb 4-1: ath9k_htc: USB layer deinitialized [ 1991.432875][T25460] usb 5-1: USB disconnect, device number 16 [ 1991.538438][T26190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1991.547638][T26190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.560495][T26190] usb 3-1: Product: syz [ 1991.565724][T26190] usb 3-1: Manufacturer: syz [ 1991.571704][T26211] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1991.580761][T26190] usb 3-1: SerialNumber: syz [ 1991.618819][T26190] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1991.632427][T25277] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1991.640178][T25259] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1991.723188][T31215] usb 1-1: USB disconnect, device number 19 08:13:36 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1992.168341][ T19] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1992.175429][ T19] ath9k_htc: Failed to initialize the device [ 1992.183128][T31215] usb 1-1: ath9k_htc: USB layer deinitialized [ 1992.191383][T26190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:36 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1992.210075][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1992.211101][T26210] usb 6-1: USB disconnect, device number 27 [ 1992.219223][T25259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1992.219250][T25259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.219268][T25259] usb 4-1: Product: syz [ 1992.219280][T25259] usb 4-1: Manufacturer: syz [ 1992.219293][T25259] usb 4-1: SerialNumber: syz [ 1992.229690][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.300143][T25259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1992.323962][T25277] usb 2-1: Product: syz [ 1992.338457][T26371] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1992.347016][T26371] ath9k_htc: Failed to initialize the device [ 1992.353630][T25277] usb 2-1: Manufacturer: syz [ 1992.362071][T25277] usb 2-1: SerialNumber: syz [ 1992.369392][T25460] usb 5-1: ath9k_htc: USB layer deinitialized [ 1992.430011][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1992.607432][T25435] usb 3-1: USB disconnect, device number 18 [ 1992.648346][T26211] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1992.655410][T26211] ath9k_htc: Failed to initialize the device [ 1992.666830][T26210] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1992.698323][T31215] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1992.718799][T25460] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1992.988350][T25259] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:37 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1993.058407][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1993.129716][T26210] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1993.208437][T26190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1993.215887][T26190] ath9k_htc: Failed to initialize the device [ 1993.222305][T31215] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1993.232113][T31215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.240400][T25435] usb 3-1: ath9k_htc: USB layer deinitialized [ 1993.247607][T31215] usb 1-1: Product: syz [ 1993.255226][T31215] usb 1-1: Manufacturer: syz [ 1993.260080][T25460] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1993.271714][T25460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.281347][T31215] usb 1-1: SerialNumber: syz [ 1993.287596][T25460] usb 5-1: Product: syz [ 1993.290341][ T9774] usb 2-1: USB disconnect, device number 29 [ 1993.298390][T25460] usb 5-1: Manufacturer: syz [ 1993.303299][T25460] usb 5-1: SerialNumber: syz [ 1993.318671][T31215] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1993.368758][T25460] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1993.588598][T25435] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1993.602942][T26371] usb 4-1: USB disconnect, device number 14 [ 1993.658382][T26210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1993.669040][T26210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.677038][T26210] usb 6-1: Product: syz [ 1993.682381][T26210] usb 6-1: Manufacturer: syz [ 1993.688057][T26210] usb 6-1: SerialNumber: syz [ 1993.728580][T26210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:38 executing program 1: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1993.898340][T31215] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1993.928636][T25460] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1994.008319][T25259] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1994.015298][T25259] ath9k_htc: Failed to initialize the device [ 1994.021486][T26371] usb 4-1: ath9k_htc: USB layer deinitialized 08:13:38 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1994.088401][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1994.095366][T25277] ath9k_htc: Failed to initialize the device [ 1994.101611][ T9774] usb 2-1: ath9k_htc: USB layer deinitialized [ 1994.108387][T25435] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1994.133620][T25435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.152824][T25435] usb 3-1: Product: syz [ 1994.161356][T25435] usb 3-1: Manufacturer: syz [ 1994.171133][T25435] usb 3-1: SerialNumber: syz [ 1994.177536][T26211] usb 5-1: USB disconnect, device number 17 [ 1994.210746][T25435] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1994.288396][T26210] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1994.498310][ T9774] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1994.503460][T26190] usb 6-1: USB disconnect, device number 28 [ 1994.514008][T32388] usb 1-1: USB disconnect, device number 20 [ 1994.549571][T26371] usb 4-1: new high-speed USB device number 15 using dummy_hcd 08:13:39 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1994.778357][T25435] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:39 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1994.968345][T25460] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1994.975302][T31215] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1994.982388][T25460] ath9k_htc: Failed to initialize the device [ 1994.999023][T31215] ath9k_htc: Failed to initialize the device [ 1995.005828][T32388] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1995.034090][T26211] usb 5-1: ath9k_htc: USB layer deinitialized [ 1995.069419][ T9774] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1995.078590][ T9774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.086650][ T9774] usb 2-1: Product: syz [ 1995.102235][ T9774] usb 2-1: Manufacturer: syz [ 1995.106856][ T9774] usb 2-1: SerialNumber: syz [ 1995.115794][T26371] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1995.125590][T26371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.136025][T26371] usb 4-1: Product: syz [ 1995.150676][T26371] usb 4-1: Manufacturer: syz [ 1995.155285][T26371] usb 4-1: SerialNumber: syz [ 1995.168682][ T9774] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1995.218660][T26371] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1995.254800][T29929] usb 3-1: USB disconnect, device number 19 [ 1995.368354][T26210] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1995.375333][T26210] ath9k_htc: Failed to initialize the device [ 1995.382836][T26190] usb 6-1: ath9k_htc: USB layer deinitialized [ 1995.391431][T26211] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1995.468308][T32388] usb 1-1: new high-speed USB device number 21 using dummy_hcd 08:13:40 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1995.748323][T26190] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1995.788347][ T9774] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1995.828403][T26371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1995.848371][T25435] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1995.855402][T25435] ath9k_htc: Failed to initialize the device [ 1995.862100][T29929] usb 3-1: ath9k_htc: USB layer deinitialized [ 1995.918361][T26211] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1995.927556][T26211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.935651][T26211] usb 5-1: Product: syz [ 1995.940193][T26211] usb 5-1: Manufacturer: syz [ 1995.946296][T26211] usb 5-1: SerialNumber: syz [ 1995.988392][T32388] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1995.995016][T25277] usb 2-1: USB disconnect, device number 30 [ 1995.998376][T26211] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1996.016190][T32388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.037169][T32388] usb 1-1: Product: syz [ 1996.044136][T32388] usb 1-1: Manufacturer: syz [ 1996.050953][T32388] usb 1-1: SerialNumber: syz [ 1996.062896][T25259] usb 4-1: USB disconnect, device number 15 [ 1996.099985][T32388] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1996.218315][T29929] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1996.288339][T26190] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1996.297501][T26190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.307509][T26190] usb 6-1: Product: syz [ 1996.314520][T26190] usb 6-1: Manufacturer: syz [ 1996.321198][T26190] usb 6-1: SerialNumber: syz [ 1996.360051][T26190] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:41 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1996.628419][T26211] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1996.668498][T32388] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1996.738347][T29929] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1996.747527][T29929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.756958][T29929] usb 3-1: Product: syz [ 1996.761221][T29929] usb 3-1: Manufacturer: syz [ 1996.768033][T29929] usb 3-1: SerialNumber: syz [ 1996.808344][ T9774] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1996.809209][T29929] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1996.817080][ T9774] ath9k_htc: Failed to initialize the device [ 1996.846372][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 1996.857306][T31466] usb 5-1: USB disconnect, device number 18 [ 1996.888328][T26371] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1996.895702][T26371] ath9k_htc: Failed to initialize the device [ 1996.905240][T25259] usb 4-1: ath9k_htc: USB layer deinitialized [ 1996.929535][T26190] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1997.151790][ T1258] usb 6-1: USB disconnect, device number 29 [ 1997.228321][T25277] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1997.274758][ T9821] usb 1-1: USB disconnect, device number 21 [ 1997.280774][T25259] usb 4-1: new high-speed USB device number 16 using dummy_hcd 08:13:41 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1997.398381][T29929] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:42 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1997.688306][T32388] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1997.695545][T32388] ath9k_htc: Failed to initialize the device [ 1997.702792][T26211] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1997.713472][T26211] ath9k_htc: Failed to initialize the device [ 1997.722986][ T9821] usb 1-1: ath9k_htc: USB layer deinitialized [ 1997.729408][T31466] usb 5-1: ath9k_htc: USB layer deinitialized 08:13:42 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1997.810336][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1997.820459][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.826396][T25435] usb 3-1: USB disconnect, device number 20 [ 1997.830674][T25277] usb 2-1: Product: syz [ 1997.846981][T25277] usb 2-1: Manufacturer: syz [ 1997.857844][T25277] usb 2-1: SerialNumber: syz [ 1997.879896][T25259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1997.889084][T25259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.897090][T25259] usb 4-1: Product: syz [ 1997.904297][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1997.913973][T25259] usb 4-1: Manufacturer: syz [ 1997.928870][T25259] usb 4-1: SerialNumber: syz [ 1997.988648][T25259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1998.012982][T26190] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1998.020931][T26190] ath9k_htc: Failed to initialize the device [ 1998.027984][ T1258] usb 6-1: ath9k_htc: USB layer deinitialized [ 1998.108314][T31466] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1998.208362][ T9821] usb 1-1: new high-speed USB device number 22 using dummy_hcd 08:13:42 executing program 2: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1998.388723][ T1258] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1998.408325][T29929] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1998.415237][T29929] ath9k_htc: Failed to initialize the device [ 1998.421311][T25435] usb 3-1: ath9k_htc: USB layer deinitialized [ 1998.568893][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1998.638436][T25259] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1998.679038][T31466] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1998.688117][T31466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.700071][T31466] usb 5-1: Product: syz [ 1998.704239][T31466] usb 5-1: Manufacturer: syz [ 1998.709640][T31466] usb 5-1: SerialNumber: syz [ 1998.769101][T31466] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1998.778292][T25435] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1998.787280][ T9774] usb 2-1: USB disconnect, device number 31 [ 1998.794667][ T9821] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1998.810398][ T9821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.820935][ T9821] usb 1-1: Product: syz [ 1998.825145][ T9821] usb 1-1: Manufacturer: syz [ 1998.832878][ T9821] usb 1-1: SerialNumber: syz [ 1998.864766][T26211] usb 4-1: USB disconnect, device number 16 [ 1998.881283][ T9821] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1998.978371][ T1258] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1998.987496][ T1258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.996808][ T1258] usb 6-1: Product: syz [ 1999.003762][ T1258] usb 6-1: Manufacturer: syz [ 1999.010022][ T1258] usb 6-1: SerialNumber: syz [ 1999.049078][ T1258] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:43 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1999.306197][T25435] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1999.315393][T25435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.323644][T25435] usb 3-1: Product: syz [ 1999.328578][T25435] usb 3-1: Manufacturer: syz [ 1999.334133][T25435] usb 3-1: SerialNumber: syz 08:13:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 1999.378573][T25435] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1999.419757][T31466] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1999.548410][ T9821] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1999.608481][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1999.615491][T25277] ath9k_htc: Failed to initialize the device [ 1999.627131][ T9774] usb 2-1: ath9k_htc: USB layer deinitialized [ 1999.638925][T32388] usb 5-1: USB disconnect, device number 19 [ 1999.688406][T25259] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1999.695335][T25259] ath9k_htc: Failed to initialize the device [ 1999.707593][T26371] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1999.717137][T26211] usb 4-1: ath9k_htc: USB layer deinitialized [ 1999.948320][T25435] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2000.008434][ T9774] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2000.068392][T26211] usb 4-1: new high-speed USB device number 17 using dummy_hcd 08:13:44 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2000.113582][ T1258] usb 6-1: USB disconnect, device number 30 [ 2000.167979][T26190] usb 1-1: USB disconnect, device number 22 [ 2000.488322][T31466] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2000.495295][T31466] ath9k_htc: Failed to initialize the device [ 2000.501369][T32388] usb 5-1: ath9k_htc: USB layer deinitialized [ 2000.568372][ T9774] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2000.578204][T31215] usb 3-1: USB disconnect, device number 21 [ 2000.578583][ T9821] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2000.590242][T26211] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2000.605900][T26211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:13:45 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2000.608830][ T9774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.626870][T26211] usb 4-1: Product: syz [ 2000.632010][T26211] usb 4-1: Manufacturer: syz [ 2000.636784][T26211] usb 4-1: SerialNumber: syz [ 2000.637842][ T9821] ath9k_htc: Failed to initialize the device [ 2000.648600][ T9774] usb 2-1: Product: syz [ 2000.651281][T26190] usb 1-1: ath9k_htc: USB layer deinitialized [ 2000.652761][ T9774] usb 2-1: Manufacturer: syz 08:13:45 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:45 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2000.689295][T26211] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2000.699541][ T9774] usb 2-1: SerialNumber: syz [ 2000.738417][T26371] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2000.745408][T26371] ath9k_htc: Failed to initialize the device [ 2000.759116][ T9774] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2000.773100][ T1258] usb 6-1: ath9k_htc: USB layer deinitialized [ 2000.968335][T25435] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2000.975221][T25435] ath9k_htc: Failed to initialize the device [ 2000.988357][T31215] usb 3-1: ath9k_htc: USB layer deinitialized 08:13:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2001.128502][T26190] usb 1-1: new high-speed USB device number 23 using dummy_hcd 08:13:45 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2001.218352][ T1258] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2001.258351][T26211] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2001.428351][T25259] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2001.471825][T32388] usb 4-1: USB disconnect, device number 17 [ 2001.488623][T31215] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2001.633541][T29929] usb 2-1: USB disconnect, device number 32 [ 2001.650303][T26190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2001.661082][T26190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.672374][T26190] usb 1-1: Product: syz [ 2001.676577][T26190] usb 1-1: Manufacturer: syz [ 2001.681408][T26190] usb 1-1: SerialNumber: syz [ 2001.728793][T26190] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:46 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2001.778387][ T1258] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2001.787492][ T1258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.801944][ T1258] usb 6-1: Product: syz [ 2001.806315][ T1258] usb 6-1: Manufacturer: syz [ 2001.817671][ T1258] usb 6-1: SerialNumber: syz [ 2001.878640][ T1258] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2002.008675][T31215] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2002.017860][T31215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.029197][T31215] usb 3-1: Product: syz [ 2002.034135][T31215] usb 3-1: Manufacturer: syz [ 2002.039934][T31215] usb 3-1: SerialNumber: syz 08:13:46 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2002.078699][T31215] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2002.108759][T26210] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2002.308331][T26190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2002.328732][T26211] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2002.335716][T26211] ath9k_htc: Failed to initialize the device [ 2002.347941][T32388] usb 4-1: ath9k_htc: USB layer deinitialized [ 2002.488318][T25259] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2002.495430][T25259] ath9k_htc: Failed to initialize the device [ 2002.507440][T29929] usb 2-1: ath9k_htc: USB layer deinitialized [ 2002.519440][ T1258] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2002.628450][T26210] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2002.637640][T26210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.649985][T25460] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2002.659622][T26210] usb 5-1: Product: syz [ 2002.664410][T26210] usb 5-1: Manufacturer: syz [ 2002.671238][T26210] usb 5-1: SerialNumber: syz [ 2002.708666][T26210] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2002.730539][T32388] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2002.740905][T31215] usb 6-1: USB disconnect, device number 31 [ 2002.868483][T29929] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2002.919599][ T9821] usb 1-1: USB disconnect, device number 23 08:13:47 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2003.248351][T32388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2003.257525][T32388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.268900][T26210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2003.277879][T32388] usb 4-1: Product: syz [ 2003.282779][T32388] usb 4-1: Manufacturer: syz [ 2003.288599][T32388] usb 4-1: SerialNumber: syz [ 2003.300464][ T9774] usb 3-1: USB disconnect, device number 22 [ 2003.338731][T32388] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2003.368363][T26190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2003.375577][T26190] ath9k_htc: Failed to initialize the device [ 2003.381970][ T9821] usb 1-1: ath9k_htc: USB layer deinitialized [ 2003.388899][T29929] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2003.402105][T29929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.411122][T29929] usb 2-1: Product: syz 08:13:48 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2003.416507][T29929] usb 2-1: Manufacturer: syz [ 2003.421535][T29929] usb 2-1: SerialNumber: syz [ 2003.472524][T26371] usb 5-1: USB disconnect, device number 20 [ 2003.479030][T29929] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2003.608312][ T1258] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2003.616389][ T1258] ath9k_htc: Failed to initialize the device [ 2003.628446][T31215] usb 6-1: ath9k_htc: USB layer deinitialized [ 2003.688363][T25460] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2003.695406][T25460] ath9k_htc: Failed to initialize the device [ 2003.704969][ T9774] usb 3-1: ath9k_htc: USB layer deinitialized 08:13:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2003.878330][ T9821] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2003.908325][T32388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:48 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2003.978342][T31215] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2004.058327][T29929] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2004.129935][T25259] usb 4-1: USB disconnect, device number 18 [ 2004.208314][ T9774] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2004.263030][T25435] usb 2-1: USB disconnect, device number 33 [ 2004.328310][T26210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2004.335267][T26210] ath9k_htc: Failed to initialize the device [ 2004.346891][T26371] usb 5-1: ath9k_htc: USB layer deinitialized [ 2004.458349][ T9821] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2004.467580][ T9821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.476141][ T9821] usb 1-1: Product: syz [ 2004.482380][ T9821] usb 1-1: Manufacturer: syz [ 2004.487629][ T9821] usb 1-1: SerialNumber: syz [ 2004.500207][T31215] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2004.513369][T31215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.524874][T31215] usb 6-1: Product: syz [ 2004.532256][T31215] usb 6-1: Manufacturer: syz [ 2004.538065][T31215] usb 6-1: SerialNumber: syz [ 2004.538720][ T9821] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2004.589669][T31215] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:49 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2004.718288][T26371] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2004.728382][ T9774] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2004.737425][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.746194][ T9774] usb 3-1: Product: syz [ 2004.752911][ T9774] usb 3-1: Manufacturer: syz [ 2004.760425][ T9774] usb 3-1: SerialNumber: syz 08:13:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2004.829052][ T9774] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2004.968333][T32388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2004.975291][T32388] ath9k_htc: Failed to initialize the device [ 2004.987123][T25259] usb 4-1: ath9k_htc: USB layer deinitialized [ 2005.128342][T29929] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2005.135258][T29929] ath9k_htc: Failed to initialize the device [ 2005.143170][T25435] usb 2-1: ath9k_htc: USB layer deinitialized [ 2005.158337][T31215] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2005.159608][ T9821] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2005.268422][T26371] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2005.277732][T26371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.287532][T26371] usb 5-1: Product: syz [ 2005.293773][T26371] usb 5-1: Manufacturer: syz [ 2005.300778][T26371] usb 5-1: SerialNumber: syz [ 2005.350064][T26371] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2005.388315][T25259] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2005.397279][T31466] usb 6-1: USB disconnect, device number 32 [ 2005.438418][ T9774] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2005.498330][T25435] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2005.783706][ T1258] usb 1-1: USB disconnect, device number 24 08:13:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2005.948963][T25259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2005.958135][T25259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.969644][T26371] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2005.979444][T25259] usb 4-1: Product: syz [ 2005.984328][T25259] usb 4-1: Manufacturer: syz [ 2005.989734][T25259] usb 4-1: SerialNumber: syz [ 2006.018664][T25435] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2006.027904][T25435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.039027][T25259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2006.048291][T25435] usb 2-1: Product: syz [ 2006.060523][T25435] usb 2-1: Manufacturer: syz [ 2006.065343][T25435] usb 2-1: SerialNumber: syz [ 2006.072996][T25277] usb 3-1: USB disconnect, device number 23 [ 2006.108903][T25435] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2006.171908][T29929] usb 5-1: USB disconnect, device number 21 [ 2006.248311][ T9821] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2006.248336][T31215] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2006.255264][ T9821] ath9k_htc: Failed to initialize the device [ 2006.268734][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized [ 2006.270133][T31215] ath9k_htc: Failed to initialize the device 08:13:50 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2006.295769][T31466] usb 6-1: ath9k_htc: USB layer deinitialized [ 2006.488309][ T9774] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2006.495299][ T9774] ath9k_htc: Failed to initialize the device [ 2006.501579][T25277] usb 3-1: ath9k_htc: USB layer deinitialized 08:13:51 executing program 2: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:51 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2006.668373][T25435] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2006.681166][T31466] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2006.702617][T25259] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2006.758390][ T1258] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2006.876661][T26538] usb 2-1: USB disconnect, device number 34 [ 2006.903983][T32388] usb 4-1: USB disconnect, device number 19 [ 2006.958305][T25277] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2007.048698][T26371] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2007.055641][T26371] ath9k_htc: Failed to initialize the device [ 2007.067663][T29929] usb 5-1: ath9k_htc: USB layer deinitialized [ 2007.268343][T31466] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2007.277457][T31466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.287313][T31466] usb 6-1: Product: syz [ 2007.293783][T31466] usb 6-1: Manufacturer: syz [ 2007.299825][T31466] usb 6-1: SerialNumber: syz 08:13:51 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2007.338654][T31466] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2007.346835][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2007.357192][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.368427][ T1258] usb 1-1: Product: syz [ 2007.372666][ T1258] usb 1-1: Manufacturer: syz [ 2007.377666][ T1258] usb 1-1: SerialNumber: syz 08:13:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2007.419664][T29929] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2007.429416][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2007.508347][T25277] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2007.517517][T25277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.527045][T25277] usb 3-1: Product: syz [ 2007.532864][T25277] usb 3-1: Manufacturer: syz [ 2007.538593][T25277] usb 3-1: SerialNumber: syz [ 2007.588707][T25277] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2007.688330][T25435] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2007.695276][T25435] ath9k_htc: Failed to initialize the device [ 2007.707276][T26538] usb 2-1: ath9k_htc: USB layer deinitialized [ 2007.778347][T25259] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2007.785319][T25259] ath9k_htc: Failed to initialize the device [ 2007.794110][T32388] usb 4-1: ath9k_htc: USB layer deinitialized [ 2007.938328][T29929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2007.947423][T29929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.958584][T29929] usb 5-1: Product: syz [ 2007.962841][T29929] usb 5-1: Manufacturer: syz [ 2007.967734][T29929] usb 5-1: SerialNumber: syz [ 2007.998621][T31466] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2008.011569][T29929] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2008.068374][ T1258] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2008.077392][T26538] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2008.168381][T32388] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2008.228480][T25277] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2008.411655][T26371] usb 6-1: USB disconnect, device number 33 [ 2008.578307][T29929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2008.638708][T26538] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2008.647840][T26538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.662285][T26538] usb 2-1: Product: syz [ 2008.666677][T26538] usb 2-1: Manufacturer: syz [ 2008.675339][T26190] usb 1-1: USB disconnect, device number 25 [ 2008.679402][T26538] usb 2-1: SerialNumber: syz [ 2008.688597][T32388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2008.700050][T32388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.708176][T32388] usb 4-1: Product: syz [ 2008.715846][T32388] usb 4-1: Manufacturer: syz [ 2008.728347][T32388] usb 4-1: SerialNumber: syz [ 2008.741576][T26538] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2008.779996][T32388] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2008.800638][T26364] usb 5-1: USB disconnect, device number 22 [ 2008.850615][T25259] usb 3-1: USB disconnect, device number 24 08:13:53 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2009.048352][T31466] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2009.055279][T31466] ath9k_htc: Failed to initialize the device [ 2009.062743][T26371] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:53 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2009.138320][ T1258] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2009.145251][ T1258] ath9k_htc: Failed to initialize the device [ 2009.151386][T26190] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:53 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2009.288313][T25277] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2009.295253][T25277] ath9k_htc: Failed to initialize the device [ 2009.316797][T25259] usb 3-1: ath9k_htc: USB layer deinitialized 08:13:53 executing program 2: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2009.358702][T25435] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2009.418342][T26538] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2009.438390][T26371] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2009.561676][ T9774] usb 4-1: USB disconnect, device number 20 [ 2009.570212][T26190] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2009.608340][T29929] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2009.615348][T29929] ath9k_htc: Failed to initialize the device [ 2009.626164][T26364] usb 5-1: ath9k_htc: USB layer deinitialized [ 2009.636701][T31215] usb 2-1: USB disconnect, device number 35 [ 2009.798295][T25259] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2009.988671][T26364] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2010.009025][T26371] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2010.018233][T26371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.031828][T26371] usb 6-1: Product: syz 08:13:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2010.036045][T26371] usb 6-1: Manufacturer: syz [ 2010.046573][T26371] usb 6-1: SerialNumber: syz [ 2010.098591][T26190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2010.099020][T26371] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2010.111887][T26190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:13:54 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2010.147535][T26190] usb 1-1: Product: syz [ 2010.152081][T26190] usb 1-1: Manufacturer: syz [ 2010.156784][T26190] usb 1-1: SerialNumber: syz [ 2010.198747][T26190] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2010.368351][T25259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2010.377578][T25259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.391774][T25259] usb 3-1: Product: syz [ 2010.395968][T25259] usb 3-1: Manufacturer: syz [ 2010.405794][T25259] usb 3-1: SerialNumber: syz [ 2010.408329][T25435] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2010.419753][T25435] ath9k_htc: Failed to initialize the device [ 2010.431928][ T9774] usb 4-1: ath9k_htc: USB layer deinitialized [ 2010.449031][T25259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2010.488343][T26538] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2010.495748][T26538] ath9k_htc: Failed to initialize the device [ 2010.507234][T31215] usb 2-1: ath9k_htc: USB layer deinitialized [ 2010.538685][T26364] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2010.547949][T26364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.562065][T26364] usb 5-1: Product: syz [ 2010.566209][T26364] usb 5-1: Manufacturer: syz [ 2010.576193][T26364] usb 5-1: SerialNumber: syz [ 2010.618986][T26364] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:55 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2010.728441][T26371] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2010.768341][T26190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2010.808452][ T9774] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2010.944020][T31466] usb 6-1: USB disconnect, device number 34 [ 2011.088355][T25259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:55 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2011.268391][T26364] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2011.348434][ T9774] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2011.357569][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.372013][ T9774] usb 4-1: Product: syz [ 2011.376165][ T9774] usb 4-1: Manufacturer: syz [ 2011.387155][ T9774] usb 4-1: SerialNumber: syz [ 2011.395334][T31215] usb 1-1: USB disconnect, device number 26 08:13:56 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2011.430213][ T9774] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2011.474990][T25435] usb 5-1: USB disconnect, device number 23 08:13:56 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2011.701532][T29929] usb 3-1: USB disconnect, device number 25 [ 2011.768408][T26371] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2011.775401][T26371] ath9k_htc: Failed to initialize the device [ 2011.786821][T31466] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:56 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2011.848303][T26190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2011.855281][T26190] ath9k_htc: Failed to initialize the device [ 2011.862750][T31215] usb 1-1: ath9k_htc: USB layer deinitialized 08:13:56 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2012.028309][T26210] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2012.068325][ T9774] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:56 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2012.158304][T31466] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2012.168399][T25259] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2012.181543][T25259] ath9k_htc: Failed to initialize the device [ 2012.187905][T29929] usb 3-1: ath9k_htc: USB layer deinitialized [ 2012.271643][T26538] usb 4-1: USB disconnect, device number 21 [ 2012.318309][T31215] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2012.328410][T26364] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2012.335723][T26364] ath9k_htc: Failed to initialize the device [ 2012.345425][T25435] usb 5-1: ath9k_htc: USB layer deinitialized [ 2012.548321][T26210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2012.557700][T26210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.572937][T26210] usb 2-1: Product: syz [ 2012.577084][T26210] usb 2-1: Manufacturer: syz [ 2012.587533][T26210] usb 2-1: SerialNumber: syz [ 2012.629156][T26210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:13:57 executing program 2: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2012.698302][T25435] usb 5-1: new high-speed USB device number 24 using dummy_hcd 08:13:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:57 executing program 2: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2012.741119][T31466] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2012.750318][T31466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.760005][T31466] usb 6-1: Product: syz [ 2012.766423][T31466] usb 6-1: Manufacturer: syz [ 2012.785360][T31466] usb 6-1: SerialNumber: syz [ 2012.830578][T31466] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2012.848397][T31215] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2012.858839][T31215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.872167][T31215] usb 1-1: Product: syz [ 2012.876338][T31215] usb 1-1: Manufacturer: syz 08:13:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2012.884366][T31215] usb 1-1: SerialNumber: syz [ 2012.930082][T31215] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2013.128299][ T9774] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2013.135222][ T9774] ath9k_htc: Failed to initialize the device [ 2013.141900][T26538] usb 4-1: ath9k_htc: USB layer deinitialized [ 2013.188326][T25277] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2013.198450][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2013.218700][T25435] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2013.227918][T25435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.236053][T25435] usb 5-1: Product: syz [ 2013.240590][T25435] usb 5-1: Manufacturer: syz [ 2013.245984][T25435] usb 5-1: SerialNumber: syz [ 2013.288638][T25435] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2013.400588][T26364] usb 2-1: USB disconnect, device number 36 [ 2013.448352][T31466] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2013.508373][T31215] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2013.518363][T26538] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2013.659766][T26371] usb 6-1: USB disconnect, device number 35 [ 2013.748316][T25277] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2013.757602][T25277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.771800][T25277] usb 3-1: Product: syz [ 2013.776021][T25277] usb 3-1: Manufacturer: syz [ 2013.786134][T25277] usb 3-1: SerialNumber: syz [ 2013.828624][T25277] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2013.858320][T25435] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:13:58 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2014.060827][T25259] usb 5-1: USB disconnect, device number 24 [ 2014.089547][T26538] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2014.098797][T26538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.106801][T26538] usb 4-1: Product: syz [ 2014.111452][T26538] usb 4-1: Manufacturer: syz [ 2014.116505][T26538] usb 4-1: SerialNumber: syz [ 2014.126328][ T1258] usb 1-1: USB disconnect, device number 27 08:13:58 executing program 5: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2014.158635][T26538] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2014.248290][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2014.255343][T26210] ath9k_htc: Failed to initialize the device [ 2014.267562][T26364] usb 2-1: ath9k_htc: USB layer deinitialized [ 2014.448364][T25277] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2014.488307][T31466] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2014.495230][T31466] ath9k_htc: Failed to initialize the device [ 2014.501511][T26371] usb 6-1: ath9k_htc: USB layer deinitialized 08:13:59 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:13:59 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2014.568300][T31215] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2014.575245][T31215] ath9k_htc: Failed to initialize the device [ 2014.589997][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized [ 2014.641183][T26364] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2014.768386][T26538] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2014.888302][T25435] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2014.895280][T25435] ath9k_htc: Failed to initialize the device [ 2014.907245][T25259] usb 5-1: ath9k_htc: USB layer deinitialized [ 2014.914250][T26371] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2014.972813][T29929] usb 4-1: USB disconnect, device number 22 [ 2015.068398][ T1258] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2015.072570][T26190] usb 3-1: USB disconnect, device number 26 [ 2015.188758][T26364] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2015.197876][T26364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.213666][T26364] usb 2-1: Product: syz [ 2015.217831][T26364] usb 2-1: Manufacturer: syz [ 2015.228692][T26364] usb 2-1: SerialNumber: syz [ 2015.278580][T26364] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2015.286730][T25259] usb 5-1: new high-speed USB device number 25 using dummy_hcd 08:14:00 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2015.458420][T26371] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2015.467546][T26371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.481484][T26371] usb 6-1: Product: syz [ 2015.485642][T26371] usb 6-1: Manufacturer: syz [ 2015.497139][T26371] usb 6-1: SerialNumber: syz 08:14:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2015.530143][T25277] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2015.538974][T26371] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2015.548090][T25277] ath9k_htc: Failed to initialize the device [ 2015.566814][T26190] usb 3-1: ath9k_htc: USB layer deinitialized [ 2015.598687][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2015.607843][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.624044][ T1258] usb 1-1: Product: syz [ 2015.630443][ T1258] usb 1-1: Manufacturer: syz [ 2015.635828][ T1258] usb 1-1: SerialNumber: syz [ 2015.688653][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2015.848400][T26538] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2015.855351][T25259] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2015.864479][T26538] ath9k_htc: Failed to initialize the device [ 2015.870545][T25259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.879485][T25259] usb 5-1: Product: syz [ 2015.879684][T29929] usb 4-1: ath9k_htc: USB layer deinitialized [ 2015.883689][T25259] usb 5-1: Manufacturer: syz [ 2015.883706][T25259] usb 5-1: SerialNumber: syz [ 2015.898391][T26364] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2015.929671][T25259] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2015.978330][T26190] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2016.103191][ T9774] usb 2-1: USB disconnect, device number 37 [ 2016.168376][T26371] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2016.268360][T29929] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2016.308491][T31466] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2016.498323][T26190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2016.507499][T26190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.515574][T26190] usb 3-1: Product: syz [ 2016.520281][T26190] usb 3-1: Manufacturer: syz [ 2016.525971][T26190] usb 3-1: SerialNumber: syz 08:14:01 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2016.558453][T25259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2016.569149][T26190] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2016.584811][T25435] usb 6-1: USB disconnect, device number 36 [ 2016.763348][T25277] usb 5-1: USB disconnect, device number 25 [ 2016.788715][T29929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2016.797766][T29929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.807763][T29929] usb 4-1: Product: syz [ 2016.814658][T29929] usb 4-1: Manufacturer: syz [ 2016.821377][T29929] usb 4-1: SerialNumber: syz [ 2016.868564][T29929] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2016.913499][T26538] usb 1-1: USB disconnect, device number 28 [ 2016.968379][T26364] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2016.975308][T26364] ath9k_htc: Failed to initialize the device [ 2016.986488][ T9774] usb 2-1: ath9k_htc: USB layer deinitialized 08:14:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2017.138666][T26190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2017.208316][T26371] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2017.215341][T26371] ath9k_htc: Failed to initialize the device [ 2017.221601][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:01 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:01 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2017.378566][T31466] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2017.385473][ T9774] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2017.393119][T31466] ath9k_htc: Failed to initialize the device [ 2017.407837][T26538] usb 1-1: ath9k_htc: USB layer deinitialized [ 2017.438757][T29929] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2017.578371][T25435] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2017.608291][T25259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2017.615288][T25259] ath9k_htc: Failed to initialize the device [ 2017.621397][T25277] usb 5-1: ath9k_htc: USB layer deinitialized [ 2017.642500][T31215] usb 4-1: USB disconnect, device number 23 [ 2017.755275][T26210] usb 3-1: USB disconnect, device number 27 [ 2017.898294][T26538] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2017.958325][ T9774] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2017.967444][ T9774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.977036][ T9774] usb 2-1: Product: syz [ 2017.983145][ T9774] usb 2-1: Manufacturer: syz [ 2017.990831][T25277] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2017.998491][ T9774] usb 2-1: SerialNumber: syz [ 2018.058817][ T9774] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2018.098334][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 08:14:02 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2018.107427][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.115841][T25435] usb 6-1: Product: syz [ 2018.121663][T25435] usb 6-1: Manufacturer: syz [ 2018.127807][T25435] usb 6-1: SerialNumber: syz [ 2018.168343][T26190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2018.175551][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2018.183696][T26190] ath9k_htc: Failed to initialize the device [ 2018.192373][T26210] usb 3-1: ath9k_htc: USB layer deinitialized 08:14:02 executing program 2: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2018.438360][T26538] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2018.447457][T26538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.458803][T26538] usb 1-1: Product: syz [ 2018.463659][T26538] usb 1-1: Manufacturer: syz [ 2018.468952][T26538] usb 1-1: SerialNumber: syz [ 2018.488296][T29929] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2018.497577][T29929] ath9k_htc: Failed to initialize the device [ 2018.504276][T31215] usb 4-1: ath9k_htc: USB layer deinitialized [ 2018.518621][T26538] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2018.568335][T25277] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2018.577465][T25277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.590623][T25277] usb 5-1: Product: syz [ 2018.595750][T25277] usb 5-1: Manufacturer: syz [ 2018.600588][T25277] usb 5-1: SerialNumber: syz [ 2018.648331][T26210] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2018.648721][T25277] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2018.671199][ T9774] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2018.758318][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2018.858286][T31215] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2018.873956][T25277] usb 2-1: USB disconnect, device number 38 [ 2018.978611][T26371] usb 6-1: USB disconnect, device number 37 [ 2019.138342][T26538] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2019.178359][T26210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2019.187476][T26210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.195522][T26210] usb 3-1: Product: syz [ 2019.201041][T26210] usb 3-1: Manufacturer: syz [ 2019.206133][T26210] usb 3-1: SerialNumber: syz [ 2019.248576][T26210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2019.268836][T25259] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:03 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2019.378563][T31215] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2019.387775][T31215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.397854][T31215] usb 4-1: Product: syz [ 2019.402305][T31215] usb 4-1: Manufacturer: syz [ 2019.407662][T31215] usb 4-1: SerialNumber: syz 08:14:04 executing program 5: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2019.450483][T31215] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2019.474212][T29929] usb 5-1: USB disconnect, device number 26 [ 2019.688290][ T9774] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2019.695245][ T9774] ath9k_htc: Failed to initialize the device [ 2019.702702][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 2019.745194][T26190] usb 1-1: USB disconnect, device number 29 [ 2019.808317][T26210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2019.848684][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2019.855569][T25435] ath9k_htc: Failed to initialize the device [ 2019.867353][T26371] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:04 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2020.023400][T31466] usb 3-1: USB disconnect, device number 28 [ 2020.028671][T31215] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2020.078293][T25277] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2020.168301][T26538] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2020.175333][T26538] ath9k_htc: Failed to initialize the device [ 2020.181428][T26190] usb 1-1: ath9k_htc: USB layer deinitialized 08:14:04 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2020.228296][T26371] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2020.232786][T32388] usb 4-1: USB disconnect, device number 24 [ 2020.338309][T25259] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2020.345447][T25259] ath9k_htc: Failed to initialize the device [ 2020.357409][T29929] usb 5-1: ath9k_htc: USB layer deinitialized 08:14:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2020.638348][T26190] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2020.658326][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2020.667474][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.676901][T25277] usb 2-1: Product: syz [ 2020.683097][T25277] usb 2-1: Manufacturer: syz [ 2020.688764][T25277] usb 2-1: SerialNumber: syz 08:14:05 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2020.710132][T29929] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2020.738740][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2020.828327][T26371] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2020.837511][T26371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.848538][T26371] usb 6-1: Product: syz [ 2020.854928][T26371] usb 6-1: Manufacturer: syz [ 2020.860128][T26371] usb 6-1: SerialNumber: syz [ 2020.891277][T26210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2020.898142][T26210] ath9k_htc: Failed to initialize the device [ 2020.910211][T31466] usb 3-1: ath9k_htc: USB layer deinitialized [ 2020.922279][T26371] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2021.128319][T31215] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2021.135271][T31215] ath9k_htc: Failed to initialize the device [ 2021.141704][T32388] usb 4-1: ath9k_htc: USB layer deinitialized [ 2021.158329][T26190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2021.167380][T26190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.175500][T26190] usb 1-1: Product: syz [ 2021.179739][T26190] usb 1-1: Manufacturer: syz [ 2021.185115][T26190] usb 1-1: SerialNumber: syz [ 2021.228913][T26190] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2021.248591][T29929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2021.257867][T29929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.269959][T29929] usb 5-1: Product: syz [ 2021.274835][T29929] usb 5-1: Manufacturer: syz [ 2021.280798][T29929] usb 5-1: SerialNumber: syz [ 2021.288509][T31466] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2021.328660][T29929] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2021.418330][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2021.498403][T32388] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2021.548358][ T9774] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2021.623161][T26538] usb 2-1: USB disconnect, device number 39 [ 2021.798330][T26190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2021.838356][T31466] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2021.847525][T31466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.855643][T31466] usb 3-1: Product: syz [ 2021.859918][T31466] usb 3-1: Manufacturer: syz [ 2021.864650][T31466] usb 3-1: SerialNumber: syz [ 2021.898372][T29929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2021.909006][T31466] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2022.018369][T32388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2022.018432][T32388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.018451][T32388] usb 4-1: Product: syz [ 2022.018465][T32388] usb 4-1: Manufacturer: syz [ 2022.018478][T32388] usb 4-1: SerialNumber: syz [ 2022.060028][T32388] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:06 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2022.102663][T26210] usb 5-1: USB disconnect, device number 27 [ 2022.162829][T31215] usb 6-1: USB disconnect, device number 38 [ 2022.411506][T25435] usb 1-1: USB disconnect, device number 30 [ 2022.488311][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2022.495452][T25277] ath9k_htc: Failed to initialize the device [ 2022.507799][T26538] usb 2-1: ath9k_htc: USB layer deinitialized 08:14:07 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2022.568316][ T9774] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2022.575329][ T9774] ath9k_htc: Failed to initialize the device [ 2022.587236][T31466] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2022.596767][T31215] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:07 executing program 5: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2022.638337][T32388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2022.801604][T25460] usb 3-1: USB disconnect, device number 29 [ 2022.841762][T26364] usb 4-1: USB disconnect, device number 25 08:14:07 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2022.878294][T26538] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2022.888288][T26190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2022.897666][T26190] ath9k_htc: Failed to initialize the device [ 2022.903973][T25435] usb 1-1: ath9k_htc: USB layer deinitialized [ 2022.968307][T29929] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2022.975402][T29929] ath9k_htc: Failed to initialize the device [ 2022.987273][T26210] usb 5-1: ath9k_htc: USB layer deinitialized [ 2023.058351][T31215] usb 6-1: new high-speed USB device number 39 using dummy_hcd 08:14:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:07 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2023.308283][T25435] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2023.348320][T26210] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2023.468327][T26538] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2023.477517][T26538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.485591][T26538] usb 2-1: Product: syz [ 2023.490017][T26538] usb 2-1: Manufacturer: syz [ 2023.496403][T26538] usb 2-1: SerialNumber: syz [ 2023.538626][T26538] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2023.578356][T31215] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2023.587550][T31215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.603765][T31215] usb 6-1: Product: syz [ 2023.607931][T31215] usb 6-1: Manufacturer: syz [ 2023.618297][T31466] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2023.622104][T31215] usb 6-1: SerialNumber: syz [ 2023.626510][T31466] ath9k_htc: Failed to initialize the device [ 2023.640054][T25460] usb 3-1: ath9k_htc: USB layer deinitialized [ 2023.668586][T31215] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2023.688307][T32388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2023.695325][T32388] ath9k_htc: Failed to initialize the device [ 2023.707420][T26364] usb 4-1: ath9k_htc: USB layer deinitialized [ 2023.838324][T25435] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2023.847491][T25435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.858418][T25435] usb 1-1: Product: syz [ 2023.863271][T25435] usb 1-1: Manufacturer: syz [ 2023.868885][T25435] usb 1-1: SerialNumber: syz [ 2023.879741][T26210] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2023.892393][T26210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.904869][T26210] usb 5-1: Product: syz [ 2023.911488][T25435] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2023.921430][T26210] usb 5-1: Manufacturer: syz [ 2023.928802][T26210] usb 5-1: SerialNumber: syz [ 2023.969061][T26210] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2024.008315][T25460] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2024.068384][T26364] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2024.178311][T26538] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2024.228369][ T19] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2024.381585][T29929] usb 2-1: USB disconnect, device number 40 [ 2024.498329][T25435] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2024.528780][T25460] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2024.537988][T25460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.546212][T26210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2024.557429][T25460] usb 3-1: Product: syz [ 2024.562758][T25460] usb 3-1: Manufacturer: syz [ 2024.568786][T25460] usb 3-1: SerialNumber: syz [ 2024.609204][T25460] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2024.638570][T26364] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2024.647913][T26364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.658615][T26364] usb 4-1: Product: syz [ 2024.666438][T26364] usb 4-1: Manufacturer: syz [ 2024.672500][T26364] usb 4-1: SerialNumber: syz [ 2024.718586][T26364] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2024.759767][T31466] usb 5-1: USB disconnect, device number 28 08:14:09 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2024.873782][T25277] usb 6-1: USB disconnect, device number 39 [ 2025.109375][T32388] usb 1-1: USB disconnect, device number 31 [ 2025.188313][T25460] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2025.208313][T26538] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2025.215313][T26538] ath9k_htc: Failed to initialize the device [ 2025.221524][T29929] usb 2-1: ath9k_htc: USB layer deinitialized 08:14:09 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2025.288375][ T19] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2025.295380][ T19] ath9k_htc: Failed to initialize the device [ 2025.304658][T25277] usb 6-1: ath9k_htc: USB layer deinitialized [ 2025.328324][T26364] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:09 executing program 5: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2025.405234][T26190] usb 3-1: USB disconnect, device number 30 [ 2025.528305][T25435] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2025.533564][ T9774] usb 4-1: USB disconnect, device number 26 [ 2025.536639][T25435] ath9k_htc: Failed to initialize the device [ 2025.552204][T32388] usb 1-1: ath9k_htc: USB layer deinitialized [ 2025.578319][T29929] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2025.608355][T26210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2025.615542][T26210] ath9k_htc: Failed to initialize the device 08:14:10 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2025.629145][T31466] usb 5-1: ath9k_htc: USB layer deinitialized [ 2025.798303][T25277] usb 6-1: new high-speed USB device number 40 using dummy_hcd 08:14:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:10 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2025.988337][T31466] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2026.008311][T32388] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2026.109298][T29929] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2026.119566][T29929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.127537][T29929] usb 2-1: Product: syz [ 2026.134433][T29929] usb 2-1: Manufacturer: syz [ 2026.141592][T29929] usb 2-1: SerialNumber: syz [ 2026.188646][T29929] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2026.248353][T25460] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2026.255313][T25460] ath9k_htc: Failed to initialize the device [ 2026.267149][T26190] usb 3-1: ath9k_htc: USB layer deinitialized [ 2026.368349][T25277] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2026.377484][T25277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.388584][T25277] usb 6-1: Product: syz [ 2026.393553][T25277] usb 6-1: Manufacturer: syz [ 2026.398747][T25277] usb 6-1: SerialNumber: syz [ 2026.408339][T26364] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2026.416134][T26364] ath9k_htc: Failed to initialize the device [ 2026.425244][ T9774] usb 4-1: ath9k_htc: USB layer deinitialized [ 2026.449283][T25277] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2026.528336][T32388] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2026.537502][T32388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.546934][T32388] usb 1-1: Product: syz [ 2026.548847][T31466] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2026.551809][T32388] usb 1-1: Manufacturer: syz [ 2026.566471][T32388] usb 1-1: SerialNumber: syz [ 2026.570170][T31466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.579749][T31466] usb 5-1: Product: syz [ 2026.583945][T31466] usb 5-1: Manufacturer: syz [ 2026.593783][T31466] usb 5-1: SerialNumber: syz [ 2026.619867][T32388] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2026.628659][T26190] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2026.651881][T31466] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2026.748308][T29929] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2026.778297][ T9774] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2026.951034][T26210] usb 2-1: USB disconnect, device number 41 [ 2027.108841][T25277] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2027.148311][T26190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2027.157416][T26190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.166039][T26190] usb 3-1: Product: syz [ 2027.172340][T26190] usb 3-1: Manufacturer: syz [ 2027.177425][T26190] usb 3-1: SerialNumber: syz [ 2027.198325][T32388] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2027.218688][T26190] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2027.268421][T31466] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2027.328453][ T9774] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2027.337597][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.348184][ T9774] usb 4-1: Product: syz [ 2027.352939][ T9774] usb 4-1: Manufacturer: syz [ 2027.358489][ T9774] usb 4-1: SerialNumber: syz [ 2027.398691][ T9774] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:12 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2027.480021][T25460] usb 5-1: USB disconnect, device number 29 [ 2027.731349][T25435] usb 6-1: USB disconnect, device number 40 [ 2027.768291][T29929] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2027.775237][T29929] ath9k_htc: Failed to initialize the device [ 2027.781422][T26190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2027.792080][T26210] usb 2-1: ath9k_htc: USB layer deinitialized [ 2027.806257][ T19] usb 1-1: USB disconnect, device number 32 08:14:12 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2028.000665][T26211] usb 3-1: USB disconnect, device number 31 [ 2028.048318][ T9774] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2028.148293][T26210] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2028.168377][T25277] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2028.175446][T25277] ath9k_htc: Failed to initialize the device [ 2028.187304][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:12 executing program 5: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:12 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2028.248282][T32388] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2028.257370][T32388] ath9k_htc: Failed to initialize the device [ 2028.263823][ T19] usb 1-1: ath9k_htc: USB layer deinitialized [ 2028.282891][T26371] usb 4-1: USB disconnect, device number 27 [ 2028.338347][T31466] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2028.347362][T31466] ath9k_htc: Failed to initialize the device [ 2028.356227][T25460] usb 5-1: ath9k_htc: USB layer deinitialized 08:14:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2028.638313][T25435] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2028.668310][T26210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2028.677401][T26210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.692817][T26210] usb 2-1: Product: syz [ 2028.697010][T26210] usb 2-1: Manufacturer: syz [ 2028.708002][T26210] usb 2-1: SerialNumber: syz [ 2028.716593][T25460] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2028.733931][ T19] usb 1-1: new high-speed USB device number 33 using dummy_hcd 08:14:13 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2028.759047][T26210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2028.808311][T26190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2028.815270][T26190] ath9k_htc: Failed to initialize the device [ 2028.828400][T26211] usb 3-1: ath9k_htc: USB layer deinitialized [ 2029.128319][ T9774] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2029.135277][ T9774] ath9k_htc: Failed to initialize the device [ 2029.143950][T26371] usb 4-1: ath9k_htc: USB layer deinitialized [ 2029.168710][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2029.177831][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.188672][T26211] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2029.197145][T25435] usb 6-1: Product: syz [ 2029.204753][T25435] usb 6-1: Manufacturer: syz [ 2029.209520][T25435] usb 6-1: SerialNumber: syz [ 2029.238748][T25460] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2029.248148][T25460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.256688][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2029.265190][T25460] usb 5-1: Product: syz [ 2029.271717][ T19] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2029.285274][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.293658][T25460] usb 5-1: Manufacturer: syz [ 2029.298423][T25460] usb 5-1: SerialNumber: syz [ 2029.303822][ T19] usb 1-1: Product: syz [ 2029.308898][ T19] usb 1-1: Manufacturer: syz [ 2029.314228][ T19] usb 1-1: SerialNumber: syz [ 2029.330965][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2029.349059][T25460] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2029.359522][ T19] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2029.508301][T26371] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2029.532780][T32388] usb 2-1: USB disconnect, device number 42 [ 2029.718321][T26211] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2029.727421][T26211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.738405][T26211] usb 3-1: Product: syz [ 2029.744022][T26211] usb 3-1: Manufacturer: syz [ 2029.750437][T26211] usb 3-1: SerialNumber: syz [ 2029.788934][T26211] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2029.888325][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2029.928367][T25460] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2029.938449][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:14 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2030.070147][T26371] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2030.079592][T26371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.087663][T26371] usb 4-1: Product: syz [ 2030.095699][T26371] usb 4-1: Manufacturer: syz [ 2030.100658][T26371] usb 4-1: SerialNumber: syz [ 2030.145031][T31466] usb 5-1: USB disconnect, device number 30 [ 2030.151289][T26371] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2030.358351][T26211] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2030.408348][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2030.415378][T26210] ath9k_htc: Failed to initialize the device [ 2030.427563][T32388] usb 2-1: ath9k_htc: USB layer deinitialized [ 2030.525487][T29929] usb 6-1: USB disconnect, device number 41 [ 2030.546641][T26190] usb 1-1: USB disconnect, device number 33 [ 2030.568198][T26201] usb 3-1: USB disconnect, device number 32 08:14:15 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 2030.788284][T32388] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2030.788308][T26371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2030.968292][ T19] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2030.975218][T25460] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2030.982153][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2030.989153][T25435] ath9k_htc: Failed to initialize the device [ 2030.995155][T29929] usb 6-1: ath9k_htc: USB layer deinitialized [ 2031.007691][ T19] ath9k_htc: Failed to initialize the device 08:14:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2031.013740][T25460] ath9k_htc: Failed to initialize the device [ 2031.029480][T26190] usb 1-1: ath9k_htc: USB layer deinitialized [ 2031.041634][T25277] usb 4-1: USB disconnect, device number 28 [ 2031.047960][T31466] usb 5-1: ath9k_htc: USB layer deinitialized 08:14:15 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:15 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2031.318312][T32388] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2031.327637][T32388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.335894][T32388] usb 2-1: Product: syz [ 2031.341626][T32388] usb 2-1: Manufacturer: syz [ 2031.346519][T32388] usb 2-1: SerialNumber: syz [ 2031.368303][T26211] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2031.375436][T26211] ath9k_htc: Failed to initialize the device [ 2031.381525][T26201] usb 3-1: ath9k_htc: USB layer deinitialized [ 2031.388721][T32388] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2031.428319][T31466] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2031.488299][T26190] usb 1-1: new high-speed USB device number 34 using dummy_hcd 08:14:16 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2031.568281][T29929] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2031.748715][T26201] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2031.848335][T26371] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2031.855260][T26371] ath9k_htc: Failed to initialize the device [ 2031.867209][T25277] usb 4-1: ath9k_htc: USB layer deinitialized [ 2031.958309][T32388] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2032.008326][T31466] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2032.008753][T26190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2032.020170][T31466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.027819][T26190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.035297][T31466] usb 5-1: Product: syz [ 2032.051887][T31466] usb 5-1: Manufacturer: syz [ 2032.057037][T31466] usb 5-1: SerialNumber: syz [ 2032.059237][T26190] usb 1-1: Product: syz [ 2032.065880][T26190] usb 1-1: Manufacturer: syz [ 2032.072831][T26190] usb 1-1: SerialNumber: syz [ 2032.088676][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2032.100042][T31466] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2032.104178][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.120279][T26190] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2032.143402][T29929] usb 6-1: Product: syz [ 2032.147761][T29929] usb 6-1: Manufacturer: syz [ 2032.153004][T29929] usb 6-1: SerialNumber: syz [ 2032.183402][ T19] usb 2-1: USB disconnect, device number 43 [ 2032.199305][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2032.250296][T25277] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2032.288372][T26201] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2032.297659][T26201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.307858][T26201] usb 3-1: Product: syz [ 2032.314380][T26201] usb 3-1: Manufacturer: syz [ 2032.320508][T26201] usb 3-1: SerialNumber: syz [ 2032.360807][T26201] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:17 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2032.728374][T26190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2032.748328][T26364] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2032.778330][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2032.828382][T25277] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2032.837807][T25277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.845965][T25277] usb 4-1: Product: syz [ 2032.850262][T25277] usb 4-1: Manufacturer: syz [ 2032.855030][T25277] usb 4-1: SerialNumber: syz [ 2032.898640][T25277] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2032.928382][T26201] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2032.952202][T25460] usb 5-1: USB disconnect, device number 31 [ 2032.974495][T32388] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2032.981561][T32388] ath9k_htc: Failed to initialize the device [ 2032.987607][ T19] usb 2-1: ath9k_htc: USB layer deinitialized [ 2033.008009][T26211] usb 6-1: USB disconnect, device number 42 [ 2033.138359][T26371] usb 3-1: USB disconnect, device number 33 [ 2033.334775][T25435] usb 1-1: USB disconnect, device number 34 [ 2033.354925][ T19] usb 2-1: new high-speed USB device number 44 using dummy_hcd 08:14:18 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) 08:14:18 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2033.518422][T25277] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2033.729485][ T9774] usb 4-1: USB disconnect, device number 29 [ 2033.768293][T26190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive 08:14:18 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2033.768292][T26364] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2033.768319][T26190] ath9k_htc: Failed to initialize the device [ 2033.775275][T26364] ath9k_htc: Failed to initialize the device [ 2033.784076][T25435] usb 1-1: ath9k_htc: USB layer deinitialized [ 2033.803350][T25460] usb 5-1: ath9k_htc: USB layer deinitialized [ 2033.848595][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2033.855585][T29929] ath9k_htc: Failed to initialize the device [ 2033.862004][T26211] usb 6-1: ath9k_htc: USB layer deinitialized [ 2033.898335][ T19] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2033.907429][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.918817][ T19] usb 2-1: Product: syz [ 2033.925076][ T19] usb 2-1: Manufacturer: syz [ 2033.930364][ T19] usb 2-1: SerialNumber: syz [ 2033.970511][ T19] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2034.008301][T26201] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2034.015397][T26201] ath9k_htc: Failed to initialize the device [ 2034.027859][T26371] usb 3-1: ath9k_htc: USB layer deinitialized [ 2034.168289][T25460] usb 5-1: new high-speed USB device number 32 using dummy_hcd 08:14:18 executing program 3: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2034.218398][T26211] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2034.268270][T25435] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2034.398299][T26371] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2034.538318][ T19] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2034.578377][T25277] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2034.585354][T25277] ath9k_htc: Failed to initialize the device [ 2034.594378][ T9774] usb 4-1: ath9k_htc: USB layer deinitialized [ 2034.688335][T25460] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2034.697482][T25460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.711752][T25460] usb 5-1: Product: syz [ 2034.715902][T25460] usb 5-1: Manufacturer: syz [ 2034.725923][T25460] usb 5-1: SerialNumber: syz [ 2034.744805][T31466] usb 2-1: USB disconnect, device number 44 [ 2034.748352][T26211] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2034.770935][T25460] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2034.782133][T26211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.790367][T25435] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2034.801469][T25435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.812912][T26211] usb 6-1: Product: syz [ 2034.817133][T25435] usb 1-1: Product: syz [ 2034.824413][T26211] usb 6-1: Manufacturer: syz [ 2034.830434][T25435] usb 1-1: Manufacturer: syz [ 2034.836380][T25435] usb 1-1: SerialNumber: syz [ 2034.842927][T26211] usb 6-1: SerialNumber: syz [ 2034.888794][T26211] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2034.897205][T25435] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2034.958333][T26371] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2034.967510][ T9774] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2034.975276][T26371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.992975][T26371] usb 3-1: Product: syz [ 2034.997135][T26371] usb 3-1: Manufacturer: syz [ 2035.007937][T26371] usb 3-1: SerialNumber: syz [ 2035.049415][T26371] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:19 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2035.408373][T25460] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2035.468388][T26211] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2035.477411][T25435] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2035.528348][ T9774] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2035.538475][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.546584][ T9774] usb 4-1: Product: syz [ 2035.551337][ T9774] usb 4-1: Manufacturer: syz [ 2035.557392][ T9774] usb 4-1: SerialNumber: syz [ 2035.598655][ T9774] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2035.608454][ T19] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2035.616515][ T19] ath9k_htc: Failed to initialize the device [ 2035.627749][T31466] usb 2-1: ath9k_htc: USB layer deinitialized [ 2035.637974][T25277] usb 5-1: USB disconnect, device number 32 [ 2035.678348][T26371] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2035.688003][T29929] usb 6-1: USB disconnect, device number 43 [ 2035.892911][T26538] usb 3-1: USB disconnect, device number 34 [ 2035.988288][T31466] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2036.075239][T25259] usb 1-1: USB disconnect, device number 35 08:14:20 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) 08:14:20 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2036.219823][ T9774] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:20 executing program 2: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2036.428081][ T9821] usb 4-1: USB disconnect, device number 30 [ 2036.488323][T25435] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2036.495377][T26211] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2036.502285][T25460] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2036.509215][T25460] ath9k_htc: Failed to initialize the device [ 2036.515265][T25435] ath9k_htc: Failed to initialize the device [ 2036.515263][T25277] usb 5-1: ath9k_htc: USB layer deinitialized [ 2036.531703][T26211] ath9k_htc: Failed to initialize the device [ 2036.537747][T29929] usb 6-1: ath9k_htc: USB layer deinitialized [ 2036.539945][T31466] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2036.554016][T25259] usb 1-1: ath9k_htc: USB layer deinitialized [ 2036.573251][T31466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:14:21 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2036.587634][T31466] usb 2-1: Product: syz [ 2036.592003][T31466] usb 2-1: Manufacturer: syz [ 2036.600107][T31466] usb 2-1: SerialNumber: syz [ 2036.640135][T31466] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2036.728297][T26371] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2036.735291][T26371] ath9k_htc: Failed to initialize the device [ 2036.743659][T26538] usb 3-1: ath9k_htc: USB layer deinitialized 08:14:21 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2036.868301][T25277] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2036.898287][T29929] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2037.028302][T25259] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2037.118294][T26538] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2037.288345][ T9774] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2037.295290][T31466] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2037.305236][ T9774] ath9k_htc: Failed to initialize the device [ 2037.311897][ T9821] usb 4-1: ath9k_htc: USB layer deinitialized [ 2037.418293][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2037.427395][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.438372][T25277] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2037.443936][T29929] usb 6-1: Product: syz [ 2037.449543][T25277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.460876][T25277] usb 5-1: Product: syz [ 2037.463342][T29929] usb 6-1: Manufacturer: syz [ 2037.465307][T25277] usb 5-1: Manufacturer: syz [ 2037.475203][T25277] usb 5-1: SerialNumber: syz [ 2037.477068][T29929] usb 6-1: SerialNumber: syz [ 2037.507482][ T1258] usb 2-1: USB disconnect, device number 45 [ 2037.530256][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2037.539073][T25277] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2037.618337][T25259] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2037.627511][T25259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.635754][T25259] usb 1-1: Product: syz [ 2037.640363][T25259] usb 1-1: Manufacturer: syz [ 2037.645225][T25259] usb 1-1: SerialNumber: syz [ 2037.678348][ T9821] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2037.698748][T26538] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2037.708147][T25259] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2037.717412][T26538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.727933][T26538] usb 3-1: Product: syz [ 2037.733229][T26538] usb 3-1: Manufacturer: syz [ 2037.737881][T26538] usb 3-1: SerialNumber: syz [ 2037.788759][T26538] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:22 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2038.098345][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2038.178708][T25277] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2038.248782][ T9821] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2038.257910][ T9821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.272297][ T9821] usb 4-1: Product: syz [ 2038.276509][ T9821] usb 4-1: Manufacturer: syz [ 2038.287112][ T9821] usb 4-1: SerialNumber: syz [ 2038.322180][T25318] usb 6-1: USB disconnect, device number 44 [ 2038.331210][T31466] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2038.339947][T31466] ath9k_htc: Failed to initialize the device [ 2038.348654][ T9821] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2038.363375][ T1258] usb 2-1: ath9k_htc: USB layer deinitialized [ 2038.389663][T25435] usb 5-1: USB disconnect, device number 33 [ 2038.406139][T25259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2038.458372][T26538] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2038.665881][T25460] usb 3-1: USB disconnect, device number 35 [ 2038.748377][ T1258] usb 2-1: new high-speed USB device number 46 using dummy_hcd 08:14:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:23 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 2038.988400][ T9821] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2039.005445][T26211] usb 1-1: USB disconnect, device number 36 08:14:23 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2039.128319][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2039.135256][T29929] ath9k_htc: Failed to initialize the device [ 2039.142957][T25318] usb 6-1: ath9k_htc: USB layer deinitialized [ 2039.194834][T26371] usb 4-1: USB disconnect, device number 31 [ 2039.218343][T25277] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2039.225365][T25277] ath9k_htc: Failed to initialize the device [ 2039.232705][T25435] usb 5-1: ath9k_htc: USB layer deinitialized [ 2039.318304][ T1258] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2039.327768][ T1258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.339446][ T1258] usb 2-1: Product: syz [ 2039.344013][ T1258] usb 2-1: Manufacturer: syz [ 2039.349468][ T1258] usb 2-1: SerialNumber: syz [ 2039.399972][ T1258] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2039.448411][T25259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2039.455418][T25259] ath9k_htc: Failed to initialize the device [ 2039.461717][T26211] usb 1-1: ath9k_htc: USB layer deinitialized 08:14:24 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2039.508297][T25318] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2039.538359][T26538] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2039.546288][T26538] ath9k_htc: Failed to initialize the device [ 2039.559127][T25460] usb 3-1: ath9k_htc: USB layer deinitialized [ 2039.588290][T25435] usb 5-1: new high-speed USB device number 34 using dummy_hcd 08:14:24 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2039.918299][T26211] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2039.925906][T25460] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2040.008327][ T9821] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2040.015262][ T1258] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2040.024345][ T9821] ath9k_htc: Failed to initialize the device [ 2040.031338][T26371] usb 4-1: ath9k_htc: USB layer deinitialized [ 2040.078366][T25318] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2040.087527][T25318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.099159][T25318] usb 6-1: Product: syz [ 2040.105245][T25318] usb 6-1: Manufacturer: syz [ 2040.109382][T25435] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2040.111574][T25318] usb 6-1: SerialNumber: syz [ 2040.128657][T25435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.142580][T25435] usb 5-1: Product: syz [ 2040.147712][T25435] usb 5-1: Manufacturer: syz [ 2040.153074][T25435] usb 5-1: SerialNumber: syz [ 2040.179281][T25318] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2040.199007][T25435] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2040.221516][T25277] usb 2-1: USB disconnect, device number 46 [ 2040.428306][T26371] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2040.448344][T25460] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2040.457444][T26211] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2040.468025][T25460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.476065][T26211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.485305][T25460] usb 3-1: Product: syz [ 2040.491884][T26211] usb 1-1: Product: syz [ 2040.497155][T26211] usb 1-1: Manufacturer: syz [ 2040.504477][T25460] usb 3-1: Manufacturer: syz [ 2040.509173][T25460] usb 3-1: SerialNumber: syz [ 2040.515592][T26211] usb 1-1: SerialNumber: syz [ 2040.559951][T25460] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2040.571015][T26211] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:25 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 2040.768315][T25435] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2040.818319][T25318] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2040.958379][T26371] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2040.967429][T26371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.984378][T26371] usb 4-1: Product: syz [ 2040.991724][T26371] usb 4-1: Manufacturer: syz [ 2040.992799][ T19] usb 5-1: USB disconnect, device number 34 [ 2040.997832][T26371] usb 4-1: SerialNumber: syz [ 2041.048344][ T1258] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2041.055252][ T1258] ath9k_htc: Failed to initialize the device [ 2041.065668][T26371] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2041.085318][T29929] usb 6-1: USB disconnect, device number 45 [ 2041.085721][T25277] usb 2-1: ath9k_htc: USB layer deinitialized [ 2041.138322][T25460] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2041.147356][T26211] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2041.344018][T26190] usb 3-1: USB disconnect, device number 36 08:14:26 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2041.478289][T25277] usb 2-1: new high-speed USB device number 47 using dummy_hcd 08:14:26 executing program 5: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2041.688298][T26371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2041.744672][ T9821] usb 1-1: USB disconnect, device number 37 [ 2041.848275][T25318] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2041.848290][T25435] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2041.855319][T25318] ath9k_htc: Failed to initialize the device [ 2041.864628][T25435] ath9k_htc: Failed to initialize the device [ 2041.875122][ T19] usb 5-1: ath9k_htc: USB layer deinitialized 08:14:26 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2041.896952][T29929] usb 6-1: ath9k_htc: USB layer deinitialized [ 2041.910912][T26201] usb 4-1: USB disconnect, device number 32 [ 2042.068307][T25277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2042.077516][T25277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.085583][T25277] usb 2-1: Product: syz [ 2042.091115][T25277] usb 2-1: Manufacturer: syz [ 2042.097219][T25277] usb 2-1: SerialNumber: syz [ 2042.148664][T25277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2042.168284][T25460] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2042.175181][T26211] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2042.182073][T25460] ath9k_htc: Failed to initialize the device [ 2042.188062][T26211] ath9k_htc: Failed to initialize the device 08:14:26 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2042.188090][ T9821] usb 1-1: ath9k_htc: USB layer deinitialized [ 2042.204662][T26190] usb 3-1: ath9k_htc: USB layer deinitialized [ 2042.228338][ T19] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2042.268302][T29929] usb 6-1: new high-speed USB device number 46 using dummy_hcd 08:14:26 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2042.558276][T26190] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2042.658345][ T9821] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2042.728308][T26371] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2042.735328][T26371] ath9k_htc: Failed to initialize the device [ 2042.747029][T26201] usb 4-1: ath9k_htc: USB layer deinitialized [ 2042.753309][ T19] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2042.762996][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.772249][ T19] usb 5-1: Product: syz [ 2042.783035][ T19] usb 5-1: Manufacturer: syz [ 2042.787670][ T19] usb 5-1: SerialNumber: syz [ 2042.792661][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2042.803306][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.811090][T25277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2042.818503][T29929] usb 6-1: Product: syz [ 2042.836002][T29929] usb 6-1: Manufacturer: syz [ 2042.842625][T29929] usb 6-1: SerialNumber: syz [ 2042.850492][ T19] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2042.898948][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2043.014799][T26210] usb 2-1: USB disconnect, device number 47 [ 2043.098391][T26190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2043.107513][T26190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.118765][T26201] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2043.127003][T26190] usb 3-1: Product: syz [ 2043.131992][T26190] usb 3-1: Manufacturer: syz [ 2043.136620][T26190] usb 3-1: SerialNumber: syz [ 2043.178666][T26190] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2043.248302][ T9821] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2043.257404][ T9821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.265947][ T9821] usb 1-1: Product: syz [ 2043.272351][ T9821] usb 1-1: Manufacturer: syz [ 2043.277499][ T9821] usb 1-1: SerialNumber: syz [ 2043.318565][ T9821] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2043.438308][ T19] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2043.478395][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:28 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 2043.638449][T26201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2043.647585][T26201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.662630][T26201] usb 4-1: Product: syz [ 2043.664230][ T1258] usb 5-1: USB disconnect, device number 35 [ 2043.673897][T26201] usb 4-1: Manufacturer: syz [ 2043.684189][T26201] usb 4-1: SerialNumber: syz [ 2043.721284][T25460] usb 6-1: USB disconnect, device number 46 [ 2043.732097][T26201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2043.748469][T26190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2043.858319][T25277] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2043.865395][T25277] ath9k_htc: Failed to initialize the device [ 2043.871481][T26210] usb 2-1: ath9k_htc: USB layer deinitialized [ 2043.951525][T25318] usb 3-1: USB disconnect, device number 37 [ 2043.988304][ T9821] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:28 executing program 4: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:28 executing program 5: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2044.228302][T26210] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2044.318294][T26201] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:29 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2044.488299][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2044.495265][ T19] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2044.502274][T29929] ath9k_htc: Failed to initialize the device [ 2044.516379][ T19] ath9k_htc: Failed to initialize the device [ 2044.524185][T26371] usb 4-1: USB disconnect, device number 33 [ 2044.529660][T25460] usb 6-1: ath9k_htc: USB layer deinitialized [ 2044.536794][ T1258] usb 5-1: ath9k_htc: USB layer deinitialized [ 2044.593751][T25259] usb 1-1: USB disconnect, device number 38 [ 2044.758323][T26210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2044.767583][T26210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.781649][T26210] usb 2-1: Product: syz [ 2044.785851][T26210] usb 2-1: Manufacturer: syz [ 2044.796405][T26210] usb 2-1: SerialNumber: syz [ 2044.808286][T26190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2044.817657][T26190] ath9k_htc: Failed to initialize the device [ 2044.831697][T25318] usb 3-1: ath9k_htc: USB layer deinitialized [ 2044.839329][T26210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2044.898326][T25460] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2044.918299][ T1258] usb 5-1: new high-speed USB device number 36 using dummy_hcd 08:14:29 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:29 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2045.048296][ T9821] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2045.055204][ T9821] ath9k_htc: Failed to initialize the device [ 2045.063061][T25259] usb 1-1: ath9k_htc: USB layer deinitialized [ 2045.208363][T25318] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2045.368349][T26201] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2045.378796][T26201] ath9k_htc: Failed to initialize the device [ 2045.384827][T26371] usb 4-1: ath9k_htc: USB layer deinitialized [ 2045.408318][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2045.420226][T25460] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2045.430022][T25460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.438022][T25460] usb 6-1: Product: syz [ 2045.442626][T25460] usb 6-1: Manufacturer: syz [ 2045.447216][T25460] usb 6-1: SerialNumber: syz [ 2045.479008][ T1258] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2045.488083][ T1258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.488676][T25460] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2045.515771][ T1258] usb 5-1: Product: syz [ 2045.519990][ T1258] usb 5-1: Manufacturer: syz [ 2045.524575][ T1258] usb 5-1: SerialNumber: syz [ 2045.538945][T25259] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2045.569285][ T1258] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2045.611366][ T19] usb 2-1: USB disconnect, device number 48 [ 2045.758401][T26371] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2045.798342][T25318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2045.807501][T25318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.821788][T25318] usb 3-1: Product: syz [ 2045.825964][T25318] usb 3-1: Manufacturer: syz [ 2045.836235][T25318] usb 3-1: SerialNumber: syz [ 2045.879074][T25318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2046.058311][T25460] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2046.098347][T25259] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 08:14:30 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 2046.107509][T25259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.122323][T25259] usb 1-1: Product: syz [ 2046.132713][T25259] usb 1-1: Manufacturer: syz [ 2046.137461][T25259] usb 1-1: SerialNumber: syz [ 2046.168342][ T1258] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2046.188780][T25259] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2046.284514][ T9821] usb 6-1: USB disconnect, device number 47 [ 2046.309132][T26371] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2046.318211][T26371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.332789][T26371] usb 4-1: Product: syz [ 2046.337227][T26371] usb 4-1: Manufacturer: syz [ 2046.347589][T26371] usb 4-1: SerialNumber: syz [ 2046.386726][T26538] usb 5-1: USB disconnect, device number 36 [ 2046.393908][T26371] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2046.488313][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2046.495318][T26210] ath9k_htc: Failed to initialize the device [ 2046.503252][ T19] usb 2-1: ath9k_htc: USB layer deinitialized [ 2046.510194][T25318] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2046.713219][ T9774] usb 3-1: USB disconnect, device number 38 08:14:31 executing program 5: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:31 executing program 4: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2046.858300][ T19] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2046.868316][T25259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2047.058412][T26371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2047.128334][T25460] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2047.135378][T25460] ath9k_htc: Failed to initialize the device [ 2047.141853][ T9821] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:31 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2047.218445][ T1258] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2047.225349][ T1258] ath9k_htc: Failed to initialize the device [ 2047.233059][T26538] usb 5-1: ath9k_htc: USB layer deinitialized [ 2047.277125][T26190] usb 4-1: USB disconnect, device number 34 [ 2047.378330][ T19] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2047.387433][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.398305][ T19] usb 2-1: Product: syz [ 2047.403321][ T19] usb 2-1: Manufacturer: syz [ 2047.410066][ T19] usb 2-1: SerialNumber: syz [ 2047.448714][ T19] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2047.488530][ T19] usb 1-1: USB disconnect, device number 39 [ 2047.498458][ T9821] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2047.528304][T25318] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2047.535292][T25318] ath9k_htc: Failed to initialize the device [ 2047.547095][ T9774] usb 3-1: ath9k_htc: USB layer deinitialized [ 2047.598355][T26538] usb 5-1: new high-speed USB device number 37 using dummy_hcd 08:14:32 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2047.908289][ T9774] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2047.928324][T25259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2047.935336][T25259] ath9k_htc: Failed to initialize the device [ 2047.946679][ T19] usb 1-1: ath9k_htc: USB layer deinitialized 08:14:32 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2048.018330][T26201] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2048.068357][ T9821] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2048.077470][ T9821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.091594][ T9821] usb 6-1: Product: syz [ 2048.095759][ T9821] usb 6-1: Manufacturer: syz [ 2048.106608][T26371] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2048.113523][T26371] ath9k_htc: Failed to initialize the device [ 2048.125593][ T9821] usb 6-1: SerialNumber: syz [ 2048.133652][T26190] usb 4-1: ath9k_htc: USB layer deinitialized [ 2048.168409][T26538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2048.177608][T26538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.191456][ T9821] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2048.199774][T26538] usb 5-1: Product: syz [ 2048.203935][T26538] usb 5-1: Manufacturer: syz [ 2048.220156][T26538] usb 5-1: SerialNumber: syz [ 2048.233297][T29929] usb 2-1: USB disconnect, device number 49 [ 2048.269165][T26538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2048.408307][ T19] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2048.458311][ T9774] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2048.467454][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.475853][ T9774] usb 3-1: Product: syz [ 2048.478930][T26190] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2048.480916][ T9774] usb 3-1: Manufacturer: syz [ 2048.493693][ T9774] usb 3-1: SerialNumber: syz [ 2048.548590][ T9774] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:33 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 2048.838360][ T9821] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2048.888443][T26538] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2048.928326][ T19] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2048.937663][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.952009][ T19] usb 1-1: Product: syz [ 2048.956220][ T19] usb 1-1: Manufacturer: syz [ 2048.962460][ T19] usb 1-1: SerialNumber: syz [ 2048.998626][T26190] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2049.008107][T26190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.016572][ T19] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2049.026356][T26190] usb 4-1: Product: syz [ 2049.032500][T26190] usb 4-1: Manufacturer: syz [ 2049.037363][T26190] usb 4-1: SerialNumber: syz [ 2049.049836][T26201] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2049.060913][T26201] ath9k_htc: Failed to initialize the device [ 2049.073447][T29929] usb 2-1: ath9k_htc: USB layer deinitialized [ 2049.087091][T25259] usb 6-1: USB disconnect, device number 48 [ 2049.099785][T26190] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2049.168319][ T9774] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2049.373411][ T1258] usb 3-1: USB disconnect, device number 39 [ 2049.428322][T29929] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2049.522451][T25460] usb 5-1: USB disconnect, device number 37 08:14:34 executing program 5: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2049.598326][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2049.678384][T26190] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:34 executing program 2: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2049.848300][ T9821] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2049.855252][ T9821] ath9k_htc: Failed to initialize the device [ 2049.861276][T25259] usb 6-1: ath9k_htc: USB layer deinitialized [ 2049.890279][T26210] usb 4-1: USB disconnect, device number 35 [ 2049.928279][T26538] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2049.935504][T26538] ath9k_htc: Failed to initialize the device [ 2049.943311][T25460] usb 5-1: ath9k_htc: USB layer deinitialized [ 2049.950360][T29929] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2049.963048][T29929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.971577][T29929] usb 2-1: Product: syz [ 2049.977608][T29929] usb 2-1: Manufacturer: syz [ 2049.983088][T29929] usb 2-1: SerialNumber: syz 08:14:34 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2050.028729][T29929] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2050.204541][T26201] usb 1-1: USB disconnect, device number 40 [ 2050.228293][T25259] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2050.248362][ T9774] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2050.255314][ T9774] ath9k_htc: Failed to initialize the device [ 2050.267172][ T1258] usb 3-1: ath9k_htc: USB layer deinitialized 08:14:34 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2050.418643][T25460] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2050.598298][T29929] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2050.638326][ T1258] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2050.648305][ T19] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2050.656900][ T19] ath9k_htc: Failed to initialize the device [ 2050.666896][T26201] usb 1-1: ath9k_htc: USB layer deinitialized 08:14:35 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2050.728294][T26190] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2050.735384][T26190] ath9k_htc: Failed to initialize the device [ 2050.745689][T26210] usb 4-1: ath9k_htc: USB layer deinitialized [ 2050.768773][T25259] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2050.777827][T25259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.786159][T25259] usb 6-1: Product: syz [ 2050.792844][T25259] usb 6-1: Manufacturer: syz [ 2050.798162][T25259] usb 6-1: SerialNumber: syz [ 2050.816919][T25318] usb 2-1: USB disconnect, device number 50 [ 2050.858677][T25259] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:35 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2050.938760][T25460] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2050.947889][T25460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.963065][T25460] usb 5-1: Product: syz [ 2050.967214][T25460] usb 5-1: Manufacturer: syz [ 2050.977324][T25460] usb 5-1: SerialNumber: syz [ 2051.018561][T25460] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2051.118285][T26201] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2051.228381][ T1258] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2051.237744][ T1258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.247669][ T1258] usb 3-1: Product: syz [ 2051.253189][ T1258] usb 3-1: Manufacturer: syz [ 2051.260692][ T1258] usb 3-1: SerialNumber: syz 08:14:35 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) [ 2051.308610][ T1258] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:36 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2051.468296][T26371] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2051.588329][T25460] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2051.608339][T29929] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2051.615231][T29929] ath9k_htc: Failed to initialize the device [ 2051.627437][T25318] usb 2-1: ath9k_htc: USB layer deinitialized [ 2051.638644][T26201] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2051.647733][T26201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.662917][T26201] usb 1-1: Product: syz [ 2051.667600][T26201] usb 1-1: Manufacturer: syz [ 2051.678425][T26201] usb 1-1: SerialNumber: syz [ 2051.718529][T26201] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2051.804375][ T19] usb 5-1: USB disconnect, device number 38 08:14:36 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2051.968342][ T1258] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2051.998367][T25318] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2052.097326][T26210] usb 6-1: USB disconnect, device number 49 [ 2052.173654][T26190] usb 3-1: USB disconnect, device number 40 08:14:36 executing program 4: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) [ 2052.268314][ T9774] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2052.278286][T26201] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2052.488299][T26371] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2052.495443][T26371] ath9k_htc: Failed to initialize the device [ 2052.508025][T26210] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:37 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2052.539432][T25318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2052.548804][T25318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.556772][T25318] usb 2-1: Product: syz [ 2052.569490][T25318] usb 2-1: Manufacturer: syz [ 2052.574240][T25318] usb 2-1: SerialNumber: syz 08:14:37 executing program 2: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2052.628703][T25318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2052.650092][T25460] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2052.657439][T25460] ath9k_htc: Failed to initialize the device [ 2052.664107][ T19] usb 5-1: ath9k_htc: USB layer deinitialized [ 2052.848355][ T9774] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2052.857485][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.871646][ T9774] usb 4-1: Product: syz [ 2052.875938][ T9774] usb 4-1: Manufacturer: syz [ 2052.887215][ T9774] usb 4-1: SerialNumber: syz [ 2052.897671][T25259] usb 1-1: USB disconnect, device number 41 [ 2052.928952][ T9774] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2053.018284][ T19] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2053.025988][T26210] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2053.048313][ T1258] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2053.055329][ T1258] ath9k_htc: Failed to initialize the device [ 2053.066214][T26190] usb 3-1: ath9k_htc: USB layer deinitialized [ 2053.258337][T25318] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:14:37 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2053.368368][T26201] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2053.376417][T26201] ath9k_htc: Failed to initialize the device [ 2053.382552][T25259] usb 1-1: ath9k_htc: USB layer deinitialized [ 2053.418287][T26190] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2053.471495][T32388] usb 2-1: USB disconnect, device number 51 [ 2053.518328][ T9774] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2053.548373][ T19] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2053.557581][T26210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2053.567750][T26210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.575809][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.586288][T26210] usb 6-1: Product: syz [ 2053.591986][T26210] usb 6-1: Manufacturer: syz [ 2053.597100][T26210] usb 6-1: SerialNumber: syz [ 2053.603035][ T19] usb 5-1: Product: syz [ 2053.608418][ T19] usb 5-1: Manufacturer: syz [ 2053.614118][ T19] usb 5-1: SerialNumber: syz [ 2053.658671][T26210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2053.667233][ T19] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2053.722636][T26371] usb 4-1: USB disconnect, device number 36 [ 2053.788277][T25259] usb 1-1: new high-speed USB device number 42 using dummy_hcd 08:14:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2053.948528][T26190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2053.957636][T26190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.967905][T26190] usb 3-1: Product: syz [ 2053.976359][T26190] usb 3-1: Manufacturer: syz [ 2053.982606][T26190] usb 3-1: SerialNumber: syz [ 2054.029077][T26190] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:38 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2054.238320][ T19] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2054.247541][T26210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2054.328447][T25318] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2054.336200][T25318] ath9k_htc: Failed to initialize the device [ 2054.342456][T32388] usb 2-1: ath9k_htc: USB layer deinitialized [ 2054.368621][T25259] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2054.377996][T25259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.388265][T25259] usb 1-1: Product: syz [ 2054.394777][T25259] usb 1-1: Manufacturer: syz [ 2054.400696][T25259] usb 1-1: SerialNumber: syz [ 2054.458581][T25259] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2054.481995][ T9821] usb 5-1: USB disconnect, device number 39 [ 2054.492426][ T1258] usb 6-1: USB disconnect, device number 50 [ 2054.568313][ T9774] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2054.575417][ T9774] ath9k_htc: Failed to initialize the device [ 2054.581961][T26371] usb 4-1: ath9k_htc: USB layer deinitialized [ 2054.608328][T26190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2054.698266][T32388] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2054.812132][T26201] usb 3-1: USB disconnect, device number 41 08:14:39 executing program 4: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2054.948271][T26371] usb 4-1: new high-speed USB device number 37 using dummy_hcd 08:14:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2055.098311][T25259] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2055.218306][T32388] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2055.227476][T32388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.235540][T32388] usb 2-1: Product: syz [ 2055.241087][T32388] usb 2-1: Manufacturer: syz [ 2055.245935][T32388] usb 2-1: SerialNumber: syz [ 2055.288382][T26210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2055.295365][T26210] ath9k_htc: Failed to initialize the device [ 2055.301445][ T19] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2055.309623][T32388] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2055.318309][ T19] ath9k_htc: Failed to initialize the device [ 2055.327608][ T1258] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:39 executing program 2: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2055.339165][ T9821] usb 5-1: ath9k_htc: USB layer deinitialized [ 2055.508366][T26371] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2055.517668][T26371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.527794][T26371] usb 4-1: Product: syz [ 2055.534151][T26371] usb 4-1: Manufacturer: syz [ 2055.540244][T26371] usb 4-1: SerialNumber: syz [ 2055.578649][T26371] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2055.688362][T26190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2055.695359][T26190] ath9k_htc: Failed to initialize the device [ 2055.702844][T26201] usb 3-1: ath9k_htc: USB layer deinitialized [ 2055.709829][ T1258] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2055.718469][ T9821] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2055.735292][ T9774] usb 1-1: USB disconnect, device number 42 [ 2055.888306][T32388] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2056.058282][T26201] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2056.158347][T26371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2056.168281][T25259] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2056.175744][T25259] ath9k_htc: Failed to initialize the device [ 2056.182450][ T9774] usb 1-1: ath9k_htc: USB layer deinitialized 08:14:40 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2056.238366][ T1258] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2056.253085][ T9821] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2056.262383][ T9821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.271479][ T1258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.279573][ T1258] usb 6-1: Product: syz [ 2056.284341][ T1258] usb 6-1: Manufacturer: syz [ 2056.330012][ T9821] usb 5-1: Product: syz [ 2056.334242][ T9821] usb 5-1: Manufacturer: syz [ 2056.338907][ T9821] usb 5-1: SerialNumber: syz [ 2056.344698][ T1258] usb 6-1: SerialNumber: syz [ 2056.366973][T29929] usb 4-1: USB disconnect, device number 37 [ 2056.388674][ T1258] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2056.413029][ T9821] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2056.504107][T26210] usb 2-1: USB disconnect, device number 52 [ 2056.578331][T26201] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2056.587555][T26201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.602091][T26201] usb 3-1: Product: syz [ 2056.606382][T26201] usb 3-1: Manufacturer: syz [ 2056.616062][T26201] usb 3-1: SerialNumber: syz [ 2056.658702][T26201] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2056.798291][ T9774] usb 1-1: new high-speed USB device number 43 using dummy_hcd 08:14:41 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:41 executing program 1: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2056.968271][T32388] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2056.975214][T32388] ath9k_htc: Failed to initialize the device [ 2056.981815][T26210] usb 2-1: ath9k_htc: USB layer deinitialized [ 2057.048329][ T9821] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2057.057400][T31466] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2057.208468][T26371] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2057.216570][T26371] ath9k_htc: Failed to initialize the device [ 2057.218316][T26201] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2057.233267][T29929] usb 4-1: ath9k_htc: USB layer deinitialized [ 2057.272420][T26190] usb 6-1: USB disconnect, device number 51 [ 2057.348402][ T9774] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2057.359844][ T9774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.371804][ T9774] usb 1-1: Product: syz [ 2057.377514][ T9774] usb 1-1: Manufacturer: syz [ 2057.385621][ T9774] usb 1-1: SerialNumber: syz [ 2057.388380][T26210] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2057.426614][T25318] usb 3-1: USB disconnect, device number 42 [ 2057.446800][ T9774] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2057.598296][T29929] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2057.675724][T26211] usb 5-1: USB disconnect, device number 40 08:14:42 executing program 5: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:42 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2057.918386][T26210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2057.939351][T26210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.949967][T26210] usb 2-1: Product: syz [ 2057.958091][T26210] usb 2-1: Manufacturer: syz [ 2057.963682][T26210] usb 2-1: SerialNumber: syz [ 2058.008744][T26210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2058.088363][T31466] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2058.096627][ T9821] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2058.104032][ T9774] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2058.114602][ T9821] ath9k_htc: Failed to initialize the device [ 2058.126169][T31466] ath9k_htc: Failed to initialize the device [ 2058.134970][T26211] usb 5-1: ath9k_htc: USB layer deinitialized [ 2058.144245][T26190] usb 6-1: ath9k_htc: USB layer deinitialized [ 2058.151752][T29929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 08:14:42 executing program 4: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2058.168930][T29929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.208794][T29929] usb 4-1: Product: syz [ 2058.213574][T29929] usb 4-1: Manufacturer: syz [ 2058.219288][T29929] usb 4-1: SerialNumber: syz [ 2058.248275][T26201] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2058.263267][T29929] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2058.272778][T26201] ath9k_htc: Failed to initialize the device [ 2058.287902][T25318] usb 3-1: ath9k_htc: USB layer deinitialized [ 2058.508366][T26190] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2058.608285][T26211] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2058.619986][T26210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2058.648310][T25318] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2058.704878][T26371] usb 1-1: USB disconnect, device number 43 [ 2058.835700][T25259] usb 2-1: USB disconnect, device number 53 [ 2058.855919][T29929] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2059.048401][T26190] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2059.058769][T26190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.060719][T26538] usb 4-1: USB disconnect, device number 38 [ 2059.067739][T26190] usb 6-1: Product: syz [ 2059.092003][T26190] usb 6-1: Manufacturer: syz [ 2059.097113][T26190] usb 6-1: SerialNumber: syz [ 2059.140433][T26190] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2059.168773][T26211] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2059.180193][T26211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:14:43 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2059.190691][T26211] usb 5-1: Product: syz [ 2059.195756][T26211] usb 5-1: Manufacturer: syz [ 2059.201560][T26211] usb 5-1: SerialNumber: syz [ 2059.211195][ T9774] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2059.220180][ T9774] ath9k_htc: Failed to initialize the device [ 2059.230132][T25318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2059.247443][T26371] usb 1-1: ath9k_htc: USB layer deinitialized [ 2059.257827][T25318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.258976][T26211] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2059.269205][T25318] usb 3-1: Product: syz [ 2059.287867][T25318] usb 3-1: Manufacturer: syz [ 2059.300137][T25318] usb 3-1: SerialNumber: syz 08:14:43 executing program 1: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2059.348834][T25318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:44 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2059.688364][T26210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2059.696077][T26210] ath9k_htc: Failed to initialize the device [ 2059.708781][T25259] usb 2-1: ath9k_htc: USB layer deinitialized [ 2059.715558][T26371] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2059.719432][T26190] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2059.868333][T26211] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2059.928343][T29929] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2059.936614][T29929] ath9k_htc: Failed to initialize the device [ 2059.949414][T26538] usb 4-1: ath9k_htc: USB layer deinitialized [ 2060.008361][T25318] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2060.078400][T25259] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2060.087733][T32388] usb 5-1: USB disconnect, device number 41 [ 2060.213955][T31466] usb 3-1: USB disconnect, device number 43 [ 2060.258806][T26371] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2060.269291][T26371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.278506][T26371] usb 1-1: Product: syz [ 2060.285236][T26371] usb 1-1: Manufacturer: syz [ 2060.290457][T26371] usb 1-1: SerialNumber: syz [ 2060.338627][T26371] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2060.351334][ T9774] usb 6-1: USB disconnect, device number 52 [ 2060.358403][T26538] usb 4-1: new high-speed USB device number 39 using dummy_hcd 08:14:45 executing program 4: syz_io_uring_setup(0x4744, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:45 executing program 4: syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xd6}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:45 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2060.690012][T25259] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2060.700148][T25259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.715263][T25259] usb 2-1: Product: syz [ 2060.720720][T25259] usb 2-1: Manufacturer: syz [ 2060.727452][T25259] usb 2-1: SerialNumber: syz [ 2060.770517][T25259] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2060.808339][T26190] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive 08:14:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2060.817081][T26190] ath9k_htc: Failed to initialize the device [ 2060.825854][ T9774] usb 6-1: ath9k_htc: USB layer deinitialized [ 2060.888300][T26211] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2060.896656][T26211] ath9k_htc: Failed to initialize the device [ 2060.910877][T32388] usb 5-1: ath9k_htc: USB layer deinitialized [ 2060.949640][T26538] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2060.961160][T26538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.973894][T26538] usb 4-1: Product: syz [ 2060.979370][T26538] usb 4-1: Manufacturer: syz [ 2060.986306][T26538] usb 4-1: SerialNumber: syz [ 2061.010212][T26371] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2061.040110][T26538] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2061.049827][T25318] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2061.057476][T25318] ath9k_htc: Failed to initialize the device [ 2061.077335][T31466] usb 3-1: ath9k_htc: USB layer deinitialized [ 2061.268311][T32388] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2061.288860][ T9774] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2061.428938][T25259] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2061.439523][T31466] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2061.614972][ T9821] usb 1-1: USB disconnect, device number 44 [ 2061.644518][ T1258] usb 2-1: USB disconnect, device number 54 [ 2061.688323][T26538] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2061.788446][T32388] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2061.798467][T32388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.807307][T32388] usb 5-1: Product: syz [ 2061.814085][T32388] usb 5-1: Manufacturer: syz [ 2061.820257][T32388] usb 5-1: SerialNumber: syz [ 2061.858740][T32388] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2061.876113][ T9774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2061.885668][ T9774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.897578][T26211] usb 4-1: USB disconnect, device number 39 [ 2061.900436][ T9774] usb 6-1: Product: syz [ 2061.920619][ T9774] usb 6-1: Manufacturer: syz [ 2061.927093][ T9774] usb 6-1: SerialNumber: syz [ 2061.980405][ T9774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2062.078348][T31466] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2062.088044][T31466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.097548][T26371] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2062.106027][T31466] usb 3-1: Product: syz [ 2062.110954][T26371] ath9k_htc: Failed to initialize the device [ 2062.117782][T31466] usb 3-1: Manufacturer: syz 08:14:46 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:46 executing program 1: syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2062.123111][ T9821] usb 1-1: ath9k_htc: USB layer deinitialized [ 2062.131806][T31466] usb 3-1: SerialNumber: syz [ 2062.179235][T31466] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:46 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2062.428341][T32388] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2062.498345][T25259] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2062.505517][T25259] ath9k_htc: Failed to initialize the device [ 2062.513148][ T1258] usb 2-1: ath9k_htc: USB layer deinitialized [ 2062.548375][ T9821] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2062.628326][ T9774] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2062.728415][T26538] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2062.735736][T26538] ath9k_htc: Failed to initialize the device [ 2062.750063][T26211] usb 4-1: ath9k_htc: USB layer deinitialized [ 2062.808456][T31466] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2062.898529][ T1258] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2063.014379][T29929] usb 3-1: USB disconnect, device number 44 [ 2063.053475][T26364] usb 5-1: USB disconnect, device number 42 [ 2063.098342][T26211] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2063.129816][ T9821] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2063.139125][ T9821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.147735][ T9821] usb 1-1: Product: syz [ 2063.158467][ T9821] usb 1-1: Manufacturer: syz [ 2063.163960][ T9821] usb 1-1: SerialNumber: syz [ 2063.208916][ T9821] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2063.256143][T25318] usb 6-1: USB disconnect, device number 53 [ 2063.448373][T32388] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2063.456340][T32388] ath9k_htc: Failed to initialize the device [ 2063.464883][T26364] usb 5-1: ath9k_htc: USB layer deinitialized 08:14:48 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2063.488739][ T1258] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2063.498181][ T1258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.508830][ T1258] usb 2-1: Product: syz [ 2063.513675][ T1258] usb 2-1: Manufacturer: syz [ 2063.520556][ T1258] usb 2-1: SerialNumber: syz 08:14:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2063.578630][ T1258] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2063.618378][T26211] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2063.627827][T26211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.643229][T26211] usb 4-1: Product: syz [ 2063.647482][T26211] usb 4-1: Manufacturer: syz [ 2063.652173][T26211] usb 4-1: SerialNumber: syz [ 2063.688393][ T9774] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2063.689048][T26211] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2063.696317][ T9774] ath9k_htc: Failed to initialize the device [ 2063.727094][T25318] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2063.858389][T31466] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2063.865911][T31466] ath9k_htc: Failed to initialize the device [ 2063.872277][ T9821] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2063.883707][T29929] usb 3-1: ath9k_htc: USB layer deinitialized 08:14:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2064.238317][T29929] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2064.258418][T25318] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2064.267601][ T1258] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2064.268318][T26211] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2064.428320][T26364] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2064.465514][T26190] usb 1-1: USB disconnect, device number 45 [ 2064.476538][T26538] usb 4-1: USB disconnect, device number 40 [ 2064.508338][T32388] usb 2-1: USB disconnect, device number 55 [ 2064.778455][T29929] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2064.788713][T29929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.797650][T29929] usb 3-1: Product: syz [ 2064.809723][T29929] usb 3-1: Manufacturer: syz [ 2064.814594][T29929] usb 3-1: SerialNumber: syz [ 2064.849048][T25318] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2064.858689][T29929] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2064.867522][T25318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.888205][T25318] usb 6-1: Product: syz 08:14:49 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2064.888389][ T9821] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2064.900674][T25318] usb 6-1: Manufacturer: syz [ 2064.905467][T25318] usb 6-1: SerialNumber: syz [ 2064.910648][ T9821] ath9k_htc: Failed to initialize the device [ 2064.921375][T26190] usb 1-1: ath9k_htc: USB layer deinitialized [ 2064.979120][T25318] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2065.018649][T26364] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 08:14:49 executing program 1: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:49 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2065.033840][T26364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.044853][T26364] usb 5-1: Product: syz [ 2065.051600][T26364] usb 5-1: Manufacturer: syz [ 2065.059375][T26364] usb 5-1: SerialNumber: syz [ 2065.110104][T26364] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2065.288338][ T1258] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2065.295855][ T1258] ath9k_htc: Failed to initialize the device [ 2065.304021][T32388] usb 2-1: ath9k_htc: USB layer deinitialized [ 2065.368302][T26211] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2065.375647][T26211] ath9k_htc: Failed to initialize the device [ 2065.385125][T26190] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2065.393980][T26538] usb 4-1: ath9k_htc: USB layer deinitialized [ 2065.419417][T26201] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2065.622450][T26210] usb 3-1: USB disconnect, device number 45 [ 2065.640566][T25318] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2065.658492][T32388] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2065.738626][T26364] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2065.748687][T26538] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2065.860181][T29929] usb 6-1: USB disconnect, device number 54 [ 2065.908385][T26190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2065.919079][T26190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.928020][T26190] usb 1-1: Product: syz [ 2065.932879][T26190] usb 1-1: Manufacturer: syz [ 2065.951548][T26190] usb 1-1: SerialNumber: syz [ 2065.998666][T26190] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:50 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2066.178364][T32388] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2066.188165][T32388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.203464][T32388] usb 2-1: Product: syz [ 2066.207780][T32388] usb 2-1: Manufacturer: syz [ 2066.219449][T32388] usb 2-1: SerialNumber: syz [ 2066.259029][T32388] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2066.355962][T25460] usb 5-1: USB disconnect, device number 43 [ 2066.358949][T26538] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2066.390816][T26538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.405166][T26538] usb 4-1: Product: syz [ 2066.410639][T26538] usb 4-1: Manufacturer: syz [ 2066.416882][T26538] usb 4-1: SerialNumber: syz [ 2066.468736][T26538] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2066.488345][T26201] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2066.500094][T26201] ath9k_htc: Failed to initialize the device [ 2066.506666][T26210] usb 3-1: ath9k_htc: USB layer deinitialized [ 2066.578305][T26190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2066.728303][T25318] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2066.736063][T25318] ath9k_htc: Failed to initialize the device [ 2066.745701][T29929] usb 6-1: ath9k_htc: USB layer deinitialized [ 2066.818325][T26364] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2066.826161][T26364] ath9k_htc: Failed to initialize the device [ 2066.828442][T32388] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2066.842935][T25460] usb 5-1: ath9k_htc: USB layer deinitialized 08:14:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2066.861638][T26210] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2067.098391][T29929] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2067.128683][T26538] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2067.184944][ T1258] usb 1-1: USB disconnect, device number 46 [ 2067.248364][T25460] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2067.332008][ T9821] usb 4-1: USB disconnect, device number 41 [ 2067.388437][T26210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2067.400281][T26210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.415558][T26210] usb 3-1: Product: syz [ 2067.424665][T26210] usb 3-1: Manufacturer: syz [ 2067.432925][T26210] usb 3-1: SerialNumber: syz [ 2067.447777][ T9774] usb 2-1: USB disconnect, device number 56 [ 2067.479086][T26210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2067.608373][T26190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2067.616557][T26190] ath9k_htc: Failed to initialize the device [ 2067.628908][T29929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2067.638077][T29929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.646685][T29929] usb 6-1: Product: syz [ 2067.646689][ T1258] usb 1-1: ath9k_htc: USB layer deinitialized 08:14:52 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2067.660404][T29929] usb 6-1: Manufacturer: syz [ 2067.665147][T29929] usb 6-1: SerialNumber: syz [ 2067.708654][T29929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2067.778343][T25460] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2067.787490][T25460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.798976][T25460] usb 5-1: Product: syz [ 2067.803217][T25460] usb 5-1: Manufacturer: syz [ 2067.808073][T25460] usb 5-1: SerialNumber: syz 08:14:52 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2067.848630][T25460] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:52 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2067.928331][T32388] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2067.935382][T32388] ath9k_htc: Failed to initialize the device [ 2067.948031][ T9774] usb 2-1: ath9k_htc: USB layer deinitialized [ 2068.058323][T26210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2068.075123][ T1258] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2068.168257][T26538] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2068.175206][T26538] ath9k_htc: Failed to initialize the device [ 2068.186190][ T9821] usb 4-1: ath9k_htc: USB layer deinitialized [ 2068.262960][T26211] usb 3-1: USB disconnect, device number 46 [ 2068.285354][T29929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2068.388285][ T9774] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2068.418276][T26201] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2068.491280][T26364] usb 6-1: USB disconnect, device number 55 [ 2068.548307][ T9821] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2068.628294][ T1258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2068.637526][ T1258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.652138][ T1258] usb 1-1: Product: syz [ 2068.656395][ T1258] usb 1-1: Manufacturer: syz [ 2068.661052][ T1258] usb 1-1: SerialNumber: syz [ 2068.708639][ T1258] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:14:53 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:53 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000006c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2068.958321][ T9774] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2068.969095][ T9774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.977088][ T9774] usb 2-1: Product: syz [ 2068.990933][ T9774] usb 2-1: Manufacturer: syz [ 2068.995767][ T9774] usb 2-1: SerialNumber: syz [ 2069.037578][T26190] usb 5-1: USB disconnect, device number 44 [ 2069.053818][ T9774] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2069.128286][T26210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2069.128358][ T9821] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2069.136564][T26210] ath9k_htc: Failed to initialize the device [ 2069.145155][ T9821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.159267][ T9821] usb 4-1: Product: syz [ 2069.164010][ T9821] usb 4-1: Manufacturer: syz [ 2069.165566][T26211] usb 3-1: ath9k_htc: USB layer deinitialized [ 2069.170441][ T9821] usb 4-1: SerialNumber: syz [ 2069.238926][ T9821] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2069.368301][T29929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2069.368426][ T1258] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2069.376725][T29929] ath9k_htc: Failed to initialize the device [ 2069.390865][T26364] usb 6-1: ath9k_htc: USB layer deinitialized [ 2069.448368][T26201] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2069.455452][T26201] ath9k_htc: Failed to initialize the device [ 2069.466856][T26190] usb 5-1: ath9k_htc: USB layer deinitialized 08:14:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2069.518276][T26211] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2069.698419][ T9774] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2069.748277][T26364] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2069.828436][ T9821] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2069.911310][T25318] usb 2-1: USB disconnect, device number 57 [ 2069.978284][T26190] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2069.991270][T26538] usb 1-1: USB disconnect, device number 47 [ 2070.038270][T26211] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2070.047452][T26211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.051230][T26371] usb 4-1: USB disconnect, device number 42 [ 2070.068261][T26211] usb 3-1: Product: syz [ 2070.075923][T26211] usb 3-1: Manufacturer: syz [ 2070.082707][T26211] usb 3-1: SerialNumber: syz [ 2070.128511][T26211] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2070.328305][T26364] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2070.337538][T26364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.351811][T26364] usb 6-1: Product: syz [ 2070.355981][T26364] usb 6-1: Manufacturer: syz [ 2070.366582][T26364] usb 6-1: SerialNumber: syz 08:14:55 executing program 1: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2070.408294][ T1258] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2070.415637][T26364] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2070.423979][ T1258] ath9k_htc: Failed to initialize the device [ 2070.446196][T26538] usb 1-1: ath9k_htc: USB layer deinitialized 08:14:55 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:55 executing program 3: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2070.498705][T26190] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2070.507956][T26190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.516640][T26190] usb 5-1: Product: syz [ 2070.529957][T26190] usb 5-1: Manufacturer: syz [ 2070.534877][T26190] usb 5-1: SerialNumber: syz [ 2070.579816][T26190] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2070.698307][T26211] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2070.728305][ T9774] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2070.735467][ T9774] ath9k_htc: Failed to initialize the device [ 2070.741528][T25318] usb 2-1: ath9k_htc: USB layer deinitialized [ 2070.898288][ T9821] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2070.905792][ T9821] ath9k_htc: Failed to initialize the device [ 2070.912417][T26538] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2070.921860][T26371] usb 4-1: ath9k_htc: USB layer deinitialized [ 2070.933688][T26190] usb 3-1: USB disconnect, device number 47 [ 2071.098316][T26364] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2071.128819][T25318] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2071.148308][T29929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2071.278265][T26371] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2071.311297][T25259] usb 6-1: USB disconnect, device number 56 08:14:56 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2071.478322][T26538] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2071.487494][T26538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.497084][T26538] usb 1-1: Product: syz [ 2071.503976][T26538] usb 1-1: Manufacturer: syz [ 2071.511027][T26538] usb 1-1: SerialNumber: syz [ 2071.549323][T26538] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2071.688350][T25318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2071.697752][T25318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.706048][T25318] usb 2-1: Product: syz [ 2071.712415][T25318] usb 2-1: Manufacturer: syz [ 2071.718473][T25318] usb 2-1: SerialNumber: syz [ 2071.768546][T26211] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2071.768743][T25318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2071.778841][T26211] ath9k_htc: Failed to initialize the device 08:14:56 executing program 5: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2071.812969][T26190] usb 3-1: ath9k_htc: USB layer deinitialized [ 2071.830246][T26210] usb 5-1: USB disconnect, device number 45 [ 2071.831349][T26371] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2071.860792][T26371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.869718][T26371] usb 4-1: Product: syz [ 2071.875200][T26371] usb 4-1: Manufacturer: syz [ 2071.881157][T26371] usb 4-1: SerialNumber: syz 08:14:56 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2071.938592][T26371] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2072.168263][T29929] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2072.168300][T26364] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2072.175614][T29929] ath9k_htc: Failed to initialize the device [ 2072.182143][T26538] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2072.188162][T26210] usb 5-1: ath9k_htc: USB layer deinitialized [ 2072.216090][T26364] ath9k_htc: Failed to initialize the device [ 2072.224520][T25259] usb 6-1: ath9k_htc: USB layer deinitialized 08:14:56 executing program 4: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 08:14:57 executing program 2: syz_io_uring_setup(0x335, &(0x7f0000000600), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2072.468343][ T9774] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2072.588417][T25259] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2072.596068][T26371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2072.682384][T26190] usb 2-1: USB disconnect, device number 58 [ 2072.708280][T26210] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2072.793695][T26211] usb 4-1: USB disconnect, device number 43 [ 2072.808841][T26201] usb 1-1: USB disconnect, device number 48 [ 2072.808911][ C0] ================================================================== [ 2072.823506][ C0] BUG: KCSAN: data-race in recursively_mark_NOTATTACHED / usb_submit_urb [ 2072.833296][ C0] [ 2072.835617][ C0] write to 0xffff888129212018 of 4 bytes by task 26201 on cpu 1: [ 2072.843970][ C0] recursively_mark_NOTATTACHED+0x1ba/0x1e0 [ 2072.850919][ C0] usb_disconnect+0x60/0x4b0 [ 2072.856082][ C0] hub_event+0x1371/0x2b60 [ 2072.860504][ C0] process_one_work+0x3e1/0x950 [ 2072.865359][ C0] worker_thread+0x616/0xa70 [ 2072.870221][ C0] kthread+0x20b/0x230 [ 2072.874297][ C0] ret_from_fork+0x1f/0x30 [ 2072.879161][ C0] [ 2072.882368][ C0] read to 0xffff888129212018 of 4 bytes by interrupt on cpu 0: [ 2072.889919][ C0] usb_submit_urb+0x201/0xb90 [ 2072.894609][ C0] ath9k_hif_usb_reg_in_cb+0x2c9/0x350 [ 2072.900099][ C0] __usb_hcd_giveback_urb+0x244/0x2e0 [ 2072.905495][ C0] usb_hcd_giveback_urb+0xae/0x200 [ 2072.910604][ C0] dummy_timer+0x513/0x24a0 [ 2072.915111][ C0] call_timer_fn+0x2e/0x240 [ 2072.919886][ C0] expire_timers+0x116/0x260 [ 2072.924593][ C0] __run_timers+0x358/0x3f0 [ 2072.929088][ C0] run_timer_softirq+0x19/0x30 [ 2072.933849][ C0] __do_softirq+0x13c/0x2c3 [ 2072.938357][ C0] asm_call_irq_on_stack+0xf/0x20 [ 2072.943389][ C0] do_softirq_own_stack+0x32/0x40 [ 2072.948402][ C0] __irq_exit_rcu+0xb4/0xc0 [ 2072.952911][ C0] sysvec_apic_timer_interrupt+0x74/0x90 [ 2072.958540][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2072.964518][ C0] acpi_idle_enter+0x25b/0x2e0 [ 2072.969266][ C0] cpuidle_enter_state+0x2b6/0x7c0 [ 2072.974360][ C0] cpuidle_enter+0x3c/0x60 [ 2072.978758][ C0] do_idle+0x193/0x230 [ 2072.982836][ C0] cpu_startup_entry+0x15/0x20 [ 2072.987597][ C0] rest_init+0xd7/0xe0 [ 2072.992623][ C0] arch_call_rest_init+0xa/0xb [ 2072.998700][ C0] start_kernel+0x5a1/0x626 [ 2073.003205][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 2073.009086][ C0] [ 2073.011430][ C0] Reported by Kernel Concurrency Sanitizer on: [ 2073.017582][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.11.0-rc5-syzkaller #0 [ 2073.025748][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.035813][ C0] ================================================================== [ 2073.044585][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 2073.051170][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.11.0-rc5-syzkaller #0 [ 2073.059139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.069192][ C0] Call Trace: [ 2073.072475][ C0] [ 2073.075801][ C0] dump_stack+0x116/0x15d [ 2073.080121][ C0] panic+0x1e7/0x5fa [ 2073.084015][ C0] ? vprintk_emit+0x2e2/0x360 [ 2073.088693][ C0] kcsan_report+0x67b/0x680 [ 2073.093192][ C0] ? kcsan_setup_watchpoint+0x472/0x4d0 [ 2073.098719][ C0] ? usb_submit_urb+0x201/0xb90 [ 2073.103581][ C0] ? ath9k_hif_usb_reg_in_cb+0x2c9/0x350 [ 2073.109212][ C0] ? __usb_hcd_giveback_urb+0x244/0x2e0 [ 2073.114749][ C0] ? usb_hcd_giveback_urb+0xae/0x200 [ 2073.120031][ C0] ? dummy_timer+0x513/0x24a0 [ 2073.124692][ C0] ? call_timer_fn+0x2e/0x240 [ 2073.129359][ C0] ? expire_timers+0x116/0x260 [ 2073.134171][ C0] ? __run_timers+0x358/0x3f0 [ 2073.138833][ C0] ? run_timer_softirq+0x19/0x30 [ 2073.143792][ C0] ? __do_softirq+0x13c/0x2c3 [ 2073.148551][ C0] ? asm_call_irq_on_stack+0xf/0x20 [ 2073.153797][ C0] ? do_softirq_own_stack+0x32/0x40 [ 2073.159091][ C0] ? __irq_exit_rcu+0xb4/0xc0 [ 2073.163771][ C0] ? sysvec_apic_timer_interrupt+0x74/0x90 [ 2073.169564][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2073.175710][ C0] ? acpi_idle_enter+0x25b/0x2e0 [ 2073.180639][ C0] ? cpuidle_enter_state+0x2b6/0x7c0 [ 2073.185910][ C0] ? cpuidle_enter+0x3c/0x60 [ 2073.190507][ C0] ? do_idle+0x193/0x230 08:14:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x1f36, 0x10, 0x0, 0xd6, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) syz_genetlink_get_family_id$gtp(0x0) syz_io_uring_complete(0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00'}) [ 2073.194762][ C0] ? cpu_startup_entry+0x15/0x20 [ 2073.199697][ C0] ? rest_init+0xd7/0xe0 [ 2073.203941][ C0] ? arch_call_rest_init+0xa/0xb [ 2073.208893][ C0] ? start_kernel+0x5a1/0x626 [ 2073.213579][ C0] ? secondary_startup_64_no_verify+0xb0/0xbb [ 2073.219651][ C0] ? usb_submit_urb+0xb7f/0xb90 [ 2073.224488][ C0] kcsan_setup_watchpoint+0x472/0x4d0 [ 2073.228318][T26210] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2073.229855][ C0] usb_submit_urb+0x201/0xb90 [ 2073.240719][T26210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.243541][ C0] ? _raw_spin_lock_irqsave+0x25/0x90 [ 2073.243573][ C0] ath9k_hif_usb_reg_in_cb+0x2c9/0x350 [ 2073.265544][ C0] ? usb_unanchor_urb+0x1ec/0x220 [ 2073.270727][ C0] __usb_hcd_giveback_urb+0x244/0x2e0 [ 2073.270789][T26210] usb 5-1: Product: syz [ 2073.276111][ C0] ? usb_hcd_giveback_urb+0xa6/0x200 [ 2073.276139][ C0] usb_hcd_giveback_urb+0xae/0x200 [ 2073.291331][ C0] ? _raw_spin_unlock+0x22/0x40 [ 2073.292899][T26210] usb 5-1: Manufacturer: syz [ 2073.296211][ C0] dummy_timer+0x513/0x24a0 [ 2073.296237][ C0] ? rb_insert_color+0x7e/0x310 [ 2073.311338][ C0] ? enqueue_entity+0x25a/0x480 [ 2073.316226][ C0] ? psi_task_change+0xae/0x140 [ 2073.321654][ C0] ? dummy_free_streams+0x1e0/0x1e0 [ 2073.323345][T26210] usb 5-1: SerialNumber: syz [ 2073.326940][ C0] call_timer_fn+0x2e/0x240 [ 2073.326967][ C0] ? dummy_free_streams+0x1e0/0x1e0 08:14:57 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_io_uring_setup(0x4744, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "454209f2", {0x3, 0x0, 0x0, 0xff, 0x1, 0x7, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x335, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x21d, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 2073.342557][ C0] expire_timers+0x116/0x260 [ 2073.347160][ C0] __run_timers+0x358/0x3f0 [ 2073.351685][ C0] ? kvm_sched_clock_read+0x15/0x40 [ 2073.356898][ C0] ? sched_clock+0xf/0x20 [ 2073.361256][ C0] run_timer_softirq+0x19/0x30 [ 2073.370214][ C0] __do_softirq+0x13c/0x2c3 [ 2073.374841][ C0] asm_call_irq_on_stack+0xf/0x20 [ 2073.379875][ C0] [ 2073.382806][ C0] do_softirq_own_stack+0x32/0x40 [ 2073.387832][ C0] __irq_exit_rcu+0xb4/0xc0 [ 2073.392703][ C0] sysvec_apic_timer_interrupt+0x74/0x90 [ 2073.401144][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2073.407236][ C0] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 2073.443518][ C0] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 5e c7 8c fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 9e c2 8c fe 0f 00 2d 01 47 26 03 fb f4 eb 59 49 8d 7c 24 04 e8 a8 54 9d fe 41 8b 54 24 04 ec 48 c7 c7 [ 2073.463509][ C0] RSP: 0018:ffffffff86a03da0 EFLAGS: 00000246 [ 2073.469608][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2073.477803][ C0] RDX: ffffffff86a30780 RSI: 0000000000000000 RDI: 0000000000000000 [ 2073.485891][ C0] RBP: 0000000000000001 R08: ffffffff82b91a12 R09: ffffffff82b919d3 [ 2073.494113][ C0] R10: 0000000000000002 R11: ffffffff86a30780 R12: ffff888140c70064 [ 2073.502093][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bc00000 [ 2073.509419][T26210] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2073.510075][ C0] ? acpi_idle_enter+0x203/0x2e0 [ 2073.510104][ C0] ? acpi_idle_enter+0x242/0x2e0 [ 2073.510128][ C0] cpuidle_enter_state+0x2b6/0x7c0 [ 2073.535490][ C0] cpuidle_enter+0x3c/0x60 [ 2073.541655][ C0] do_idle+0x193/0x230 [ 2073.546911][ C0] cpu_startup_entry+0x15/0x20 [ 2073.553847][ C0] rest_init+0xd7/0xe0 [ 2073.559081][ C0] ? time_init+0xc/0xc [ 2073.563188][ C0] arch_call_rest_init+0xa/0xb [ 2073.568805][ C0] start_kernel+0x5a1/0x626 [ 2073.573324][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 2073.579852][ C0] Kernel Offset: disabled [ 2073.584173][ C0] Rebooting in 86400 seconds..