ffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x81, 0x5}, 'port0\x00', 0x0, 0x1, 0xffffffff, 0x8, 0xa1c, 0x80, 0x8, 0x0, 0x0, 0x1f}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000001c0)) 21:41:40 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xb5, 0x0, 0x700}, 0x0) [ 2935.100874][T27978] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2935.710959][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2935.720971][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.728958][T27978] usb 3-1: Product: syz [ 2935.733644][T27978] usb 3-1: Manufacturer: syz [ 2935.738261][T27978] usb 3-1: SerialNumber: syz [ 2935.782282][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2936.391112][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2936.799713][T28216] usb 3-1: USB disconnect, device number 42 21:41:43 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x6}, 0x98c) (async) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:41:43 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd4, 0x700000000000000}, 0x0) 21:41:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:41:43 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xb6, 0x0, 0x700}, 0x0) 21:41:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x7fffffff, 0x3, 0x4, 0x400, 0x5, {r1, r2/1000+60000}, {0x3, 0x1, 0x7, 0xff, 0x1f, 0x8, "c461332a"}, 0x7ff, 0x2, {&(0x7f00000001c0)=[{0x3b, 0x5, {&(0x7f0000000140)}, 0x5}, {0xfff, 0x1d7a, {&(0x7f0000000180)}, 0x8001}]}, 0x6b}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sdr={0x59565955, 0x484b8a49}}) 21:41:43 executing program 0: r0 = memfd_secret(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x70000010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x81, 0x5}, 'port0\x00', 0x0, 0x1, 0xffffffff, 0x8, 0xa1c, 0x80, 0x8, 0x0, 0x0, 0x1f}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000001c0)) 21:41:43 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xb7, 0x0, 0x700}, 0x0) 21:41:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_fd={0x9, 0x1, 0x4, 0x1, 0xbe3, {}, {0x5, 0x8, 0xfa, 0x1, 0x3, 0x0, "957f9cd4"}, 0x2, 0x4, {&(0x7f00000000c0)=[{0x9, 0x4, {}, 0xffff8000}, {0x8, 0x95, {r1}, 0x3}]}, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) 21:41:43 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd5, 0x700000000000000}, 0x0) 21:41:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x7fffffff, 0x3, 0x4, 0x400, 0x5, {r1, r2/1000+60000}, {0x3, 0x1, 0x7, 0xff, 0x1f, 0x8, "c461332a"}, 0x7ff, 0x2, {&(0x7f00000001c0)=[{0x3b, 0x5, {&(0x7f0000000140)}, 0x5}, {0xfff, 0x1d7a, {&(0x7f0000000180)}, 0x8001}]}, 0x6b}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sdr={0x59565955, 0x484b8a49}}) 21:41:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x5, 0x50424752, 0x3, @stepwise={0x80, 0x7ff, 0xfff, 0x95d, 0x8, 0x95}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 21:41:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async, rerun: 32) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_fd={0x9, 0x1, 0x4, 0x1, 0xbe3, {}, {0x5, 0x8, 0xfa, 0x1, 0x3, 0x0, "957f9cd4"}, 0x2, 0x4, {&(0x7f00000000c0)=[{0x9, 0x4, {}, 0xffff8000}, {0x8, 0x95, {r1}, 0x3}]}, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) (rerun: 64) [ 2937.441208][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2937.450930][T27978] ath9k_htc: Failed to initialize the device [ 2937.459466][T28216] usb 3-1: ath9k_htc: USB layer deinitialized [ 2937.830994][T28216] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2938.360996][T28216] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2938.370065][T28216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2938.378235][T28216] usb 3-1: Product: syz [ 2938.382495][T28216] usb 3-1: Manufacturer: syz [ 2938.387089][T28216] usb 3-1: SerialNumber: syz [ 2938.433592][T28216] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2939.000958][T28216] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2939.410543][ T3667] usb 3-1: USB disconnect, device number 43 21:41:46 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x6}, 0x98c) (async) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:41:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x7fffffff, 0x3, 0x4, 0x400, 0x5, {r1, r2/1000+60000}, {0x3, 0x1, 0x7, 0xff, 0x1f, 0x8, "c461332a"}, 0x7ff, 0x2, {&(0x7f00000001c0)=[{0x3b, 0x5, {&(0x7f0000000140)}, 0x5}, {0xfff, 0x1d7a, {&(0x7f0000000180)}, 0x8001}]}, 0x6b}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sdr={0x59565955, 0x484b8a49}}) 21:41:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd6, 0x700000000000000}, 0x0) 21:41:46 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xb8, 0x0, 0x700}, 0x0) 21:41:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x5, 0x50424752, 0x3, @stepwise={0x80, 0x7ff, 0xfff, 0x95d, 0x8, 0x95}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x5, 0x50424752, 0x3, @stepwise={0x80, 0x7ff, 0xfff, 0x95d, 0x8, 0x95}}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) 21:41:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_fd={0x9, 0x1, 0x4, 0x1, 0xbe3, {}, {0x5, 0x8, 0xfa, 0x1, 0x3, 0x0, "957f9cd4"}, 0x2, 0x4, {&(0x7f00000000c0)=[{0x9, 0x4, {}, 0xffff8000}, {0x8, 0x95, {r1}, 0x3}]}, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_fd={0x9, 0x1, 0x4, 0x1, 0xbe3, {}, {0x5, 0x8, 0xfa, 0x1, 0x3, 0x0, "957f9cd4"}, 0x2, 0x4, {&(0x7f00000000c0)=[{0x9, 0x4, {}, 0xffff8000}, {0x8, 0x95, {r1}, 0x3}]}, 0x8, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) (async) 21:41:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getuid() 21:41:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd7, 0x700000000000000}, 0x0) 21:41:46 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xb9, 0x0, 0x700}, 0x0) 21:41:46 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000004b80)={0x18, 0x0, r1}, 0x18) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r1}, 0x18) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket(0x1d, 0xa, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) socketpair(0x2b, 0x6, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440), r6) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x8, 0x0, 0x0, {{}, {}, {0x15, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4028805) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000240)={0x5c, &(0x7f00000001c0)="47555eb7c93bc8cef0ff8bf6e0f51692f29170d42d7d3a4399741c506ca4db40814690ab3d388f1a7c4d34803af288382efeda1a047308c79ca2a2363038d591bcd8dad23c7cfd541542220fa8a037930239693620d3d2833f2b288d"}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48015}, 0x810) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) 21:41:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x5, 0x50424752, 0x3, @stepwise={0x80, 0x7ff, 0xfff, 0x95d, 0x8, 0x95}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x5, 0x50424752, 0x3, @stepwise={0x80, 0x7ff, 0xfff, 0x95d, 0x8, 0x95}}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) 21:41:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd8, 0x700000000000000}, 0x0) [ 2940.080905][T28216] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2940.088717][T28216] ath9k_htc: Failed to initialize the device [ 2940.107285][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 2940.470880][ T3667] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2941.021124][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2941.030198][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2941.038312][ T3667] usb 3-1: Product: syz [ 2941.042613][ T3667] usb 3-1: Manufacturer: syz [ 2941.047249][ T3667] usb 3-1: SerialNumber: syz [ 2941.091801][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2941.690950][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2942.098574][ T22] usb 3-1: USB disconnect, device number 44 21:41:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xba, 0x0, 0x700}, 0x0) 21:41:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) getuid() 21:41:48 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1b0, &(0x7f0000000040)={[{0x3, 0x4e00, "9b2fda"}, {0xff, 0x4e00, "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"}, {0x9f, 0x4e00, "2f66033f57b82de8177c08f2a49a6da65d6be48431a9fa84459455bcbae88b2ecf31a8271212864ca1d9cd70807141d3cbd2ad267b83e83b5adb519c18bc0134b5de31b72464029f88b9fe5e430a027c525b9e2450eb6f6754789095c09b6da7a88a45e79027b48e320f99a31a1fed920915a1cf5954543e09ac4cfe1d5307beea1846bd4b245cbf5be6f3bf651437126b119ee51ba4cc813cf3b0c4abd0bc"}]}) socket(0x2, 0x1, 0x6) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:41:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd9, 0x700000000000000}, 0x0) 21:41:48 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000004b80)={0x18, 0x0, r1}, 0x18) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r1}, 0x18) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) r4 = socket(0x1d, 0xa, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_secret(0x80000) socketpair(0x2b, 0x6, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440), r6) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x8, 0x0, 0x0, {{}, {}, {0x15, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4028805) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000240)={0x5c, &(0x7f00000001c0)="47555eb7c93bc8cef0ff8bf6e0f51692f29170d42d7d3a4399741c506ca4db40814690ab3d388f1a7c4d34803af288382efeda1a047308c79ca2a2363038d591bcd8dad23c7cfd541542220fa8a037930239693620d3d2833f2b288d"}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48015}, 0x810) (async) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) 21:41:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:41:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:41:48 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000004b80)={0x18, 0x0, r1}, 0x18) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r1}, 0x18) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket(0x1d, 0xa, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) socketpair(0x2b, 0x6, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440), r6) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x8, 0x0, 0x0, {{}, {}, {0x15, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4028805) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000240)={0x5c, &(0x7f00000001c0)="47555eb7c93bc8cef0ff8bf6e0f51692f29170d42d7d3a4399741c506ca4db40814690ab3d388f1a7c4d34803af288382efeda1a047308c79ca2a2363038d591bcd8dad23c7cfd541542220fa8a037930239693620d3d2833f2b288d"}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48015}, 0x810) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) (async) write$FUSE_GETXATTR(r2, &(0x7f0000004b80)={0x18, 0x0, r1}, 0x18) (async) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r1}, 0x18) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) socket(0x1d, 0xa, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_secret(0x80000) (async) socketpair(0x2b, 0x6, 0x0, &(0x7f0000002480)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000002440), r6) (async) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x8, 0x0, 0x0, {{}, {}, {0x15, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4028805) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000240)={0x5c, &(0x7f00000001c0)="47555eb7c93bc8cef0ff8bf6e0f51692f29170d42d7d3a4399741c506ca4db40814690ab3d388f1a7c4d34803af288382efeda1a047308c79ca2a2363038d591bcd8dad23c7cfd541542220fa8a037930239693620d3d2833f2b288d"}) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48015}, 0x810) (async) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) (async) 21:41:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) getuid() 21:41:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xbb, 0x0, 0x700}, 0x0) 21:41:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xda, 0x700000000000000}, 0x0) 21:41:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdb, 0x700000000000000}, 0x0) 21:41:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xbc, 0x0, 0x700}, 0x0) 21:41:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) [ 2942.721262][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2942.728260][T10727] ath9k_htc: Failed to initialize the device [ 2942.743140][ T22] usb 3-1: ath9k_htc: USB layer deinitialized 21:41:49 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1b0, &(0x7f0000000040)={[{0x3, 0x4e00, "9b2fda"}, {0xff, 0x4e00, "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"}, {0x9f, 0x4e00, "2f66033f57b82de8177c08f2a49a6da65d6be48431a9fa84459455bcbae88b2ecf31a8271212864ca1d9cd70807141d3cbd2ad267b83e83b5adb519c18bc0134b5de31b72464029f88b9fe5e430a027c525b9e2450eb6f6754789095c09b6da7a88a45e79027b48e320f99a31a1fed920915a1cf5954543e09ac4cfe1d5307beea1846bd4b245cbf5be6f3bf651437126b119ee51ba4cc813cf3b0c4abd0bc"}]}) (async) socket(0x2, 0x1, 0x6) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:41:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:41:49 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x521002) syz_io_uring_setup(0x626b, &(0x7f0000000380)={0x0, 0x918f, 0x1, 0x1, 0x7a, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0x400, 0x5, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f0000000000)) 21:41:49 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdc, 0x700000000000000}, 0x0) 21:41:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xbd, 0x0, 0x700}, 0x0) 21:41:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:41:49 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdd, 0x700000000000000}, 0x0) 21:41:49 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:41:49 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1b0, &(0x7f0000000040)={[{0x3, 0x4e00, "9b2fda"}, {0xff, 0x4e00, "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"}, {0x9f, 0x4e00, "2f66033f57b82de8177c08f2a49a6da65d6be48431a9fa84459455bcbae88b2ecf31a8271212864ca1d9cd70807141d3cbd2ad267b83e83b5adb519c18bc0134b5de31b72464029f88b9fe5e430a027c525b9e2450eb6f6754789095c09b6da7a88a45e79027b48e320f99a31a1fed920915a1cf5954543e09ac4cfe1d5307beea1846bd4b245cbf5be6f3bf651437126b119ee51ba4cc813cf3b0c4abd0bc"}]}) socket(0x2, 0x1, 0x6) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1b0, &(0x7f0000000040)={[{0x3, 0x4e00, "9b2fda"}, {0xff, 0x4e00, "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"}, {0x9f, 0x4e00, "2f66033f57b82de8177c08f2a49a6da65d6be48431a9fa84459455bcbae88b2ecf31a8271212864ca1d9cd70807141d3cbd2ad267b83e83b5adb519c18bc0134b5de31b72464029f88b9fe5e430a027c525b9e2450eb6f6754789095c09b6da7a88a45e79027b48e320f99a31a1fed920915a1cf5954543e09ac4cfe1d5307beea1846bd4b245cbf5be6f3bf651437126b119ee51ba4cc813cf3b0c4abd0bc"}]}) (async) socket(0x2, 0x1, 0x6) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) 21:41:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) 21:41:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xbe, 0x0, 0x700}, 0x0) 21:41:49 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:41:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xbf, 0x0, 0x700}, 0x0) 21:41:49 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f0000000000)) [ 2943.530927][T10727] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2944.060976][T10727] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2944.070128][T10727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2944.084472][T10727] usb 6-1: Product: syz [ 2944.088636][T10727] usb 6-1: Manufacturer: syz [ 2944.095806][T10727] usb 6-1: SerialNumber: syz [ 2944.144947][T10727] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2944.710947][T10727] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2944.917196][ T3667] usb 6-1: USB disconnect, device number 65 21:41:51 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x521002) (async) syz_io_uring_setup(0x626b, &(0x7f0000000380)={0x0, 0x918f, 0x1, 0x1, 0x7a, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x901) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0x400, 0x5, 0x0, 'queue1\x00', 0x4}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async, rerun: 32) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f0000000000)) 21:41:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xde, 0x700000000000000}, 0x0) 21:41:51 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "a61909a3", {0x3, 0x105, 0x0, 0x2, 0x92, 0x8}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x274, &(0x7f0000000300)=ANY=[@ANYBLOB="2a00004e239706d7637b6ffabc630998090443c21179035a048f6d181277de482f388347babcfcd114045c48f57c00005400004ec605e36bc2b354f0e1518b01c3cec0c8edc59f6bd58ebcedf39dddcc337c1f32a794ed9bfb8d90c612b7ab3bc5a987df21c7bfbbb303f9c82c1e523674e19db07599078c2653eafc2f89111ad24cfc8b55bde16a3000004e6eac92c3a9015978292d4f0a963a7d348eb50a30ef23825e821bfb4904a5f13247f53756000abb57e5b92dc91f91ed1d7d00004e79d194ac75076543aa8c2a94b9e446f868da0e07994306fd6ef27e2f4fd1cec7c5b3ad65c6b1136f6aef1d263e666f7e85e2adc14de0a61ee84c84da8645ca3cf629936b19f23d03e98873b85a9976172c6c5b5a6bc744e1bedd0faf94a4971a69e7658f37774c8d3167602261a794c1cf34e354db46840e0c3f5bbf3f0000004800004eda4216becbd3663eadd41dfd1a943c8e073416025ac62b78c3367d7f73fe652f3255a4d17ab80f5bfdc59dc57e8407728c31f0b4e3fbf5b03e4c593f6d1d4fe9bbcf0cbcf73cafc1e100004ec43f60971f0e8b0f52d96c9ca569a2a921d74ee147e7b28f12538a2f4d191cd504885f2c24c32db17f7ab8d4839d17dcab8d4ea3b78d8153e5bf78899921632c385471e5a77f2abfbfa0e09430222a34c863f185732d7b8ed42897a05b17c19337949d77cd16e912c3ef53c7c5229623a80a90075c67ca8a13ee18c2ec90cf2912f2528bb0b01b29fb915686e80347606d35af780a198287a1d1f38d77f5298547c0979f57e40e95f696ee107a0d042de6728cd2c1d8a7c39ddbfd5d7f508b3992b22b11c664bfa24b57d6d8b49be71e00781c9382fd7752938c5ca7849aded7bd000000aec59e8dddc2a76502085fd7f88761771b9f08c75ada3ee076cfa1f9291921fdbf2b54b2730d038780c4300114eb10efdc9b539c3a5d6d5667488dacdd9d34da506dde87064f7fc0b0c29f84ecbcead6e55cbb3f615b62bfde9b"]) 21:41:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc0, 0x0, 0x700}, 0x0) 21:41:51 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:41:51 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f0000000000)) (async) 21:41:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdf, 0x700000000000000}, 0x0) 21:41:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc1, 0x0, 0x700}, 0x0) 21:41:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0xfffffffc, 0x0, 0x4, 0x10, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0xcd, 0xc0, 0x5, 0xfb, "c565c65e"}, 0x80, 0x4, {}, 0x5ac0, 0x0, r1}) 21:41:51 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f0000000000)) 21:41:51 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x521002) syz_io_uring_setup(0x626b, &(0x7f0000000380)={0x0, 0x918f, 0x1, 0x1, 0x7a, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0x400, 0x5, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x521002) (async) syz_io_uring_setup(0x626b, &(0x7f0000000380)={0x0, 0x918f, 0x1, 0x1, 0x7a, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x901) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0x400, 0x5, 0x0, 'queue1\x00', 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f0000000000)) (async) 21:41:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe0, 0x700000000000000}, 0x0) 21:41:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc2, 0x0, 0x700}, 0x0) 21:41:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0xfffffffc, 0x0, 0x4, 0x10, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0xcd, 0xc0, 0x5, 0xfb, "c565c65e"}, 0x80, 0x4, {}, 0x5ac0, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0xfffffffc, 0x0, 0x4, 0x10, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0xcd, 0xc0, 0x5, 0xfb, "c565c65e"}, 0x80, 0x4, {}, 0x5ac0, 0x0, r1}) (async) [ 2945.720984][ T22] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2945.771024][T10727] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2945.779154][T10727] ath9k_htc: Failed to initialize the device [ 2945.787861][ T3667] usb 6-1: ath9k_htc: USB layer deinitialized [ 2946.161000][ T3667] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2946.241182][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2946.257218][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.265562][ T22] usb 3-1: Product: syz [ 2946.269719][ T22] usb 3-1: Manufacturer: syz [ 2946.278872][ T22] usb 3-1: SerialNumber: syz [ 2946.321621][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2946.701108][ T3667] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2946.710593][ T3667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.719173][ T3667] usb 6-1: Product: syz [ 2946.723551][ T3667] usb 6-1: Manufacturer: syz [ 2946.728137][ T3667] usb 6-1: SerialNumber: syz [ 2946.782554][ T3667] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2946.930952][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2947.351110][T28216] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2947.564212][T27978] usb 6-1: USB disconnect, device number 66 [ 2947.755754][ T3667] usb 3-1: USB disconnect, device number 45 [ 2948.000904][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2948.008017][ T22] ath9k_htc: Failed to initialize the device [ 2948.016201][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized 21:41:54 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe1, 0x700000000000000}, 0x0) 21:41:54 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x24, 0x0, {{0x8, 0xe27, 0x8000000000000000, 0x10001, 0x7fff, 0x3, 0x40, 0x3}}}, 0x60) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:41:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc3, 0x0, 0x700}, 0x0) 21:41:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0xfffffffc, 0x0, 0x4, 0x10, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0xcd, 0xc0, 0x5, 0xfb, "c565c65e"}, 0x80, 0x4, {}, 0x5ac0, 0x0, r1}) 21:41:54 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "a61909a3", {0x3, 0x105, 0x0, 0x2, 0x92, 0x8}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x274, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 21:41:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000040)={{0x4, 0x72}, {0xe0}, 0xfe, 0x2, 0x8}) 21:41:54 executing program 0: ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@mmap={0x3, 0x2, 0x4, 0x1, 0x53eb, {0x0, 0xea60}, {0x2, 0x0, 0x20, 0x2, 0x5, 0x1, "6829a66d"}, 0x4, 0x1, {}, 0x5, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:41:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000040)={{0x4, 0x72}, {0xe0}, 0xfe, 0x2, 0x8}) 21:41:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc4, 0x0, 0x700}, 0x0) 21:41:54 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x24, 0x0, {{0x8, 0xe27, 0x8000000000000000, 0x10001, 0x7fff, 0x3, 0x40, 0x3}}}, 0x60) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x24, 0x0, {{0x8, 0xe27, 0x8000000000000000, 0x10001, 0x7fff, 0x3, 0x40, 0x3}}}, 0x60) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) (async) 21:41:54 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe2, 0x700000000000000}, 0x0) 21:41:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000040)={{0x4, 0x72}, {0xe0}, 0xfe, 0x2, 0x8}) 21:41:54 executing program 0: ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@mmap={0x3, 0x2, 0x4, 0x1, 0x53eb, {0x0, 0xea60}, {0x2, 0x0, 0x20, 0x2, 0x5, 0x1, "6829a66d"}, 0x4, 0x1, {}, 0x5, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:41:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc5, 0x0, 0x700}, 0x0) 21:41:54 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x24, 0x0, {{0x8, 0xe27, 0x8000000000000000, 0x10001, 0x7fff, 0x3, 0x40, 0x3}}}, 0x60) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:41:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) [ 2948.400976][T28216] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2948.413761][T28216] ath9k_htc: Failed to initialize the device [ 2948.435105][T27978] usb 6-1: ath9k_htc: USB layer deinitialized [ 2948.580957][ T3667] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2949.100989][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2949.113437][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.121710][ T3667] usb 3-1: Product: syz [ 2949.125974][ T3667] usb 3-1: Manufacturer: syz [ 2949.130619][ T3667] usb 3-1: SerialNumber: syz [ 2949.171715][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2949.741067][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2950.365499][T10727] usb 3-1: USB disconnect, device number 46 [ 2950.800864][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2950.807813][ T3667] ath9k_htc: Failed to initialize the device [ 2950.819391][T10727] usb 3-1: ath9k_htc: USB layer deinitialized 21:41:57 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "a61909a3", {0x3, 0x105, 0x0, 0x2, 0x92, 0x8}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x274, &(0x7f0000000300)=ANY=[@ANYBLOB="2a00004e239706d7637b6ffabc630998090443c21179035a048f6d181277de482f388347babcfcd114045c48f57c00005400004ec605e36bc2b354f0e1518b01c3cec0c8edc59f6bd58ebcedf39dddcc337c1f32a794ed9bfb8d90c612b7ab3bc5a987df21c7bfbbb303f9c82c1e523674e19db07599078c2653eafc2f89111ad24cfc8b55bde16a3000004e6eac92c3a9015978292d4f0a963a7d348eb50a30ef23825e821bfb4904a5f13247f53756000abb57e5b92dc91f91ed1d7d00004e79d194ac75076543aa8c2a94b9e446f868da0e07994306fd6ef27e2f4fd1cec7c5b3ad65c6b1136f6aef1d263e666f7e85e2adc14de0a61ee84c84da8645ca3cf629936b19f23d03e98873b85a9976172c6c5b5a6bc744e1bedd0faf94a4971a69e7658f37774c8d3167602261a794c1cf34e354db46840e0c3f5bbf3f0000004800004eda4216becbd3663eadd41dfd1a943c8e073416025ac62b78c3367d7f73fe652f3255a4d17ab80f5bfdc59dc57e8407728c31f0b4e3fbf5b03e4c593f6d1d4fe9bbcf0cbcf73cafc1e100004ec43f60971f0e8b0f52d96c9ca569a2a921d74ee147e7b28f12538a2f4d191cd504885f2c24c32db17f7ab8d4839d17dcab8d4ea3b78d8153e5bf78899921632c385471e5a77f2abfbfa0e09430222a34c863f185732d7b8ed42897a05b17c19337949d77cd16e912c3ef53c7c5229623a80a90075c67ca8a13ee18c2ec90cf2912f2528bb0b01b29fb915686e80347606d35af780a198287a1d1f38d77f5298547c0979f57e40e95f696ee107a0d042de6728cd2c1d8a7c39ddbfd5d7f508b3992b22b11c664bfa24b57d6d8b49be71e00781c9382fd7752938c5ca7849aded7bd000000aec59e8dddc2a76502085fd7f88761771b9f08c75ada3ee076cfa1f9291921fdbf2b54b2730d038780c4300114eb10efdc9b539c3a5d6d5667488dacdd9d34da506dde87064f7fc0b0c29f84ecbcead6e55cbb3f615b62bfde9b"]) 21:41:57 executing program 0: ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@mmap={0x3, 0x2, 0x4, 0x1, 0x53eb, {0x0, 0xea60}, {0x2, 0x0, 0x20, 0x2, 0x5, 0x1, "6829a66d"}, 0x4, 0x1, {}, 0x5, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:41:57 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe3, 0x700000000000000}, 0x0) 21:41:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc6, 0x0, 0x700}, 0x0) 21:41:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x0, {0x6487}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x80000001, 0x8, 0x84000}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x1, 0xffffffff}) 21:41:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:41:57 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe4, 0x700000000000000}, 0x0) 21:41:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000080)) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async, rerun: 32) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x0, {0x6487}}, 0x18) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x80000001, 0x8, 0x84000}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x1, 0xffffffff}) 21:41:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc7, 0x0, 0x700}, 0x0) 21:41:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:41:57 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) 21:41:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc8, 0x0, 0x700}, 0x0) [ 2951.320878][T10727] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2951.841115][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2951.850185][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.858325][T10727] usb 3-1: Product: syz [ 2951.862542][T10727] usb 3-1: Manufacturer: syz [ 2951.867121][T10727] usb 3-1: SerialNumber: syz [ 2951.922648][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2952.491017][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2952.915920][T27978] usb 3-1: USB disconnect, device number 47 21:41:59 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x20, 0x8}, 'port0\x00', 0x8b, 0x28, 0x7, 0x1000, 0x1000, 0x8c, 0x3, 0x0, 0x2, 0x9}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:41:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe5, 0x700000000000000}, 0x0) 21:41:59 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x9, 0x1, {0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x401}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f0000000080)) 21:41:59 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) 21:41:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x0, {0x6487}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x80000001, 0x8, 0x84000}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x1, 0xffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000080)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) write$FUSE_LSEEK(r2, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x0, {0x6487}}, 0x18) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x80000001, 0x8, 0x84000}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x1, 0xffffffff}) (async) 21:41:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc9, 0x0, 0x700}, 0x0) 21:41:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe6, 0x700000000000000}, 0x0) 21:41:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xca, 0x0, 0x700}, 0x0) 21:41:59 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x9, 0x1, {0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x401}, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f0000000080)) 21:41:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffffb, 0x7fffffff}) 21:41:59 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) 21:41:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xcb, 0x0, 0x700}, 0x0) [ 2953.531180][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2953.549687][T10727] ath9k_htc: Failed to initialize the device [ 2953.569074][T27978] usb 3-1: ath9k_htc: USB layer deinitialized [ 2953.940903][T27978] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2954.471137][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2954.480213][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2954.489468][T27978] usb 3-1: Product: syz [ 2954.493998][T27978] usb 3-1: Manufacturer: syz [ 2954.498610][T27978] usb 3-1: SerialNumber: syz [ 2954.544696][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2955.121096][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2955.542144][ T3667] usb 3-1: USB disconnect, device number 48 21:42:02 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x20, 0x8}, 'port0\x00', 0x8b, 0x28, 0x7, 0x1000, 0x1000, 0x8c, 0x3, 0x0, 0x2, 0x9}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:42:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe7, 0x700000000000000}, 0x0) 21:42:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xcc, 0x0, 0x700}, 0x0) 21:42:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffffb, 0x7fffffff}) 21:42:02 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x9, 0x1, {0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x401}, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f0000000080)) 21:42:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000480)={0x0, 0x3, r0, 0x40}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) r4 = memfd_secret(0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000100)={{}, {0x0, 0x2}}) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21:42:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe8, 0x700000000000000}, 0x0) 21:42:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffffb, 0x7fffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) memfd_secret(0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffffb, 0x7fffffff}) (async) 21:42:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000480)={0x0, 0x3, r0, 0x40}) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) r4 = memfd_secret(0x0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000100)={{}, {0x0, 0x2}}) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21:42:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xcd, 0x0, 0x700}, 0x0) 21:42:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x37ac, 0xe490, 0x34325258, 0x2, 0x2b, 0x4, 0x5, 0x3f, 0x1, 0x8, 0x2, 0x1}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) 21:42:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe9, 0x700000000000000}, 0x0) [ 2956.161453][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2956.168456][T27978] ath9k_htc: Failed to initialize the device [ 2956.196476][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 2956.580881][ T3667] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2957.121040][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2957.130093][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2957.138849][ T3667] usb 3-1: Product: syz [ 2957.143396][ T3667] usb 3-1: Manufacturer: syz [ 2957.149263][ T3667] usb 3-1: SerialNumber: syz [ 2957.202281][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2957.771037][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2957.985897][T27979] usb 3-1: USB disconnect, device number 49 21:42:04 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x20, 0x8}, 'port0\x00', 0x8b, 0x28, 0x7, 0x1000, 0x1000, 0x8c, 0x3, 0x0, 0x2, 0x9}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x20, 0x8}, 'port0\x00', 0x8b, 0x28, 0x7, 0x1000, 0x1000, 0x8c, 0x3, 0x0, 0x2, 0x9}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) 21:42:04 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/81, 0x51}, &(0x7f0000000080), 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x20}, 'port1\x00', 0x48, 0x40, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x0, 0x6, 0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:42:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x37ac, 0xe490, 0x34325258, 0x2, 0x2b, 0x4, 0x5, 0x3f, 0x1, 0x8, 0x2, 0x1}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x37ac, 0xe490, 0x34325258, 0x2, 0x2b, 0x4, 0x5, 0x3f, 0x1, 0x8, 0x2, 0x1}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) (async) 21:42:04 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xce, 0x0, 0x700}, 0x0) 21:42:04 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xea, 0x700000000000000}, 0x0) 21:42:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000480)={0x0, 0x3, r0, 0x40}) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) (async) r4 = memfd_secret(0x0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000100)={{}, {0x0, 0x2}}) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21:42:04 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xeb, 0x700000000000000}, 0x0) 21:42:04 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xcf, 0x0, 0x700}, 0x0) 21:42:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x37ac, 0xe490, 0x34325258, 0x2, 0x2b, 0x4, 0x5, 0x3f, 0x1, 0x8, 0x2, 0x1}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) 21:42:04 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) 21:42:04 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/81, 0x51}, &(0x7f0000000080), 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x20}, 'port1\x00', 0x48, 0x40, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x0, 0x6, 0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/81, 0x51}, &(0x7f0000000080), 0x2}, 0x20) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x20}, 'port1\x00', 0x48, 0x40, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x0, 0x6, 0x4}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) (async) 21:42:04 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) [ 2958.721815][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.728138][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 2958.800880][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2958.807825][ T3667] ath9k_htc: Failed to initialize the device [ 2958.815064][T27979] usb 3-1: ath9k_htc: USB layer deinitialized [ 2959.210869][T27979] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2959.771063][T27979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2959.780138][T27979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2959.788213][T27979] usb 3-1: Product: syz [ 2959.792425][T27979] usb 3-1: Manufacturer: syz [ 2959.797048][T27979] usb 3-1: SerialNumber: syz [ 2959.847964][T27979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2960.481090][T27979] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:42:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x3, 0x2}) 21:42:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd0, 0x0, 0x700}, 0x0) 21:42:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x3, @raw_data="dc680407c47842ed70da463ca1fb33b9a1acb1ffc4637b03f875984d391156514fe55ec97e352abbebbfd08bf31ee81773826745ad76f14822333249d0fd65d6adc44bf07100572bc442faeaeea53744fce52c2a04e1c1c3c2c846bce75ac37d6f8e67a939e5556caf4287c03a5796e4bef4085b283590709e5cdbc59456c60c7b86545622dd2a56beae987b2b86a20b03c56038c5e4da4953db2f020dfd382a7272a76d70d4f5de7ccf53bbd20c9f18940ab182b367f5e85ac2a06f702eedb386191ca025dfaa38"}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_fd={0x1ff, 0x3, 0x4, 0x0, 0x1f, {0x0, 0x2710}, {0x1, 0x1, 0xd9, 0xd5, 0x8, 0x6, "c06c8906"}, 0xffffffff, 0x4, {&(0x7f0000000080)=[{0x200, 0x400, {}, 0x1}, {0x2, 0x0, {r3}, 0x708}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:07 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/81, 0x51}, &(0x7f0000000080), 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x20}, 'port1\x00', 0x48, 0x40, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x0, 0x6, 0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:42:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xec, 0x700000000000000}, 0x0) 21:42:07 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) [ 2960.885047][T25691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2960.901367][T25691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2960.917801][T27825] usb 3-1: USB disconnect, device number 50 21:42:07 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000010c0)=[0x0, 0x0], &(0x7f0000001100)=[0x0], 0x0, 0x8, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000014c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x53}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1c, '\x00', r2, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xd, 0x20, 0x1}, 0x10, r4}, 0x80) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x8, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7}, @ldst={0x3, 0x2, 0x3, 0xf, 0xb, 0x2, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}]}, &(0x7f0000001780)='GPL\x00', 0x3, 0xdf, &(0x7f00000017c0)=""/223, 0x1e00, 0x14, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x2, 0x75, 0x9}, 0x10, r3, r1, 0x0, &(0x7f0000001980)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r5, 0xffffffffffffffff, r6, r7]}, 0x80) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x3, 0x5, 0x8, 0x30, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0xd1cacefb1cb275c1, 0x2, 0x3, 0x3, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x90d, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x29, r1, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xd, 0x7f, 0x401}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, r5, 0xffffffffffffffff, r8, 0x1, r9]}, 0x80) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r10, 0x400448c9, &(0x7f00000002c0)) 21:42:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd1, 0x0, 0x700}, 0x0) 21:42:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x3, @raw_data="dc680407c47842ed70da463ca1fb33b9a1acb1ffc4637b03f875984d391156514fe55ec97e352abbebbfd08bf31ee81773826745ad76f14822333249d0fd65d6adc44bf07100572bc442faeaeea53744fce52c2a04e1c1c3c2c846bce75ac37d6f8e67a939e5556caf4287c03a5796e4bef4085b283590709e5cdbc59456c60c7b86545622dd2a56beae987b2b86a20b03c56038c5e4da4953db2f020dfd382a7272a76d70d4f5de7ccf53bbd20c9f18940ab182b367f5e85ac2a06f702eedb386191ca025dfaa38"}) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_fd={0x1ff, 0x3, 0x4, 0x0, 0x1f, {0x0, 0x2710}, {0x1, 0x1, 0xd9, 0xd5, 0x8, 0x6, "c06c8906"}, 0xffffffff, 0x4, {&(0x7f0000000080)=[{0x200, 0x400, {}, 0x1}, {0x2, 0x0, {r3}, 0x708}]}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:07 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) 21:42:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xed, 0x700000000000000}, 0x0) 21:42:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd2, 0x0, 0x700}, 0x0) [ 2961.531075][T27979] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2961.538076][T27979] ath9k_htc: Failed to initialize the device [ 2961.544588][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 2961.910881][T27825] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2962.510975][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2962.520047][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2962.528106][T27825] usb 3-1: Product: syz [ 2962.532360][T27825] usb 3-1: Manufacturer: syz [ 2962.536970][T27825] usb 3-1: SerialNumber: syz [ 2962.601884][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2963.241140][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2963.447032][T25725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2963.456837][T25725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2963.466513][ T3667] usb 3-1: USB disconnect, device number 51 21:42:10 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x3, 0x2}) 21:42:10 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) 21:42:10 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000010c0)=[0x0, 0x0], &(0x7f0000001100)=[0x0], 0x0, 0x8, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000014c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x53}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1c, '\x00', r2, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xd, 0x20, 0x1}, 0x10, r4}, 0x80) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x8, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7}, @ldst={0x3, 0x2, 0x3, 0xf, 0xb, 0x2, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}]}, &(0x7f0000001780)='GPL\x00', 0x3, 0xdf, &(0x7f00000017c0)=""/223, 0x1e00, 0x14, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x2, 0x75, 0x9}, 0x10, r3, r1, 0x0, &(0x7f0000001980)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r5, 0xffffffffffffffff, r6, r7]}, 0x80) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x3, 0x5, 0x8, 0x30, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0xd1cacefb1cb275c1, 0x2, 0x3, 0x3, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x90d, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x29, r1, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xd, 0x7f, 0x401}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, r5, 0xffffffffffffffff, r8, 0x1, r9]}, 0x80) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r10, 0x400448c9, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000010c0)=[0x0, 0x0], &(0x7f0000001100)=[0x0], 0x0, 0x8, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000014c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x53}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1c, '\x00', r2, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xd, 0x20, 0x1}, 0x10, r4}, 0x80) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x8, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7}, @ldst={0x3, 0x2, 0x3, 0xf, 0xb, 0x2, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}]}, &(0x7f0000001780)='GPL\x00', 0x3, 0xdf, &(0x7f00000017c0)=""/223, 0x1e00, 0x14, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x2, 0x75, 0x9}, 0x10, r3, r1, 0x0, &(0x7f0000001980)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r5, 0xffffffffffffffff, r6, r7]}, 0x80) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x3, 0x5, 0x8, 0x30, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0xd1cacefb1cb275c1, 0x2, 0x3, 0x3, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x90d, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x29, r1, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xd, 0x7f, 0x401}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, r5, 0xffffffffffffffff, r8, 0x1, r9]}, 0x80) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r10, 0x400448c9, &(0x7f00000002c0)) (async) 21:42:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x3, @raw_data="dc680407c47842ed70da463ca1fb33b9a1acb1ffc4637b03f875984d391156514fe55ec97e352abbebbfd08bf31ee81773826745ad76f14822333249d0fd65d6adc44bf07100572bc442faeaeea53744fce52c2a04e1c1c3c2c846bce75ac37d6f8e67a939e5556caf4287c03a5796e4bef4085b283590709e5cdbc59456c60c7b86545622dd2a56beae987b2b86a20b03c56038c5e4da4953db2f020dfd382a7272a76d70d4f5de7ccf53bbd20c9f18940ab182b367f5e85ac2a06f702eedb386191ca025dfaa38"}) (async, rerun: 64) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_fd={0x1ff, 0x3, 0x4, 0x0, 0x1f, {0x0, 0x2710}, {0x1, 0x1, 0xd9, 0xd5, 0x8, 0x6, "c06c8906"}, 0xffffffff, 0x4, {&(0x7f0000000080)=[{0x200, 0x400, {}, 0x1}, {0x2, 0x0, {r3}, 0x708}]}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xee, 0x700000000000000}, 0x0) 21:42:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd3, 0x0, 0x700}, 0x0) 21:42:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xef, 0x700000000000000}, 0x0) 21:42:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd4, 0x0, 0x700}, 0x0) 21:42:10 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) (async, rerun: 64) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) 21:42:10 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000010c0)=[0x0, 0x0], &(0x7f0000001100)=[0x0], 0x0, 0x8, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000014c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x53}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1c, '\x00', r2, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xd, 0x20, 0x1}, 0x10, r4}, 0x80) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x8, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7}, @ldst={0x3, 0x2, 0x3, 0xf, 0xb, 0x2, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}]}, &(0x7f0000001780)='GPL\x00', 0x3, 0xdf, &(0x7f00000017c0)=""/223, 0x1e00, 0x14, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x2, 0x75, 0x9}, 0x10, r3, r1, 0x0, &(0x7f0000001980)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r5, 0xffffffffffffffff, r6, r7]}, 0x80) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, 0x0) (async) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x3, 0x5, 0x8, 0x30, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0xd1cacefb1cb275c1, 0x2, 0x3, 0x3, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x90d, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x29, r1, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xd, 0x7f, 0x401}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, r5, 0xffffffffffffffff, r8, 0x1, r9]}, 0x80) (async) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r10, 0x400448c9, &(0x7f00000002c0)) 21:42:10 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 21:42:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf0, 0x700000000000000}, 0x0) [ 2964.065431][T25760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2964.105032][T25760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.321101][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2964.328274][T27825] ath9k_htc: Failed to initialize the device [ 2964.339545][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 2964.761131][ T3667] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2965.300988][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2965.310124][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2965.318312][ T3667] usb 3-1: Product: syz [ 2965.322681][ T3667] usb 3-1: Manufacturer: syz [ 2965.327377][ T3667] usb 3-1: SerialNumber: syz [ 2965.374261][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2965.950953][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2966.353539][ T22] usb 3-1: USB disconnect, device number 52 21:42:13 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x3, 0x2}) 21:42:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd5, 0x0, 0x700}, 0x0) 21:42:13 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 21:42:13 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x3, @raw_data="7a550a6f74cfe81580add37529ba0e69313ed6acd83c9d5ea61237a6932c4af633d930d0ac80883742d89ac744b8de2a92a6ac427de53bd2a4f08e7e84e05c0ec29c9c32ecf48b581362fd7eaa24ba7107dbb43e7f8883ad2308b1eea5646238ccc06d1b0ebdb7be71ded50762c51e318adc9eb6ec3b3c87b08a770faefa97338f408d786c31c70437cf6580725534a7295f540509c57c21c257732742db2ec235eade06989ca79b804cb814113d242cbe0221027145a0f3ec796aa77b52cb1b1c34660ced522800"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) 21:42:13 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf1, 0x700000000000000}, 0x0) 21:42:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)) 21:42:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd6, 0x0, 0x700}, 0x0) 21:42:13 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf2, 0x700000000000000}, 0x0) 21:42:13 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x3, @raw_data="7a550a6f74cfe81580add37529ba0e69313ed6acd83c9d5ea61237a6932c4af633d930d0ac80883742d89ac744b8de2a92a6ac427de53bd2a4f08e7e84e05c0ec29c9c32ecf48b581362fd7eaa24ba7107dbb43e7f8883ad2308b1eea5646238ccc06d1b0ebdb7be71ded50762c51e318adc9eb6ec3b3c87b08a770faefa97338f408d786c31c70437cf6580725534a7295f540509c57c21c257732742db2ec235eade06989ca79b804cb814113d242cbe0221027145a0f3ec796aa77b52cb1b1c34660ced522800"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) 21:42:13 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 21:42:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)) (async) 21:42:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd7, 0x0, 0x700}, 0x0) [ 2967.041837][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2967.048833][ T3667] ath9k_htc: Failed to initialize the device [ 2967.056610][ T22] usb 3-1: ath9k_htc: USB layer deinitialized [ 2967.420912][ T22] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2968.021041][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2968.030107][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.038330][ T22] usb 3-1: Product: syz [ 2968.042696][ T22] usb 3-1: Manufacturer: syz [ 2968.047306][ T22] usb 3-1: SerialNumber: syz [ 2968.091823][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2968.730945][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2968.933855][T25821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2968.942630][T25821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2968.956819][T10727] usb 3-1: USB disconnect, device number 53 21:42:15 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0xda6b289df71d740d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4c5, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="000090c8"]) 21:42:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf3, 0x700000000000000}, 0x0) 21:42:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x4000, 0x4, {0x77359400}, {0x1, 0x1, 0x4, 0x24, 0x3f, 0x0, "0c7349fd"}, 0x80000000, 0x2, {&(0x7f00000000c0)=[{0x896, 0x1000, {&(0x7f0000000040)}, 0x200}, {0x0, 0x1, {&(0x7f0000000080)}, 0x4}]}, 0x7ff}) 21:42:15 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x3, @raw_data="7a550a6f74cfe81580add37529ba0e69313ed6acd83c9d5ea61237a6932c4af633d930d0ac80883742d89ac744b8de2a92a6ac427de53bd2a4f08e7e84e05c0ec29c9c32ecf48b581362fd7eaa24ba7107dbb43e7f8883ad2308b1eea5646238ccc06d1b0ebdb7be71ded50762c51e318adc9eb6ec3b3c87b08a770faefa97338f408d786c31c70437cf6580725534a7295f540509c57c21c257732742db2ec235eade06989ca79b804cb814113d242cbe0221027145a0f3ec796aa77b52cb1b1c34660ced522800"}) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) 21:42:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)) 21:42:15 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd8, 0x0, 0x700}, 0x0) 21:42:15 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xd9, 0x0, 0x700}, 0x0) 21:42:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x4000, 0x4, {0x77359400}, {0x1, 0x1, 0x4, 0x24, 0x3f, 0x0, "0c7349fd"}, 0x80000000, 0x2, {&(0x7f00000000c0)=[{0x896, 0x1000, {&(0x7f0000000040)}, 0x200}, {0x0, 0x1, {&(0x7f0000000080)}, 0x4}]}, 0x7ff}) 21:42:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf4, 0x700000000000000}, 0x0) 21:42:15 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) userfaultfd(0x80801) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:42:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x10}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 21:42:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf5, 0x700000000000000}, 0x0) [ 2969.760925][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2969.767968][ T22] ath9k_htc: Failed to initialize the device [ 2969.775152][T10727] usb 3-1: ath9k_htc: USB layer deinitialized [ 2970.130976][T10727] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2970.410976][T10727] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2970.530963][T10727] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2970.538972][T10727] usb 3-1: can't read configurations, error -22 [ 2970.690956][T10727] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2970.981132][T10727] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2971.101109][T10727] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2971.109077][T10727] usb 3-1: can't read configurations, error -22 [ 2971.116138][T10727] usb usb3-port1: attempt power cycle [ 2971.530871][T10727] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2971.661040][T10727] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2971.781115][T10727] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2971.789062][T10727] usb 3-1: can't read configurations, error -22 [ 2971.950885][T10727] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2972.081186][T10727] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2972.211059][T10727] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2972.219059][T10727] usb 3-1: can't read configurations, error -22 [ 2972.225613][T10727] usb usb3-port1: unable to enumerate USB device 21:42:18 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0xda6b289df71d740d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4c5, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="000090c8"]) 21:42:18 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) userfaultfd(0x80801) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:42:18 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xda, 0x0, 0x700}, 0x0) 21:42:18 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf6, 0x700000000000000}, 0x0) 21:42:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x4000, 0x4, {0x77359400}, {0x1, 0x1, 0x4, 0x24, 0x3f, 0x0, "0c7349fd"}, 0x80000000, 0x2, {&(0x7f00000000c0)=[{0x896, 0x1000, {&(0x7f0000000040)}, 0x200}, {0x0, 0x1, {&(0x7f0000000080)}, 0x4}]}, 0x7ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x4000, 0x4, {0x77359400}, {0x1, 0x1, 0x4, 0x24, 0x3f, 0x0, "0c7349fd"}, 0x80000000, 0x2, {&(0x7f00000000c0)=[{0x896, 0x1000, {&(0x7f0000000040)}, 0x200}, {0x0, 0x1, {&(0x7f0000000080)}, 0x4}]}, 0x7ff}) (async) 21:42:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x10}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 21:42:18 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdb, 0x0, 0x700}, 0x0) 21:42:18 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf7, 0x700000000000000}, 0x0) 21:42:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x10}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 21:42:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) 21:42:18 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) userfaultfd(0x80801) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:42:18 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdc, 0x0, 0x700}, 0x0) [ 2972.970943][ T22] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2973.260974][ T22] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2973.381033][ T22] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2973.388982][ T22] usb 3-1: can't read configurations, error -22 [ 2973.550840][ T22] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2973.830965][ T22] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2973.951122][ T22] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2973.959112][ T22] usb 3-1: can't read configurations, error -22 [ 2973.965762][ T22] usb usb3-port1: attempt power cycle [ 2974.390891][ T22] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2974.520974][ T22] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2974.641102][ T22] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2974.649047][ T22] usb 3-1: can't read configurations, error -22 [ 2974.803007][ T22] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2974.931139][ T22] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2975.051155][ T22] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2975.059116][ T22] usb 3-1: can't read configurations, error -22 [ 2975.065981][ T22] usb usb3-port1: unable to enumerate USB device 21:42:21 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0xda6b289df71d740d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4c5, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="000090c8"]) 21:42:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x7, 0x1f, 0xbf, 0x8001}, 0x2, 0xffffffff, &(0x7f0000000080)={{0x4, 0xef, 0xe731}}, 0x9, &(0x7f00000000c0)="298147da2204db6ca33b1b621db9196adafc3c401f6205137b6f2e41423b816556d042a48f83ad0d866c3412481d91809796683642761071db8498c3babeb9a3eec8f8000bf6d715b77bf76cb9a7702b2da04d3c374189417fbe17f826099feabd380b0262cad0be3c5347e6cb7db72f5876f9519ca14e349cbdb89ecd389347b0f3a081ec3a3dade8", 0x40}}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000380)={{0x0, 0x66}, {0x4, 0x1}, 0x7, 0x5, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000280)={0x6, 0x3, 0x80000000, 0x4880}) 21:42:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf8, 0x700000000000000}, 0x0) 21:42:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) 21:42:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000040)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x5, 0x1, 0x0, 0x3}) 21:42:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdd, 0x0, 0x700}, 0x0) 21:42:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000040)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x5, 0x1, 0x0, 0x3}) 21:42:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x7, 0x1f, 0xbf, 0x8001}, 0x2, 0xffffffff, &(0x7f0000000080)={{0x4, 0xef, 0xe731}}, 0x9, &(0x7f00000000c0)="298147da2204db6ca33b1b621db9196adafc3c401f6205137b6f2e41423b816556d042a48f83ad0d866c3412481d91809796683642761071db8498c3babeb9a3eec8f8000bf6d715b77bf76cb9a7702b2da04d3c374189417fbe17f826099feabd380b0262cad0be3c5347e6cb7db72f5876f9519ca14e349cbdb89ecd389347b0f3a081ec3a3dade8", 0x40}}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000380)={{0x0, 0x66}, {0x4, 0x1}, 0x7, 0x5, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000280)={0x6, 0x3, 0x80000000, 0x4880}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x7, 0x1f, 0xbf, 0x8001}, 0x2, 0xffffffff, &(0x7f0000000080)={{0x4, 0xef, 0xe731}}, 0x9, &(0x7f00000000c0)="298147da2204db6ca33b1b621db9196adafc3c401f6205137b6f2e41423b816556d042a48f83ad0d866c3412481d91809796683642761071db8498c3babeb9a3eec8f8000bf6d715b77bf76cb9a7702b2da04d3c374189417fbe17f826099feabd380b0262cad0be3c5347e6cb7db72f5876f9519ca14e349cbdb89ecd389347b0f3a081ec3a3dade8", 0x40}}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000380)={{0x0, 0x66}, {0x4, 0x1}, 0x7, 0x5, 0x6}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000280)={0x6, 0x3, 0x80000000, 0x4880}) (async) 21:42:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) (async) 21:42:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xde, 0x0, 0x700}, 0x0) 21:42:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf9, 0x700000000000000}, 0x0) 21:42:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x5, 0x1, 0x0, 0x3}) [ 2976.020915][T27979] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2976.301146][T27979] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2976.421173][T27979] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2976.429179][T27979] usb 3-1: can't read configurations, error -22 [ 2976.580877][T27979] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2976.880960][T27979] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2977.012838][T27979] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2977.021316][T27979] usb 3-1: can't read configurations, error -22 [ 2977.027696][T27979] usb usb3-port1: attempt power cycle [ 2977.452539][T27979] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2977.601029][T27979] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2977.735856][T27979] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2977.743808][T27979] usb 3-1: can't read configurations, error -22 [ 2977.890946][T27979] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2978.021085][T27979] usb 3-1: too many configurations: 197, using maximum allowed: 8 [ 2978.150946][T27979] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 2978.158885][T27979] usb 3-1: can't read configurations, error -22 [ 2978.165530][T27979] usb usb3-port1: unable to enumerate USB device 21:42:24 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7422d238", {0x3, 0x102, 0x0, 0x6, 0xffff, 0x8, 0x6}}) 21:42:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x7, 0x1f, 0xbf, 0x8001}, 0x2, 0xffffffff, &(0x7f0000000080)={{0x4, 0xef, 0xe731}}, 0x9, &(0x7f00000000c0)="298147da2204db6ca33b1b621db9196adafc3c401f6205137b6f2e41423b816556d042a48f83ad0d866c3412481d91809796683642761071db8498c3babeb9a3eec8f8000bf6d715b77bf76cb9a7702b2da04d3c374189417fbe17f826099feabd380b0262cad0be3c5347e6cb7db72f5876f9519ca14e349cbdb89ecd389347b0f3a081ec3a3dade8", 0x40}}) (async, rerun: 64) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000380)={{0x0, 0x66}, {0x4, 0x1}, 0x7, 0x5, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000280)={0x6, 0x3, 0x80000000, 0x4880}) 21:42:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xdf, 0x0, 0x700}, 0x0) 21:42:24 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfa, 0x700000000000000}, 0x0) 21:42:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0xb3, 0x1ff, 0x0, 'queue0\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x20, 0x8}, 0x1, 0xffffdee0, 0x2, {0xf3, 0x3}, 0x2, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={{0x80, 0x7f}, {0x4, 0xff}, 0x82, 0x5, 0x3}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000700)}, 0x7) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r1}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r2}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="d31fc2461ef943c06bb1eea02992bd8638c7b7e3f08baa3091335737883a287f3dba2b787ea12011a332a4bcef53d95efc2ec3c9cfcada2297d9b50d749e162fbd497a1fa9ad4dd1d240ffba35ccb3db479ee090b9cd043bca7ca734b049cfa0", 0x60, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r3}, &(0x7f0000000440)=""/173, 0xad, &(0x7f0000000600)={&(0x7f0000000500)={'blake2b-256\x00'}, &(0x7f0000000540)="51e03d6b181c5051b4b6d9b443728ba18b17659e0e3dadace273a569123a90ba94eaf70f556904e683544ce29cab13d0ecf3bc75ad414b039b19acacfb812823364a1cbbd85669ac879f645e8c7081f50d989dd4a64bdc2f9aa0b8d56f7194fc541b0e8da6c2125d14e3731d389fbfad2cd81aa574f06d55552146bf7eacf968362585cced3f9117", 0x88}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000640)={0x90, 0x2, 0x1, 'queue1\x00', 0x2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x3ff, 0x38414262, 0x1, @stepwise={0x401, 0xfffffff8, 0x7, 0x4, 0x80, 0x6}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:42:24 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfb, 0x700000000000000}, 0x0) 21:42:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe0, 0x0, 0x700}, 0x0) 21:42:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:42:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0xb3, 0x1ff, 0x0, 'queue0\x00', 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x20, 0x8}, 0x1, 0xffffdee0, 0x2, {0xf3, 0x3}, 0x2, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={{0x80, 0x7f}, {0x4, 0xff}, 0x82, 0x5, 0x3}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000700)}, 0x7) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r1}, 0x0, 0x0, 0x0) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r2}, 0x0, 0x0, 0x0) (async) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="d31fc2461ef943c06bb1eea02992bd8638c7b7e3f08baa3091335737883a287f3dba2b787ea12011a332a4bcef53d95efc2ec3c9cfcada2297d9b50d749e162fbd497a1fa9ad4dd1d240ffba35ccb3db479ee090b9cd043bca7ca734b049cfa0", 0x60, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r3}, &(0x7f0000000440)=""/173, 0xad, &(0x7f0000000600)={&(0x7f0000000500)={'blake2b-256\x00'}, &(0x7f0000000540)="51e03d6b181c5051b4b6d9b443728ba18b17659e0e3dadace273a569123a90ba94eaf70f556904e683544ce29cab13d0ecf3bc75ad414b039b19acacfb812823364a1cbbd85669ac879f645e8c7081f50d989dd4a64bdc2f9aa0b8d56f7194fc541b0e8da6c2125d14e3731d389fbfad2cd81aa574f06d55552146bf7eacf968362585cced3f9117", 0x88}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000640)={0x90, 0x2, 0x1, 'queue1\x00', 0x2}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x3ff, 0x38414262, 0x1, @stepwise={0x401, 0xfffffff8, 0x7, 0x4, 0x80, 0x6}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:42:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) memfd_secret(0x80000) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) 21:42:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0xb3, 0x1ff, 0x0, 'queue0\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x20, 0x8}, 0x1, 0xffffdee0, 0x2, {0xf3, 0x3}, 0x2, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={{0x80, 0x7f}, {0x4, 0xff}, 0x82, 0x5, 0x3}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000700)}, 0x7) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r1}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r2}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="d31fc2461ef943c06bb1eea02992bd8638c7b7e3f08baa3091335737883a287f3dba2b787ea12011a332a4bcef53d95efc2ec3c9cfcada2297d9b50d749e162fbd497a1fa9ad4dd1d240ffba35ccb3db479ee090b9cd043bca7ca734b049cfa0", 0x60, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r3}, &(0x7f0000000440)=""/173, 0xad, &(0x7f0000000600)={&(0x7f0000000500)={'blake2b-256\x00'}, &(0x7f0000000540)="51e03d6b181c5051b4b6d9b443728ba18b17659e0e3dadace273a569123a90ba94eaf70f556904e683544ce29cab13d0ecf3bc75ad414b039b19acacfb812823364a1cbbd85669ac879f645e8c7081f50d989dd4a64bdc2f9aa0b8d56f7194fc541b0e8da6c2125d14e3731d389fbfad2cd81aa574f06d55552146bf7eacf968362585cced3f9117", 0x88}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000640)={0x90, 0x2, 0x1, 'queue1\x00', 0x2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x3ff, 0x38414262, 0x1, @stepwise={0x401, 0xfffffff8, 0x7, 0x4, 0x80, 0x6}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0xb3, 0x1ff, 0x0, 'queue0\x00', 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x20, 0x8}, 0x1, 0xffffdee0, 0x2, {0xf3, 0x3}, 0x2, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={{0x80, 0x7f}, {0x4, 0xff}, 0x82, 0x5, 0x3}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000700)}, 0x7) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) (async) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r1}, 0x0, 0x0, 0x0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffc) (async) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r2}, 0x0, 0x0, 0x0) (async) add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="d31fc2461ef943c06bb1eea02992bd8638c7b7e3f08baa3091335737883a287f3dba2b787ea12011a332a4bcef53d95efc2ec3c9cfcada2297d9b50d749e162fbd497a1fa9ad4dd1d240ffba35ccb3db479ee090b9cd043bca7ca734b049cfa0", 0x60, 0xfffffffffffffff8) (async) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r3}, &(0x7f0000000440)=""/173, 0xad, &(0x7f0000000600)={&(0x7f0000000500)={'blake2b-256\x00'}, &(0x7f0000000540)="51e03d6b181c5051b4b6d9b443728ba18b17659e0e3dadace273a569123a90ba94eaf70f556904e683544ce29cab13d0ecf3bc75ad414b039b19acacfb812823364a1cbbd85669ac879f645e8c7081f50d989dd4a64bdc2f9aa0b8d56f7194fc541b0e8da6c2125d14e3731d389fbfad2cd81aa574f06d55552146bf7eacf968362585cced3f9117", 0x88}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000640)={0x90, 0x2, 0x1, 'queue1\x00', 0x2}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x3ff, 0x38414262, 0x1, @stepwise={0x401, 0xfffffff8, 0x7, 0x4, 0x80, 0x6}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) [ 2979.110880][T10727] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2979.631137][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2979.640222][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2979.648332][T10727] usb 3-1: Product: syz [ 2979.652565][T10727] usb 3-1: Manufacturer: syz [ 2979.657165][T10727] usb 3-1: SerialNumber: syz [ 2979.701853][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2980.300984][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2980.713516][T25948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2980.726346][T25948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2980.736146][T27979] usb 3-1: USB disconnect, device number 66 21:42:27 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7422d238", {0x3, 0x102, 0x0, 0x6, 0xffff, 0x8, 0x6}}) 21:42:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe1, 0x0, 0x700}, 0x0) 21:42:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfc, 0x700000000000000}, 0x0) 21:42:27 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:42:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x48800) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x210001, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x13, 0xffffffffffffffff, 0x10000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f0000000340)={0x4}, r2, 0x1, 0x0, 0x1}, 0x5) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x3f, 0x2, 0x3, 0x0, 0x1f}) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x400448c9, &(0x7f00000002c0)) 21:42:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000080)) 21:42:27 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:42:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x48800) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x210001, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x13, 0xffffffffffffffff, 0x10000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f0000000340)={0x4}, r2, 0x1, 0x0, 0x1}, 0x5) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x3f, 0x2, 0x3, 0x0, 0x1f}) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x400448c9, &(0x7f00000002c0)) 21:42:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfd, 0x700000000000000}, 0x0) 21:42:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe2, 0x0, 0x700}, 0x0) 21:42:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000080)) [ 2981.371200][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2981.378207][T10727] ath9k_htc: Failed to initialize the device [ 2981.399711][T27979] usb 3-1: ath9k_htc: USB layer deinitialized [ 2981.780967][T27979] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2982.321029][T27979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2982.330121][T27979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2982.340146][T27979] usb 3-1: Product: syz [ 2982.344629][T27979] usb 3-1: Manufacturer: syz [ 2982.349241][T27979] usb 3-1: SerialNumber: syz [ 2982.392064][T27979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2983.080935][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2983.490546][T25984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2983.499150][T25984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.511739][T28216] usb 3-1: USB disconnect, device number 67 21:42:30 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7422d238", {0x3, 0x102, 0x0, 0x6, 0xffff, 0x8, 0x6}}) 21:42:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe3, 0x0, 0x700}, 0x0) 21:42:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xd715, 0x41414770, 0x2, @stepwise={0x101, 0x7, 0x2, 0x80, 0x7fff, 0xff}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:42:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfe, 0x700000000000000}, 0x0) 21:42:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x48800) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x210001, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x4) (async, rerun: 64) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x13, 0xffffffffffffffff, 0x10000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f0000000340)={0x4}, r2, 0x1, 0x0, 0x1}, 0x5) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x3f, 0x2, 0x3, 0x0, 0x1f}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x400448c9, &(0x7f00000002c0)) 21:42:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000080)) (async) 21:42:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x102, 0x700000000000000}, 0x0) 21:42:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x6, 0x4f424752, 0x2, @discrete={0x6, 0x6}}) 21:42:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xd715, 0x41414770, 0x2, @stepwise={0x101, 0x7, 0x2, 0x80, 0x7fff, 0xff}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xd715, 0x41414770, 0x2, @stepwise={0x101, 0x7, 0x2, 0x80, 0x7fff, 0xff}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:42:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe4, 0x0, 0x700}, 0x0) 21:42:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0x6, 0x3, 0x4, 0x100000, 0x1000, {0x77359400}, {0x5, 0x0, 0x8, 0x2, 0xf9, 0x1, "d0599f80"}, 0x3, 0x3, {&(0x7f0000000040)=[{0x6, 0x6, {0x1}, 0x1122}, {0x5, 0x7, {0x2}, 0xf04}]}, 0x8, 0x0, r2}) 21:42:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x6, 0x4f424752, 0x2, @discrete={0x6, 0x6}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x6, 0x4f424752, 0x2, @discrete={0x6, 0x6}}) (async) [ 2984.170859][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2984.182722][T27825] ath9k_htc: Failed to initialize the device [ 2984.204746][T28216] usb 3-1: ath9k_htc: USB layer deinitialized [ 2984.580871][T28216] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2985.100990][T28216] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2985.110411][T28216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2985.118595][T28216] usb 3-1: Product: syz [ 2985.122986][T28216] usb 3-1: Manufacturer: syz [ 2985.127608][T28216] usb 3-1: SerialNumber: syz [ 2985.171553][T28216] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2985.740940][T28216] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2985.949374][T26034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2985.960098][T26034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.152836][ T3667] usb 3-1: USB disconnect, device number 68 21:42:32 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$khugepaged_scan(r1, &(0x7f0000001440), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000001400)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1320, &(0x7f0000000040)={[{0xc2, 0x4e00, "e41240d1bb657651214683b5ae6df3b9a5d36c51def7cee0755a445502d38b5f8c9538957e5243eea5c283b9c7dbba7d1eba3c571866277ce4f0532aecabf0f22e950a27b616676828578ac2781d64768fe8b369120f0ccd5af6e09af4c10593e9737eb84a0987a359872b64ce722f69a7b584e41e3930a4927f5d39e2058b946e2f05bf829c61307b60fe8e9a9cdf077163d49e07c70b1f6f6aa56bf3b5ed33514bd88027b59ca0375db107a653a8f4f3b1e033d376d06c798cf579d063cb753a18"}, {0x2c, 0x4e00, "6fab381f2bf6c09a8b3db0aabc3788b50b00f4fd3659e7641cae6bb1c7024a8bcce9fdf7d9d19b0e215d4a47"}, {0xa1, 0x4e00, "606f5851eeeb2976cb337e60b2893beabd8deb0b99eaa04dece3491117c74c1fc8aa13a156e0719e3f1be12012629e64bb91b5ca11af717bc4ab27e814afeda9249ddbc6fd669287bfbf065503f0856d7e857fe04a356d25e6e69dc3918348d4ccf46b64421816ec25a8cd7b4f170bd2e32c07036cd92a3644deb35b532e29f4b746d770e25a45d18a5160cf6239caa9cd52c9bad5158740c1791009cc4481b051"}, {0x1d, 0x4e00, "7e33c76cbff7b6f41d653c5a5271275bf653482ca0ae7158f4fa6efc1a"}, {0x1000, 0x4e00, "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"}, {0x75, 0x4e00, "e4a0c86a709e3b67eda17310747e50f48c06af02115a920fa6188e8c46b214d5c40f7c94cd5f3adb8c4d77d757ed1c34b2a39a04ab26b284a4384178d219d8e467e91030af7923bf2a32b10578460e26efa96385602603471e1e4e440a76196f970798939a28ed36e50b58f562146e2a2a67466cb5"}, {0xd5, 0x4e00, "28ce06e16829d1a62f3cc0eb5681ad1b3a0db53df56a77bee5b3460ac465dd3dec3a9745ae82b130932e88ed21159d5a14496a6925aacaae9892bb9defbf8493c7c6cd8f5f936f7270d624a1db1256c0efee02124c0bc28231496d7ec388a5f621b218cdbc5d32975707b4d0e99b0512b62296a29c129ae692d085122b9b758d9e602f1e81db2de9bfbe09957501f8a47673eb90cb5ff611fb10ba691eaf78c8debc7d85bf442884a663e403e5a1fbb5b6ff3328a10e5f5ab29f83c8b6580991db60fdf14e98d5758f8c814dc10db065ba0c1c47a1"}]}) 21:42:32 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x103, 0x700000000000000}, 0x0) 21:42:32 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xd715, 0x41414770, 0x2, @stepwise={0x101, 0x7, 0x2, 0x80, 0x7fff, 0xff}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xd715, 0x41414770, 0x2, @stepwise={0x101, 0x7, 0x2, 0x80, 0x7fff, 0xff}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:42:32 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe5, 0x0, 0x700}, 0x0) 21:42:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0x6, 0x3, 0x4, 0x100000, 0x1000, {0x77359400}, {0x5, 0x0, 0x8, 0x2, 0xf9, 0x1, "d0599f80"}, 0x3, 0x3, {&(0x7f0000000040)=[{0x6, 0x6, {0x1}, 0x1122}, {0x5, 0x7, {0x2}, 0xf04}]}, 0x8, 0x0, r2}) 21:42:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x6, 0x4f424752, 0x2, @discrete={0x6, 0x6}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x6, 0x4f424752, 0x2, @discrete={0x6, 0x6}}) (async) 21:42:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0x6, 0x3, 0x4, 0x100000, 0x1000, {0x77359400}, {0x5, 0x0, 0x8, 0x2, 0xf9, 0x1, "d0599f80"}, 0x3, 0x3, {&(0x7f0000000040)=[{0x6, 0x6, {0x1}, 0x1122}, {0x5, 0x7, {0x2}, 0xf04}]}, 0x8, 0x0, r2}) 21:42:32 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:42:32 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x104, 0x700000000000000}, 0x0) 21:42:32 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe6, 0x0, 0x700}, 0x0) 21:42:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000340)={0x1, @win={{0x10000, 0x3, 0x1, 0x787}, 0x2, 0x9, &(0x7f0000000180)={{0x28, 0xa5, 0x3}, &(0x7f0000000140)={{0x7ff, 0x7f, 0x6, 0x68a}, &(0x7f0000000100)={{0x2, 0x0, 0x9, 0x6}}}}, 0x4, &(0x7f00000001c0)="6114646a667d3ed380160e33562f7b7a8c844e99c12d513f76677acb84723b542edf9c653e015f3e17f62180a83cfa6fef6b3f55", 0x6}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@fd={0xffffffc1, 0x3, 0x4, 0x10, 0x3, {}, {0x4, 0x0, 0x9a, 0x0, 0x40, 0xd5, "b7da8eae"}, 0x8, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x7ff, 0x8d1}) 21:42:32 executing program 1: shmget(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = shmget(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/73) [ 2986.800941][T28216] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2986.811395][T28216] ath9k_htc: Failed to initialize the device [ 2986.833746][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 2987.200997][ T3667] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2987.741363][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2987.750431][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2987.763714][ T3667] usb 3-1: Product: syz [ 2987.768275][ T3667] usb 3-1: Manufacturer: syz [ 2987.773001][ T3667] usb 3-1: SerialNumber: syz [ 2987.812136][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2988.380913][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2988.790067][T26048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2988.798675][T26048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2989.026837][T27825] usb 3-1: USB disconnect, device number 69 [ 2989.441361][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2989.448327][T24210] ath9k_htc: Failed to initialize the device [ 2989.456839][T27825] usb 3-1: ath9k_htc: USB layer deinitialized 21:42:35 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$khugepaged_scan(r1, &(0x7f0000001440), 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000001400)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1320, &(0x7f0000000040)={[{0xc2, 0x4e00, "e41240d1bb657651214683b5ae6df3b9a5d36c51def7cee0755a445502d38b5f8c9538957e5243eea5c283b9c7dbba7d1eba3c571866277ce4f0532aecabf0f22e950a27b616676828578ac2781d64768fe8b369120f0ccd5af6e09af4c10593e9737eb84a0987a359872b64ce722f69a7b584e41e3930a4927f5d39e2058b946e2f05bf829c61307b60fe8e9a9cdf077163d49e07c70b1f6f6aa56bf3b5ed33514bd88027b59ca0375db107a653a8f4f3b1e033d376d06c798cf579d063cb753a18"}, {0x2c, 0x4e00, "6fab381f2bf6c09a8b3db0aabc3788b50b00f4fd3659e7641cae6bb1c7024a8bcce9fdf7d9d19b0e215d4a47"}, {0xa1, 0x4e00, "606f5851eeeb2976cb337e60b2893beabd8deb0b99eaa04dece3491117c74c1fc8aa13a156e0719e3f1be12012629e64bb91b5ca11af717bc4ab27e814afeda9249ddbc6fd669287bfbf065503f0856d7e857fe04a356d25e6e69dc3918348d4ccf46b64421816ec25a8cd7b4f170bd2e32c07036cd92a3644deb35b532e29f4b746d770e25a45d18a5160cf6239caa9cd52c9bad5158740c1791009cc4481b051"}, {0x1d, 0x4e00, "7e33c76cbff7b6f41d653c5a5271275bf653482ca0ae7158f4fa6efc1a"}, {0x1000, 0x4e00, "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"}, {0x75, 0x4e00, "e4a0c86a709e3b67eda17310747e50f48c06af02115a920fa6188e8c46b214d5c40f7c94cd5f3adb8c4d77d757ed1c34b2a39a04ab26b284a4384178d219d8e467e91030af7923bf2a32b10578460e26efa96385602603471e1e4e440a76196f970798939a28ed36e50b58f562146e2a2a67466cb5"}, {0xd5, 0x4e00, "28ce06e16829d1a62f3cc0eb5681ad1b3a0db53df56a77bee5b3460ac465dd3dec3a9745ae82b130932e88ed21159d5a14496a6925aacaae9892bb9defbf8493c7c6cd8f5f936f7270d624a1db1256c0efee02124c0bc28231496d7ec388a5f621b218cdbc5d32975707b4d0e99b0512b62296a29c129ae692d085122b9b758d9e602f1e81db2de9bfbe09957501f8a47673eb90cb5ff611fb10ba691eaf78c8debc7d85bf442884a663e403e5a1fbb5b6ff3328a10e5f5ab29f83c8b6580991db60fdf14e98d5758f8c814dc10db065ba0c1c47a1"}]}) 21:42:35 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:42:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x105, 0x700000000000000}, 0x0) 21:42:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe7, 0x0, 0x700}, 0x0) 21:42:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000340)={0x1, @win={{0x10000, 0x3, 0x1, 0x787}, 0x2, 0x9, &(0x7f0000000180)={{0x28, 0xa5, 0x3}, &(0x7f0000000140)={{0x7ff, 0x7f, 0x6, 0x68a}, &(0x7f0000000100)={{0x2, 0x0, 0x9, 0x6}}}}, 0x4, &(0x7f00000001c0)="6114646a667d3ed380160e33562f7b7a8c844e99c12d513f76677acb84723b542edf9c653e015f3e17f62180a83cfa6fef6b3f55", 0x6}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@fd={0xffffffc1, 0x3, 0x4, 0x10, 0x3, {}, {0x4, 0x0, 0x9a, 0x0, 0x40, 0xd5, "b7da8eae"}, 0x8, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x7ff, 0x8d1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000340)={0x1, @win={{0x10000, 0x3, 0x1, 0x787}, 0x2, 0x9, &(0x7f0000000180)={{0x28, 0xa5, 0x3}, &(0x7f0000000140)={{0x7ff, 0x7f, 0x6, 0x68a}, &(0x7f0000000100)={{0x2, 0x0, 0x9, 0x6}}}}, 0x4, &(0x7f00000001c0)="6114646a667d3ed380160e33562f7b7a8c844e99c12d513f76677acb84723b542edf9c653e015f3e17f62180a83cfa6fef6b3f55", 0x6}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@fd={0xffffffc1, 0x3, 0x4, 0x10, 0x3, {}, {0x4, 0x0, 0x9a, 0x0, 0x40, 0xd5, "b7da8eae"}, 0x8, 0x4, {}, 0x5}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x7ff, 0x8d1}) (async) 21:42:35 executing program 1: shmget(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) r1 = shmget(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/73) 21:42:35 executing program 1: shmget(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = shmget(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/73) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) shmget(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) (async) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/73) (async) 21:42:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe8, 0x0, 0x700}, 0x0) 21:42:35 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:42:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000340)={0x1, @win={{0x10000, 0x3, 0x1, 0x787}, 0x2, 0x9, &(0x7f0000000180)={{0x28, 0xa5, 0x3}, &(0x7f0000000140)={{0x7ff, 0x7f, 0x6, 0x68a}, &(0x7f0000000100)={{0x2, 0x0, 0x9, 0x6}}}}, 0x4, &(0x7f00000001c0)="6114646a667d3ed380160e33562f7b7a8c844e99c12d513f76677acb84723b542edf9c653e015f3e17f62180a83cfa6fef6b3f55", 0x6}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@fd={0xffffffc1, 0x3, 0x4, 0x10, 0x3, {}, {0x4, 0x0, 0x9a, 0x0, 0x40, 0xd5, "b7da8eae"}, 0x8, 0x4, {}, 0x5}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x7ff, 0x8d1}) 21:42:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x106, 0x700000000000000}, 0x0) 21:42:35 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000240)={0x18, 0xffffffffffffffda}, 0x18) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r2}, 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)=@multiplanar_mmap={0x10000, 0x2, 0x4, 0x800, 0x4, {0x0, 0x2710}, {0x3, 0x1, 0xce, 0x8, 0x1, 0x2, "c72fc8ec"}, 0x2, 0x1, {&(0x7f0000000440)=[{0x6, 0x4, {}, 0x6}, {0x5, 0x7, {0x7}, 0x4}]}, 0x6, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x1, 0x3, 0x4ff, 0x2}, 0x3, 0x8, &(0x7f00000000c0)={{0x800, 0x5, 0x0, 0x3f}, &(0x7f0000000080)={{0x7, 0x2, 0x1, 0x3}, &(0x7f0000000040)={{0x2, 0x3, 0xe64, 0x43}}}}, 0x1, &(0x7f0000000100)="ba23209aa06965634eb291d778e0fc995ca7b7e457795ff451b5901fde3339e9d680191c12b0cec0d738d305", 0x2}}) [ 2989.970931][T27825] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2990.550941][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2990.559995][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2990.568352][T27825] usb 3-1: Product: syz [ 2990.572703][T27825] usb 3-1: Manufacturer: syz [ 2990.577305][T27825] usb 3-1: SerialNumber: syz [ 2990.622038][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2991.240992][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2991.446969][T26106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2991.456475][T26106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2991.669630][T27978] usb 3-1: USB disconnect, device number 70 21:42:38 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$khugepaged_scan(r1, &(0x7f0000001440), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000001400)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1320, &(0x7f0000000040)={[{0xc2, 0x4e00, "e41240d1bb657651214683b5ae6df3b9a5d36c51def7cee0755a445502d38b5f8c9538957e5243eea5c283b9c7dbba7d1eba3c571866277ce4f0532aecabf0f22e950a27b616676828578ac2781d64768fe8b369120f0ccd5af6e09af4c10593e9737eb84a0987a359872b64ce722f69a7b584e41e3930a4927f5d39e2058b946e2f05bf829c61307b60fe8e9a9cdf077163d49e07c70b1f6f6aa56bf3b5ed33514bd88027b59ca0375db107a653a8f4f3b1e033d376d06c798cf579d063cb753a18"}, {0x2c, 0x4e00, "6fab381f2bf6c09a8b3db0aabc3788b50b00f4fd3659e7641cae6bb1c7024a8bcce9fdf7d9d19b0e215d4a47"}, {0xa1, 0x4e00, "606f5851eeeb2976cb337e60b2893beabd8deb0b99eaa04dece3491117c74c1fc8aa13a156e0719e3f1be12012629e64bb91b5ca11af717bc4ab27e814afeda9249ddbc6fd669287bfbf065503f0856d7e857fe04a356d25e6e69dc3918348d4ccf46b64421816ec25a8cd7b4f170bd2e32c07036cd92a3644deb35b532e29f4b746d770e25a45d18a5160cf6239caa9cd52c9bad5158740c1791009cc4481b051"}, {0x1d, 0x4e00, "7e33c76cbff7b6f41d653c5a5271275bf653482ca0ae7158f4fa6efc1a"}, {0x1000, 0x4e00, "731995a3fdd53804b4ad4baa095f565b5294fab4e20ddde5b6ce60b7513578f746ff5648a16e556db07a6aa58e2e482602a706ac2553caa9ef36fc6fd71d886ddf5ebc2a440bd6b2836280e81f0cc5d0176769c7a39e61ad2d26b1d0abf0ecaf42c69c77a9e8224af239d21237a229710d53fdf16f2e97bc34875be4d7c036f46c38e8385375758fb36900a9f7c433b5e3bd441584d5cf1bf48238b8488785fdfb12b81eeee0adf3c6f486759689a68759e1b6635e99a2d316c034f5eb7724c123d5e3e1336e8c47b23fbae0c3618935991b5e871dc98a512d1a4d80f30600e6b9f136b905db6aae2401fbfad98bd807f884e65c1ef78270d45893f5250dbc833668c4ad3e0c3aa3325e88e3e27bd238d3fbbcef2b293a0777e317f2608d44749583398c333f47c0eb4163cfe756f4fb94a730d2a89ffcf00a8f82dc0863cc4fee0dc77516cabebd5fdd694ebbb09db0227bfef388f6137d052c57749aff409846e8d4e25399173210f89bebe9c51c5b5b7ae5c86e6a83ad88a2e48f4abf5835720150344b5793b46a9f3923e7214c02dd692fc10aee8397ecfdb1054a57348c07d2a96e8c4f084e7ca60b74a30514710994fd586cdac3f604debbd3955f33b929b0c227029eb583f32923d259a708d98c3585545df819b32fc7efa889e7ff65fc9681f00fdc8891a7300bd2ee728c7fc60426a4deecc20872b58444cfa680436c3b9dfc4944a04feb23709ec8083ac486a341efe483ebeefe858cb2d79ac2aaa8b55502c1b57a9ad6d91de19b2de00d2f6a98c0cdf5b958cab785e48038391179c76f9d92a056f00d6fccdc2f7a8b28464155f316c53b16b2594c6668a97911c9b81ffcc8c0fbc72a50d660d4f05b932c409cb6ef317fce0071b0ed2062bd625bb2c28636c3d83328f24773be92e55add78ae7588160182ea670f11406f8e2b61999474cde0a107fa6de6d0120f274bf4709a4c0cedfc36742e76b7648fb55637a50ca7418e25b630d7f0f275bfd0410c27a231569a5ae90b4f0dfb938f9b7512746dd8cad387cd1d3070e66dbd9de32341ab05c6dff87c13dfe95359747087927e2214848cdf88fcf82b1acd752dd925229efb96eb17b6101f185b15ecca5e996a85745d70ca9e2eb965501361d05bc5073d73cb4c07a7b5235a10e89b1399ff66249e9c37a3dd59c6b25f6f584031965f248d9414102b49a065f1eaebfdc2910aef940050686d743b3d2ee23be14d0c86a84a2502c872aa414336ee1865f01665cdd0f637f26a1064409744145d510a8c846b2633b4e3c3aace50d68be1d368a4edc54046d4606054b5cbc1de20b1a75f8d1d6be05ea73352e280cf53a86e33c852ede524200d2f0f19607d81eb11d11c6e7a12c53cad5914663ab2cef442425c5ced88e94ec5894472f41ce09278de423577c74e6b74cbce36bb3ea149a4b6ccb03755cf2d74221f548c596ee5791c90d78eef4783e366b8cbc07a012e578ae749a1994b6f0bdf33f272031ec656931fbfe36d7724fa651d61ef3713c7cdf147f74c5053ddaed8c0f64883751bda9e250a028a5e401593de0a8105ef9cac6c335c6dd13463fb4eb93f2dfa25b08465d2f9d317eb3f67f301ed14c9a4e58903628869009f9d9e4cc723df64cf26945bae269ac5af8fbd229648c1cf7d26d6197929160b7c24c1528f87fdcb61b32715be97038a7b5d86baacbb1d743befe96ac75c55dd66a789f70ab2b6712ae6d4afd07e421f64f2217fdffd3ac23ae446c394a3a43eeaf864a0a18724cc9828d1baf1d2e4038a6c392c9855b264ab0bf41273b60258685665e1b19f48cb65ed3d155019bc255205a2a299d6b91c0fc51c1f2937191d15feb3bb57aa417f4a423b7e2c18a03bf3357a5bec2f85029e93d8cb00f789b6f445412ad604cfacd5f7ea0e9d4dbe2c48d0f18ec11450bcf3fdad59c03a8f8e6ae73c0ebef8d8f733c9c1cf0b2ef258e9ea741b6715541ac58349efeb475743e28a6e215951017699ffab9040d553b5084753c2a7d80c7b786925fb7f4cc3d2698de883d5f6b71910aebc363e07bd2a1ba76d62b88172e9c923443204529754f3e9d2c2f7db9d585588fc6f13128158a6d851ca3b41a1cfd61bfc3a7ca0757912cf0285bf76414f1f8cefd247ffc9d8f2cdbb0f6ff25eafae6c9175a8b6122ad8ebcc8ee1641791845db3549f9021e2b60f8ab7c4326e9c73d32106673efee0455f34b2bcf9533a072096388da34ade59c357c822925d0f738d8597da1aa1898ab9bebfcde14b659516721a0078bed82168101060924270f67aadb7bfd5a28d59bdf310e24e6ebea26d193e304f2ad7124e4ef4d97f72da258b53a919acc83ec7f5c9a80dda1873e11c1669aeceb4cf68dcf08b834889143d66f1f3888d25a793b71f14b9ef5b829653074a0582d721127f21c68e57fca7b5bc1bef92abd9f28e17f627a1e57b97994e89172bd86a83945adcd3af0ca4413edf8b5ff77c1320f6452519ee1aa670f56b77ab6117662408cff298cd8046be75f6a669fc5e0b45fcb3204b966dbdc063d6814f0cac408e875ea57849ffd952806ec77ab0f56e888a3f07946a7ba499824883f184a95d63d367de14aff6bc8e1f4de42bdc32e234d7be64f84f465ff6384448766abe1e2bf6c3e557148046f6718929e6d103d0262e874ac2afa95da85e348ffdd07bfaf492fb608de79b6a7e83be8c4376496d40d5c509a59f1bfebd1c610980c2b9e7bb734250b6d793dcb706b9e717603884a915a907c79052f45f0b27758e4046b96e778546e12809ac4f7f44acc785941141084f8de0bf664e2f71778c261e8404c3dc03325e3df6ff411ae33d745f831c4d0e027c3625b0823d41ea70cb354b321b684907ccf1fb961eda1a66f6f824e9cfb2f052c88e859a566d312ce470ba8826ed6a16d9cc085686e3a80886a2a40033775a209d54e6582fda7ddddb8c314d1460dc0a42d60c4a7bb47e82ff92f9227033d6ec9e8bf046dc1a0f202c2aa50ad40293cdd3eaaef60d62c9baf02d7ce9f616c252c7bb2c11cb5424ddc876f3e68636b93f0ff51e45d07c7f3af73bcf5c4054c7ad1c873ad6729f1af71ae7c027c6032c8d2b38fd2a724ba2f8e49a6343717531011e9823f971ce79d4e88f1f10a61226ba6759d3c3ebd9b8df3463e2d3122b6b96282f97c74ebc9982dc17af6b238f5643675f324074bbc520a5d3e6c2ccb8a6ab40385669e05d314ceb4314538429fe8eff7eaec5bfa432ddf9585bf2c6d3875dc0bc4d7d2c71e1656c79cf45fb4ed4b7e01f8a2d50138821be904aac173ee491b7be489ff0d46dbf345e0c28958e542dd0a9f828960e66ddd5579f52445986f5f95d7c7d3fe72b2ae416f81e2b3f266eba1fd1aebbd2c1781c8a36eb078823de6340a76e5ae3e418c79d6d0a7155bc3b9bc7947e92391b9f8dbde57b71c63d4da98a99b7c718ff71bfa0993330a733db5d1343c8f6c08346d34dc9f5ff846725dd7297f362b7931962a3b88f39355a89169ede1a6afaf75fa5ec5f463f2d5de86911b67b211f69b5afb05ed7660e8bf87dc49a154b0d49dcf92684ef41e999fce3825ef05dd5c545e25fbba2360e085d83d3140d709a4548ad24c8bd682d30c51e51730dd0e719c11d3f12c96a4c196986ca689dfc711da9ea018a114e4adcb476476dba9ec89fae3f43940d891a7142cfadbe89b9d411e21fb77a5937970a8b52802c366a817f3213208abbba8d6152e7f4f49a57594e22220800c8d11b92eefd3fba281bedffa5e9d6125cd8719efcaa6b972e5202ec6aba6b9da182cb755a8f821fc3581017f72cbe0bf9dc4dd17f23b6d4146c469bff03b9c309660694d1664d5a20e305e0af7178589df892513b108b69a5562c718446df8caea6fc87224542b0aa6e8fd8bfd699d3e67cf86d6cde885687f8a15960f17e0d9e2b2dbca880b89b0db4660464c3b94e4bf36d76c434e0acd03b00cda9df46a22d17681027f6a6cc86dbe96f2dd8cd356ecf8ee8981ef2145fe789c64e25001324f5d5e242981d91b75a96f4fac09a6caea0a48e4313a888e17563e84582250660c52fc6b17a25179fe7eb21fd25330afe83352609090145ecda9c5e788a6e12518e42eb220e3572200c38bfba9bf14efb17a5d2730d886d0a3ba40ebd3533832a9bbc0356bbf20b8702bfc220c9c794332fd7f8460488abb6d2bfedec4fcc114f536242cadd9f3313fb98707f15fcd8ee488d754ef138fc15f2a47efd39a7635f261b70b57bb8fac3893a443821b4e9fe04633723e9d9c143e38a2e657dbb1444adb94616f6783f1ea0f71219018ab23d465e0919bcc48091cd38acd8b28cae4dcf5b935337cbd30f87ce1a304d98d6db6272f127c6d4c03780d248151a3713749c2c7752a9d56e367e503f76ff83d7793381ce60073333ddc4a372ed20458aae9739a072c57299e6b63aa8cba43dc83c6fce8d49858e32873a2c33ce22edf0732cb4fb455b7d0e16d3f45e7cb79c387d9da8ab71ec77d26f922ae1a9bb26029c46f35a49ba7a430cd2db524e01ca410c450cfed2047a7cc55b14a1e1d74321cbcb3a624bc630be153751f1010dd987cbdcb4b52abfd13a8a6d4abb928815c4a90ada7b728eab601803f14a67d44c043cd1c4181b2012e64cc575a5ffa4bf556cc979bdc7a5099d1a53fa815a2488b4f0917e396acdca8dac643cf716d2c4931943da30706716e46497aee71d500a2aa7df2196a3dfa0712a3bf953600fda477dd7ea94366a767f2ec659921eaeed1e8f6d099956da005c66d8d8b130f50c2203a7f0294f18a240e843c90835a76e907d1b0dfed4527242d4e784e48812476adfa480f683f052140d70a9590b9c575bc001144c193770dcf5a09a43837dcbc12e5280ea448f7e2f2c058724a14428d4a340d5366ef2435cb96fbb21d574072b073c0cbe79f71b1963b07d12c614e242a401f1436c4c0c1c98b296ca7c6f202b160dc8d7c45f32f247c22c045784d711db4fdd4d89fbfbb69cbc12af7f9b57779ff8d41bd40e2c9ae90c88956ec639f28543c2bfc14f50bf70d941e7d02635d70853d448170a00dd8945d5bc0c12aab3dca6b82822a8632cd60815ab21c4b46a50c250d6125bd963fa6480317415f9d84be00f0d7e102bb962b8f4bf0fd9c331cc49b3208fce1a1efd5eeaf1b2baa74a6862b00ae61399330e20efa1bac256bc5fd8af6135a02681caa301b53221e823cc5196a7bc58b08a95e0b9be7343afccf7ed7966f6efa5a65b46df1142065545f5af21e1f178c35bf4d0777445e6ced66cdde147fbe08b2912f41887c6123c439ad6c95644072aa3548fe34b34b305566e58fc369ee95b23f08d10138219a89dc9beb939c33c32a18571a4d6c07d877358cea92608043e0788770f60b04adc63bcacf7a61f4e8af1f6fdad696db2e705bdbfa50d86f20d66f7c2ca42f4aaae01b4bd08ff08e8448a4bd300684422d754bdb6222bb7cd087c2fc8527d806dc8f03b15db6bf725412629700a80d5336a65a1c59ed6b288ae450c5d394fe4988eb4c34a821eed595bc683395501c3774ec08d43922071fcf7fecbbc080df2c5ecfd9b806f5241d61250bdc4f662c50c6866fbb6e6cc1232d7df50ef73d86d61623f390186cf40f64c0b7f34f710064e2958ece5d970fa93b8ac9fbed8ad1cb4774bf279dcb69a6d235f1197d8a1990d7c1ce81bcc4d46971c3814fde9efe78b0fc65783a5166d0fc650c38bd093904ddad6f04aa9fdc9426b5ea70c95461be9522bb42d0517194c60f7774498e4d4"}, {0x75, 0x4e00, "e4a0c86a709e3b67eda17310747e50f48c06af02115a920fa6188e8c46b214d5c40f7c94cd5f3adb8c4d77d757ed1c34b2a39a04ab26b284a4384178d219d8e467e91030af7923bf2a32b10578460e26efa96385602603471e1e4e440a76196f970798939a28ed36e50b58f562146e2a2a67466cb5"}, {0xd5, 0x4e00, "28ce06e16829d1a62f3cc0eb5681ad1b3a0db53df56a77bee5b3460ac465dd3dec3a9745ae82b130932e88ed21159d5a14496a6925aacaae9892bb9defbf8493c7c6cd8f5f936f7270d624a1db1256c0efee02124c0bc28231496d7ec388a5f621b218cdbc5d32975707b4d0e99b0512b62296a29c129ae692d085122b9b758d9e602f1e81db2de9bfbe09957501f8a47673eb90cb5ff611fb10ba691eaf78c8debc7d85bf442884a663e403e5a1fbb5b6ff3328a10e5f5ab29f83c8b6580991db60fdf14e98d5758f8c814dc10db065ba0c1c47a1"}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) write$khugepaged_scan(r1, &(0x7f0000001440), 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000001400)) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1320, &(0x7f0000000040)={[{0xc2, 0x4e00, "e41240d1bb657651214683b5ae6df3b9a5d36c51def7cee0755a445502d38b5f8c9538957e5243eea5c283b9c7dbba7d1eba3c571866277ce4f0532aecabf0f22e950a27b616676828578ac2781d64768fe8b369120f0ccd5af6e09af4c10593e9737eb84a0987a359872b64ce722f69a7b584e41e3930a4927f5d39e2058b946e2f05bf829c61307b60fe8e9a9cdf077163d49e07c70b1f6f6aa56bf3b5ed33514bd88027b59ca0375db107a653a8f4f3b1e033d376d06c798cf579d063cb753a18"}, {0x2c, 0x4e00, "6fab381f2bf6c09a8b3db0aabc3788b50b00f4fd3659e7641cae6bb1c7024a8bcce9fdf7d9d19b0e215d4a47"}, {0xa1, 0x4e00, "606f5851eeeb2976cb337e60b2893beabd8deb0b99eaa04dece3491117c74c1fc8aa13a156e0719e3f1be12012629e64bb91b5ca11af717bc4ab27e814afeda9249ddbc6fd669287bfbf065503f0856d7e857fe04a356d25e6e69dc3918348d4ccf46b64421816ec25a8cd7b4f170bd2e32c07036cd92a3644deb35b532e29f4b746d770e25a45d18a5160cf6239caa9cd52c9bad5158740c1791009cc4481b051"}, {0x1d, 0x4e00, "7e33c76cbff7b6f41d653c5a5271275bf653482ca0ae7158f4fa6efc1a"}, {0x1000, 0x4e00, "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"}, {0x75, 0x4e00, "e4a0c86a709e3b67eda17310747e50f48c06af02115a920fa6188e8c46b214d5c40f7c94cd5f3adb8c4d77d757ed1c34b2a39a04ab26b284a4384178d219d8e467e91030af7923bf2a32b10578460e26efa96385602603471e1e4e440a76196f970798939a28ed36e50b58f562146e2a2a67466cb5"}, {0xd5, 0x4e00, "28ce06e16829d1a62f3cc0eb5681ad1b3a0db53df56a77bee5b3460ac465dd3dec3a9745ae82b130932e88ed21159d5a14496a6925aacaae9892bb9defbf8493c7c6cd8f5f936f7270d624a1db1256c0efee02124c0bc28231496d7ec388a5f621b218cdbc5d32975707b4d0e99b0512b62296a29c129ae692d085122b9b758d9e602f1e81db2de9bfbe09957501f8a47673eb90cb5ff611fb10ba691eaf78c8debc7d85bf442884a663e403e5a1fbb5b6ff3328a10e5f5ab29f83c8b6580991db60fdf14e98d5758f8c814dc10db065ba0c1c47a1"}]}) (async) 21:42:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x107, 0x700000000000000}, 0x0) 21:42:38 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = getpgid(0x0) getpgid(r2) r3 = getpgrp(0x0) write$damon_target_ids(r0, &(0x7f00000000c0)={@void, [{' ', r2}, {' ', r3}]}, 0x2a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000040)) 21:42:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe9, 0x0, 0x700}, 0x0) 21:42:38 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000240)={0x18, 0xffffffffffffffda}, 0x18) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r2}, 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)=@multiplanar_mmap={0x10000, 0x2, 0x4, 0x800, 0x4, {0x0, 0x2710}, {0x3, 0x1, 0xce, 0x8, 0x1, 0x2, "c72fc8ec"}, 0x2, 0x1, {&(0x7f0000000440)=[{0x6, 0x4, {}, 0x6}, {0x5, 0x7, {0x7}, 0x4}]}, 0x6, 0x0, r3}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x1, 0x3, 0x4ff, 0x2}, 0x3, 0x8, &(0x7f00000000c0)={{0x800, 0x5, 0x0, 0x3f}, &(0x7f0000000080)={{0x7, 0x2, 0x1, 0x3}, &(0x7f0000000040)={{0x2, 0x3, 0xe64, 0x43}}}}, 0x1, &(0x7f0000000100)="ba23209aa06965634eb291d778e0fc995ca7b7e457795ff451b5901fde3339e9d680191c12b0cec0d738d305", 0x2}}) 21:42:38 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) memfd_secret(0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:38 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async, rerun: 64) memfd_secret(0x0) (rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (rerun: 64) 21:42:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xea, 0x0, 0x700}, 0x0) 21:42:38 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r2 = getpgid(0x0) getpgid(r2) r3 = getpgrp(0x0) write$damon_target_ids(r0, &(0x7f00000000c0)={@void, [{' ', r2}, {' ', r3}]}, 0x2a) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000040)) 21:42:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x108, 0x700000000000000}, 0x0) 21:42:38 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000240)={0x18, 0xffffffffffffffda}, 0x18) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r2}, 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)=@multiplanar_mmap={0x10000, 0x2, 0x4, 0x800, 0x4, {0x0, 0x2710}, {0x3, 0x1, 0xce, 0x8, 0x1, 0x2, "c72fc8ec"}, 0x2, 0x1, {&(0x7f0000000440)=[{0x6, 0x4, {}, 0x6}, {0x5, 0x7, {0x7}, 0x4}]}, 0x6, 0x0, r3}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x1, 0x3, 0x4ff, 0x2}, 0x3, 0x8, &(0x7f00000000c0)={{0x800, 0x5, 0x0, 0x3f}, &(0x7f0000000080)={{0x7, 0x2, 0x1, 0x3}, &(0x7f0000000040)={{0x2, 0x3, 0xe64, 0x43}}}}, 0x1, &(0x7f0000000100)="ba23209aa06965634eb291d778e0fc995ca7b7e457795ff451b5901fde3339e9d680191c12b0cec0d738d305", 0x2}}) 21:42:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xeb, 0x0, 0x700}, 0x0) [ 2992.320981][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2992.331456][T27825] ath9k_htc: Failed to initialize the device [ 2992.357473][T27978] usb 3-1: ath9k_htc: USB layer deinitialized [ 2992.740861][T27978] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2993.300939][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2993.310030][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.318070][T27978] usb 3-1: Product: syz [ 2993.322346][T27978] usb 3-1: Manufacturer: syz [ 2993.326967][T27978] usb 3-1: SerialNumber: syz [ 2993.374265][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2993.980891][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2994.383134][T26121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2994.393047][T26121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 21:42:40 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002100)={0x18, 0xfffffffffffffff5, r0, {0x7fff}}, 0x18) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0300003cbd63df00"]) 21:42:40 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = getpgid(0x0) getpgid(r2) r3 = getpgrp(0x0) write$damon_target_ids(r0, &(0x7f00000000c0)={@void, [{' ', r2}, {' ', r3}]}, 0x2a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) getpgid(0x0) (async) getpgid(r2) (async) getpgrp(0x0) (async) write$damon_target_ids(r0, &(0x7f00000000c0)={@void, [{' ', r2}, {' ', r3}]}, 0x2a) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000040)) (async) 21:42:40 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x109, 0x700000000000000}, 0x0) 21:42:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @raw_data="9157fab2d80e04646ecdea10c89a9da5032427799945901067d869e28e42936b69a84a345a210ae3b4ac512de0810b159f82600a7757d33e1a8c16e7d40a38a21e363d902cc2b98f84a310df35b7bb7ad4562dde65b73fa27e70787c1e77743d8d8ecf7ec6dd76e2baffae80173477fb4646fc7095d546153cfeee321e805d3ed9fe8ad4a807a09ddebb8e57db0b189c5cf42bcdb97229ae8f413c805002c7ffc430bc7afd8cd43597294a66194b14ff0355f6553fac6c49df8289e4f0c86c06b1bca450253c4a7f"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:42:40 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xec, 0x0, 0x700}, 0x0) 21:42:40 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) memfd_secret(0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) [ 2994.634248][T24210] usb 3-1: USB disconnect, device number 71 21:42:40 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xed, 0x0, 0x700}, 0x0) 21:42:40 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10a, 0x700000000000000}, 0x0) 21:42:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @raw_data="9157fab2d80e04646ecdea10c89a9da5032427799945901067d869e28e42936b69a84a345a210ae3b4ac512de0810b159f82600a7757d33e1a8c16e7d40a38a21e363d902cc2b98f84a310df35b7bb7ad4562dde65b73fa27e70787c1e77743d8d8ecf7ec6dd76e2baffae80173477fb4646fc7095d546153cfeee321e805d3ed9fe8ad4a807a09ddebb8e57db0b189c5cf42bcdb97229ae8f413c805002c7ffc430bc7afd8cd43597294a66194b14ff0355f6553fac6c49df8289e4f0c86c06b1bca450253c4a7f"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:42:40 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@mmap={0x6, 0x7, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x4, 0xc, 0x1f, 0x1, 0x3f, 0xee, "68799927"}, 0x60, 0x1, {}, 0x3f, 0x0, r0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x6, 0x72, 0x1, 'queue0\x00', 0x8001}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) 21:42:40 executing program 1: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@mmap={0x5, 0x3, 0x44, 0x40, 0x9, {r1, r2/1000+60000}, {0x4, 0x0, 0x3, 0x25, 0x4, 0x3, "17423c9c"}, 0xfad, 0x1, {}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:42:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @raw_data="9157fab2d80e04646ecdea10c89a9da5032427799945901067d869e28e42936b69a84a345a210ae3b4ac512de0810b159f82600a7757d33e1a8c16e7d40a38a21e363d902cc2b98f84a310df35b7bb7ad4562dde65b73fa27e70787c1e77743d8d8ecf7ec6dd76e2baffae80173477fb4646fc7095d546153cfeee321e805d3ed9fe8ad4a807a09ddebb8e57db0b189c5cf42bcdb97229ae8f413c805002c7ffc430bc7afd8cd43597294a66194b14ff0355f6553fac6c49df8289e4f0c86c06b1bca450253c4a7f"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) [ 2995.040940][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2995.047923][T27978] ath9k_htc: Failed to initialize the device [ 2995.059112][T24210] usb 3-1: ath9k_htc: USB layer deinitialized [ 2995.420953][T24210] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2995.941218][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2995.950282][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2995.959774][T24210] usb 3-1: Product: syz [ 2995.964336][T24210] usb 3-1: Manufacturer: syz [ 2995.969020][T24210] usb 3-1: SerialNumber: syz [ 2996.011423][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2996.580949][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2996.997171][ T3667] usb 3-1: USB disconnect, device number 72 21:42:43 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002100)={0x18, 0xfffffffffffffff5, r0, {0x7fff}}, 0x18) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0300003cbd63df00"]) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002100)={0x18, 0xfffffffffffffff5, r0, {0x7fff}}, 0x18) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0300003cbd63df00"]) (async) 21:42:43 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@mmap={0x6, 0x7, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x4, 0xc, 0x1f, 0x1, 0x3f, 0xee, "68799927"}, 0x60, 0x1, {}, 0x3f, 0x0, r0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x6, 0x72, 0x1, 'queue0\x00', 0x8001}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@mmap={0x6, 0x7, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x4, 0xc, 0x1f, 0x1, 0x3f, 0xee, "68799927"}, 0x60, 0x1, {}, 0x3f, 0x0, r0}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x6, 0x72, 0x1, 'queue0\x00', 0x8001}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) (async) 21:42:43 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xee, 0x0, 0x700}, 0x0) 21:42:43 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10b, 0x700000000000000}, 0x0) 21:42:43 executing program 1: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@mmap={0x5, 0x3, 0x44, 0x40, 0x9, {r1, r2/1000+60000}, {0x4, 0x0, 0x3, 0x25, 0x4, 0x3, "17423c9c"}, 0xfad, 0x1, {}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@mmap={0x5, 0x3, 0x44, 0x40, 0x9, {r1, r2/1000+60000}, {0x4, 0x0, 0x3, 0x25, 0x4, 0x3, "17423c9c"}, 0xfad, 0x1, {}, 0x8, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) 21:42:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x64001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x1, r3, 0x20}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}}, 0xa0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) 21:42:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x64001, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x1, r3, 0x20}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) (async, rerun: 64) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}}, 0xa0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) 21:42:43 executing program 1: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@mmap={0x5, 0x3, 0x44, 0x40, 0x9, {r1, r2/1000+60000}, {0x4, 0x0, 0x3, 0x25, 0x4, 0x3, "17423c9c"}, 0xfad, 0x1, {}, 0x8, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:42:43 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xef, 0x0, 0x700}, 0x0) 21:42:43 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10c, 0x700000000000000}, 0x0) 21:42:43 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@mmap={0x6, 0x7, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x4, 0xc, 0x1f, 0x1, 0x3f, 0xee, "68799927"}, 0x60, 0x1, {}, 0x3f, 0x0, r0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x6, 0x72, 0x1, 'queue0\x00', 0x8001}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@mmap={0x6, 0x7, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x4, 0xc, 0x1f, 0x1, 0x3f, 0xee, "68799927"}, 0x60, 0x1, {}, 0x3f, 0x0, r0}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x6, 0x72, 0x1, 'queue0\x00', 0x8001}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) (async) 21:42:43 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r1, 0x10000000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) [ 2997.611188][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2997.618196][T24210] ath9k_htc: Failed to initialize the device [ 2997.650730][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 2998.020876][ T3667] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2998.541058][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2998.550136][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2998.558218][ T3667] usb 3-1: Product: syz [ 2998.562574][ T3667] usb 3-1: Manufacturer: syz [ 2998.567182][ T3667] usb 3-1: SerialNumber: syz [ 2998.622313][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2999.200988][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:42:45 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002100)={0x18, 0xfffffffffffffff5, r0, {0x7fff}}, 0x18) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0300003cbd63df00"]) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002100)={0x18, 0xfffffffffffffff5, r0, {0x7fff}}, 0x18) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0300003cbd63df00"]) (async) 21:42:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf0, 0x0, 0x700}, 0x0) 21:42:45 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10d, 0x700000000000000}, 0x0) 21:42:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x64001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x1, r3, 0x20}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}}, 0xa0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x64001, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x1, r3, 0x20}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}}, 0xa0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) (async) 21:42:45 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r1, 0x10000000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:42:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@overlay={0x8, 0x2, 0x4, 0x800, 0x6, {0x77359400}, {0x2, 0x0, 0x1, 0x1, 0x20, 0xc2, "85677cc4"}, 0x1ff, 0x3, {}, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$khugepaged_scan(r4, &(0x7f0000000200), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x40, 0x1, 0x4, 0x4, 0xc7, {}, {0x2, 0x8, 0x1f, 0x4, 0x6, 0x5, "7e4d59ba"}, 0x8bb, 0x3, {&(0x7f0000000040)=[{0x1, 0x3f, {0xbf}, 0x3}, {0x4, 0x4, {0x6}, 0x1}]}, 0x10001, 0x0, r3}) 21:42:45 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r1, 0x10000000) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:42:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@overlay={0x8, 0x2, 0x4, 0x800, 0x6, {0x77359400}, {0x2, 0x0, 0x1, 0x1, 0x20, 0xc2, "85677cc4"}, 0x1ff, 0x3, {}, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$khugepaged_scan(r4, &(0x7f0000000200), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x40, 0x1, 0x4, 0x4, 0xc7, {}, {0x2, 0x8, 0x1f, 0x4, 0x6, 0x5, "7e4d59ba"}, 0x8bb, 0x3, {&(0x7f0000000040)=[{0x1, 0x3f, {0xbf}, 0x3}, {0x4, 0x4, {0x6}, 0x1}]}, 0x10001, 0x0, r3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@overlay={0x8, 0x2, 0x4, 0x800, 0x6, {0x77359400}, {0x2, 0x0, 0x1, 0x1, 0x20, 0xc2, "85677cc4"}, 0x1ff, 0x3, {}, 0x6}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) write$khugepaged_scan(r4, &(0x7f0000000200), 0x8) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x40, 0x1, 0x4, 0x4, 0xc7, {}, {0x2, 0x8, 0x1f, 0x4, 0x6, 0x5, "7e4d59ba"}, 0x8bb, 0x3, {&(0x7f0000000040)=[{0x1, 0x3f, {0xbf}, 0x3}, {0x4, 0x4, {0x6}, 0x1}]}, 0x10001, 0x0, r3}) (async) [ 2999.613726][T28216] usb 3-1: USB disconnect, device number 73 21:42:45 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10e, 0x700000000000000}, 0x0) 21:42:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf1, 0x0, 0x700}, 0x0) 21:42:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x0, @pix_mp={0x8000, 0x9, 0x56555959, 0x0, 0xc, [{0x4}, {0x10001, 0x6}, {0x1, 0xffff}, {0x1ff, 0xffffffc1}, {0x3, 0x7}, {0x5, 0xeb}, {0x1, 0x3}, {0xb03, 0xfffffffb}], 0x5, 0xf1, 0x1, 0x0, 0x6}}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0800, 0x0) r3 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_fd={0x3ff, 0x1, 0x4, 0x20, 0x2, {}, {0x3, 0x1, 0xe0, 0xe1, 0xa3, 0x2, "4fc4a6e7"}, 0x80000001, 0x4, {&(0x7f0000000000)=[{0x5, 0x800, {r2}, 0x1000}, {0x1, 0x8, {r3}, 0x7}]}, 0x9}) 21:42:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x20, 0x4, {0x0, 0xea60}, {0x5487086b554759d9, 0x2, 0xaf, 0x0, 0x3, 0x97, "3cfc597d"}, 0x5, 0x3, {&(0x7f0000000000)=[{0x3f, 0x80000000, {0x7}, 0x7f}, {0x46, 0x412}]}, 0x65b, 0x0, r2}) [ 3000.240881][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3000.247843][ T3667] ath9k_htc: Failed to initialize the device [ 3000.254630][T28216] usb 3-1: ath9k_htc: USB layer deinitialized [ 3000.630874][T28216] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3001.151451][T28216] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3001.160543][T28216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3001.168619][T28216] usb 3-1: Product: syz [ 3001.172882][T28216] usb 3-1: Manufacturer: syz [ 3001.177486][T28216] usb 3-1: SerialNumber: syz [ 3001.222049][T28216] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3001.790896][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:42:48 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd5c}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f0000000040)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:42:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10f, 0x700000000000000}, 0x0) 21:42:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x0, @pix_mp={0x8000, 0x9, 0x56555959, 0x0, 0xc, [{0x4}, {0x10001, 0x6}, {0x1, 0xffff}, {0x1ff, 0xffffffc1}, {0x3, 0x7}, {0x5, 0xeb}, {0x1, 0x3}, {0xb03, 0xfffffffb}], 0x5, 0xf1, 0x1, 0x0, 0x6}}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0800, 0x0) (async) r3 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_fd={0x3ff, 0x1, 0x4, 0x20, 0x2, {}, {0x3, 0x1, 0xe0, 0xe1, 0xa3, 0x2, "4fc4a6e7"}, 0x80000001, 0x4, {&(0x7f0000000000)=[{0x5, 0x800, {r2}, 0x1000}, {0x1, 0x8, {r3}, 0x7}]}, 0x9}) 21:42:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf2, 0x0, 0x700}, 0x0) 21:42:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@overlay={0x8, 0x2, 0x4, 0x800, 0x6, {0x77359400}, {0x2, 0x0, 0x1, 0x1, 0x20, 0xc2, "85677cc4"}, 0x1ff, 0x3, {}, 0x6}) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async, rerun: 64) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (rerun: 64) write$khugepaged_scan(r4, &(0x7f0000000200), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x40, 0x1, 0x4, 0x4, 0xc7, {}, {0x2, 0x8, 0x1f, 0x4, 0x6, 0x5, "7e4d59ba"}, 0x8bb, 0x3, {&(0x7f0000000040)=[{0x1, 0x3f, {0xbf}, 0x3}, {0x4, 0x4, {0x6}, 0x1}]}, 0x10001, 0x0, r3}) 21:42:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x20, 0x4, {0x0, 0xea60}, {0x5487086b554759d9, 0x2, 0xaf, 0x0, 0x3, 0x97, "3cfc597d"}, 0x5, 0x3, {&(0x7f0000000000)=[{0x3f, 0x80000000, {0x7}, 0x7f}, {0x46, 0x412}]}, 0x65b, 0x0, r2}) [ 3002.213335][T27978] usb 3-1: USB disconnect, device number 74 21:42:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf3, 0x0, 0x700}, 0x0) 21:42:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x110, 0x700000000000000}, 0x0) 21:42:48 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000340)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @win={{0x5, 0xffff9977, 0x9, 0xfe84}, 0x2, 0xfffffffe, &(0x7f00000000c0)={{0x80000000, 0x7ff, 0x40, 0x206b786b}, &(0x7f0000000080)={{0x80000001, 0x1f, 0x0, 0x1}}}, 0x8, &(0x7f0000000100)="658a8af3feb0ad09d9b883dc289a61cf4ffdde7ca79daebb4465a0291eec008ff9a11b31d6d0850e75534c43c89583c8dae0a7180b3c251a6a15f513e4bc385c9456c26c4145e932d4c7c67fc9f5f2fd2d7341ce0f03"}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x0, @pix_mp={0x8000, 0x9, 0x56555959, 0x0, 0xc, [{0x4}, {0x10001, 0x6}, {0x1, 0xffff}, {0x1ff, 0xffffffc1}, {0x3, 0x7}, {0x5, 0xeb}, {0x1, 0x3}, {0xb03, 0xfffffffb}], 0x5, 0xf1, 0x1, 0x0, 0x6}}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0800, 0x0) r3 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_fd={0x3ff, 0x1, 0x4, 0x20, 0x2, {}, {0x3, 0x1, 0xe0, 0xe1, 0xa3, 0x2, "4fc4a6e7"}, 0x80000001, 0x4, {&(0x7f0000000000)=[{0x5, 0x800, {r2}, 0x1000}, {0x1, 0x8, {r3}, 0x7}]}, 0x9}) 21:42:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x20, 0x4, {0x0, 0xea60}, {0x5487086b554759d9, 0x2, 0xaf, 0x0, 0x3, 0x97, "3cfc597d"}, 0x5, 0x3, {&(0x7f0000000000)=[{0x3f, 0x80000000, {0x7}, 0x7f}, {0x46, 0x412}]}, 0x65b, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x20, 0x4, {0x0, 0xea60}, {0x5487086b554759d9, 0x2, 0xaf, 0x0, 0x3, 0x97, "3cfc597d"}, 0x5, 0x3, {&(0x7f0000000000)=[{0x3f, 0x80000000, {0x7}, 0x7f}, {0x46, 0x412}]}, 0x65b, 0x0, r2}) (async) 21:42:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf4, 0x0, 0x700}, 0x0) [ 3002.881074][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3002.888202][T10727] ath9k_htc: Failed to initialize the device [ 3002.897277][T27978] usb 3-1: ath9k_htc: USB layer deinitialized [ 3003.290841][T27978] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3003.700939][T27978] usb 3-1: config index 0 descriptor too short (expected 64860, got 72) [ 3003.881025][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3003.890132][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3003.898255][T27978] usb 3-1: Product: syz [ 3003.902470][T27978] usb 3-1: Manufacturer: syz [ 3003.907060][T27978] usb 3-1: SerialNumber: syz [ 3003.962513][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3004.551038][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3004.967335][T10727] usb 3-1: USB disconnect, device number 75 21:42:51 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd5c}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f0000000040)) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:42:51 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 21:42:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000340)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @win={{0x5, 0xffff9977, 0x9, 0xfe84}, 0x2, 0xfffffffe, &(0x7f00000000c0)={{0x80000000, 0x7ff, 0x40, 0x206b786b}, &(0x7f0000000080)={{0x80000001, 0x1f, 0x0, 0x1}}}, 0x8, &(0x7f0000000100)="658a8af3feb0ad09d9b883dc289a61cf4ffdde7ca79daebb4465a0291eec008ff9a11b31d6d0850e75534c43c89583c8dae0a7180b3c251a6a15f513e4bc385c9456c26c4145e932d4c7c67fc9f5f2fd2d7341ce0f03"}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x111, 0x700000000000000}, 0x0) 21:42:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf5, 0x0, 0x700}, 0x0) 21:42:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x100, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:42:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf6, 0x0, 0x700}, 0x0) 21:42:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x112, 0x700000000000000}, 0x0) 21:42:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000340)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @win={{0x5, 0xffff9977, 0x9, 0xfe84}, 0x2, 0xfffffffe, &(0x7f00000000c0)={{0x80000000, 0x7ff, 0x40, 0x206b786b}, &(0x7f0000000080)={{0x80000001, 0x1f, 0x0, 0x1}}}, 0x8, &(0x7f0000000100)="658a8af3feb0ad09d9b883dc289a61cf4ffdde7ca79daebb4465a0291eec008ff9a11b31d6d0850e75534c43c89583c8dae0a7180b3c251a6a15f513e4bc385c9456c26c4145e932d4c7c67fc9f5f2fd2d7341ce0f03"}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:51 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 21:42:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x100, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x100, 0x1}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) (async) 21:42:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf7, 0x0, 0x700}, 0x0) [ 3005.602928][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3005.609933][T27978] ath9k_htc: Failed to initialize the device [ 3005.638146][T10727] usb 3-1: ath9k_htc: USB layer deinitialized [ 3006.020854][T10727] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3006.380922][T10727] usb 3-1: config index 0 descriptor too short (expected 64860, got 72) [ 3006.541547][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3006.550640][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.558929][T10727] usb 3-1: Product: syz [ 3006.563547][T10727] usb 3-1: Manufacturer: syz [ 3006.568160][T10727] usb 3-1: SerialNumber: syz [ 3006.612131][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3007.180897][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3007.583522][T27825] usb 3-1: USB disconnect, device number 76 21:42:54 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd5c}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f0000000040)) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:42:54 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x113, 0x700000000000000}, 0x0) 21:42:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@multiplanar_userptr={0xe37, 0x2, 0x4, 0x1000, 0x1, {0x0, 0x2710}, {0x5, 0x9, 0x9d, 0xfb, 0x8, 0x2, "426422ce"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x2400, 0x4, {&(0x7f0000000180)}, 0x4}, {0x4, 0x81, {&(0x7f00000001c0)}, 0x7}]}, 0x1f, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x0, 0x1, 'queue0\x00', 0x9}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:54 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 21:42:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x100, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) 21:42:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf8, 0x0, 0x700}, 0x0) 21:42:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@multiplanar_userptr={0xe37, 0x2, 0x4, 0x1000, 0x1, {0x0, 0x2710}, {0x5, 0x9, 0x9d, 0xfb, 0x8, 0x2, "426422ce"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x2400, 0x4, {&(0x7f0000000180)}, 0x4}, {0x4, 0x81, {&(0x7f00000001c0)}, 0x7}]}, 0x1f, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x0, 0x1, 'queue0\x00', 0x9}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@multiplanar_userptr={0xe37, 0x2, 0x4, 0x1000, 0x1, {0x0, 0x2710}, {0x5, 0x9, 0x9d, 0xfb, 0x8, 0x2, "426422ce"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x2400, 0x4, {&(0x7f0000000180)}, 0x4}, {0x4, 0x81, {&(0x7f00000001c0)}, 0x7}]}, 0x1f, 0x0, r1}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x0, 0x1, 'queue0\x00', 0x9}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) 21:42:54 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) 21:42:54 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x114, 0x700000000000000}, 0x0) 21:42:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf9, 0x0, 0x700}, 0x0) 21:42:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@overlay={0x6, 0x2, 0x4, 0x1000, 0xfffffff9, {0x0, 0xea60}, {0x2, 0x0, 0x4, 0x81, 0x81, 0x7, "a178b081"}, 0x400, 0x3, {}, 0x8077}) 21:42:54 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) [ 3008.243773][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3008.263401][ T3667] ath9k_htc: Failed to initialize the device [ 3008.288015][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3008.660850][T27825] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3009.070971][T27825] usb 3-1: config index 0 descriptor too short (expected 64860, got 72) [ 3009.230964][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3009.240049][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.248320][T27825] usb 3-1: Product: syz [ 3009.252820][T27825] usb 3-1: Manufacturer: syz [ 3009.257432][T27825] usb 3-1: SerialNumber: syz [ 3009.301699][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3009.921035][T27979] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3010.324349][T27825] usb 3-1: USB disconnect, device number 77 21:42:56 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:42:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@multiplanar_userptr={0xe37, 0x2, 0x4, 0x1000, 0x1, {0x0, 0x2710}, {0x5, 0x9, 0x9d, 0xfb, 0x8, 0x2, "426422ce"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x2400, 0x4, {&(0x7f0000000180)}, 0x4}, {0x4, 0x81, {&(0x7f00000001c0)}, 0x7}]}, 0x1f, 0x0, r1}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x0, 0x1, 'queue0\x00', 0x9}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:42:56 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfa, 0x0, 0x700}, 0x0) 21:42:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@overlay={0x6, 0x2, 0x4, 0x1000, 0xfffffff9, {0x0, 0xea60}, {0x2, 0x0, 0x4, 0x81, 0x81, 0x7, "a178b081"}, 0x400, 0x3, {}, 0x8077}) 21:42:56 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x115, 0x700000000000000}, 0x0) 21:42:56 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) 21:42:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@overlay={0x6, 0x2, 0x4, 0x1000, 0xfffffff9, {0x0, 0xea60}, {0x2, 0x0, 0x4, 0x81, 0x81, 0x7, "a178b081"}, 0x400, 0x3, {}, 0x8077}) (rerun: 64) 21:42:57 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x116, 0x700000000000000}, 0x0) 21:42:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfb, 0x0, 0x700}, 0x0) 21:42:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x0, 0x7fe000, {0x77359400}, {0x1, 0x8, 0x80, 0x6, 0x3, 0x5, "9704b045"}, 0x40, 0x2, {&(0x7f00000000c0)=[{0x1, 0x0, {&(0x7f0000000040)}, 0x1}, {0x2000000, 0x3, {&(0x7f0000000080)}, 0x100}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x60c403, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r3}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000580)={0x0, 0xff, 0x9e8b}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)=@multiplanar_userptr={0xeed7, 0x3, 0x4, 0x1, 0x4, {}, {0x6, 0x8, 0x6, 0x81, 0x1f, 0x2, "e5f53b39"}, 0x5, 0x2, {&(0x7f0000000380)=[{0x20, 0x60e, {&(0x7f0000000240)}}, {0x4, 0x9, {&(0x7f0000000340)}, 0x6}]}, 0x3, 0x0, r3}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000480)=0xffffffff) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000004c0)) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000200)) 21:42:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfc, 0x0, 0x700}, 0x0) 21:42:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000080)) [ 3010.970950][T27979] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3010.983619][T27979] ath9k_htc: Failed to initialize the device [ 3010.997017][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3011.410844][T27825] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3011.941114][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3011.950187][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.958683][T27825] usb 3-1: Product: syz [ 3011.963638][T27825] usb 3-1: Manufacturer: syz [ 3011.968258][T27825] usb 3-1: SerialNumber: syz [ 3012.021877][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3012.650912][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3013.057539][T26390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3013.067717][T26390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3013.078222][T28216] usb 3-1: USB disconnect, device number 78 21:42:59 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:42:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r1 = memfd_secret(0x80000) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2a0800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000000)) 21:42:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x0, 0x7fe000, {0x77359400}, {0x1, 0x8, 0x80, 0x6, 0x3, 0x5, "9704b045"}, 0x40, 0x2, {&(0x7f00000000c0)=[{0x1, 0x0, {&(0x7f0000000040)}, 0x1}, {0x2000000, 0x3, {&(0x7f0000000080)}, 0x100}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x60c403, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r3}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000580)={0x0, 0xff, 0x9e8b}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)=@multiplanar_userptr={0xeed7, 0x3, 0x4, 0x1, 0x4, {}, {0x6, 0x8, 0x6, 0x81, 0x1f, 0x2, "e5f53b39"}, 0x5, 0x2, {&(0x7f0000000380)=[{0x20, 0x60e, {&(0x7f0000000240)}}, {0x4, 0x9, {&(0x7f0000000340)}, 0x6}]}, 0x3, 0x0, r3}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000480)=0xffffffff) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000004c0)) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000200)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x0, 0x7fe000, {0x77359400}, {0x1, 0x8, 0x80, 0x6, 0x3, 0x5, "9704b045"}, 0x40, 0x2, {&(0x7f00000000c0)=[{0x1, 0x0, {&(0x7f0000000040)}, 0x1}, {0x2000000, 0x3, {&(0x7f0000000080)}, 0x100}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x60c403, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r3}, 0x8) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000580)={0x0, 0xff, 0x9e8b}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)=@multiplanar_userptr={0xeed7, 0x3, 0x4, 0x1, 0x4, {}, {0x6, 0x8, 0x6, 0x81, 0x1f, 0x2, "e5f53b39"}, 0x5, 0x2, {&(0x7f0000000380)=[{0x20, 0x60e, {&(0x7f0000000240)}}, {0x4, 0x9, {&(0x7f0000000340)}, 0x6}]}, 0x3, 0x0, r3}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000480)=0xffffffff) (async) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000004c0)) (async) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000200)) (async) 21:42:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x117, 0x700000000000000}, 0x0) 21:42:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfd, 0x0, 0x700}, 0x0) 21:42:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000080)) 21:42:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x0, 0x7fe000, {0x77359400}, {0x1, 0x8, 0x80, 0x6, 0x3, 0x5, "9704b045"}, 0x40, 0x2, {&(0x7f00000000c0)=[{0x1, 0x0, {&(0x7f0000000040)}, 0x1}, {0x2000000, 0x3, {&(0x7f0000000080)}, 0x100}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x60c403, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r3}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000580)={0x0, 0xff, 0x9e8b}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)=@multiplanar_userptr={0xeed7, 0x3, 0x4, 0x1, 0x4, {}, {0x6, 0x8, 0x6, 0x81, 0x1f, 0x2, "e5f53b39"}, 0x5, 0x2, {&(0x7f0000000380)=[{0x20, 0x60e, {&(0x7f0000000240)}}, {0x4, 0x9, {&(0x7f0000000340)}, 0x6}]}, 0x3, 0x0, r3}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000480)=0xffffffff) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000004c0)) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000200)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x0, 0x7fe000, {0x77359400}, {0x1, 0x8, 0x80, 0x6, 0x3, 0x5, "9704b045"}, 0x40, 0x2, {&(0x7f00000000c0)=[{0x1, 0x0, {&(0x7f0000000040)}, 0x1}, {0x2000000, 0x3, {&(0x7f0000000080)}, 0x100}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x60c403, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r3}, 0x8) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000580)={0x0, 0xff, 0x9e8b}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)=@multiplanar_userptr={0xeed7, 0x3, 0x4, 0x1, 0x4, {}, {0x6, 0x8, 0x6, 0x81, 0x1f, 0x2, "e5f53b39"}, 0x5, 0x2, {&(0x7f0000000380)=[{0x20, 0x60e, {&(0x7f0000000240)}}, {0x4, 0x9, {&(0x7f0000000340)}, 0x6}]}, 0x3, 0x0, r3}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000480)=0xffffffff) (async) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000004c0)) (async) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000200)) (async) 21:42:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xfe, 0x0, 0x700}, 0x0) 21:42:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x118, 0x700000000000000}, 0x0) 21:42:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000080)) 21:42:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r1 = memfd_secret(0x80000) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2a0800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000000)) 21:42:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x119, 0x700000000000000}, 0x0) [ 3013.691195][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3013.700514][T27825] ath9k_htc: Failed to initialize the device [ 3013.719656][T28216] usb 3-1: ath9k_htc: USB layer deinitialized [ 3014.090969][T28216] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3014.611000][T28216] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3014.620050][T28216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3014.628345][T28216] usb 3-1: Product: syz [ 3014.632583][T28216] usb 3-1: Manufacturer: syz [ 3014.637184][T28216] usb 3-1: SerialNumber: syz [ 3014.681564][T28216] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3015.250926][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3015.654100][T26420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3015.662638][T26420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.671374][ T22] usb 3-1: USB disconnect, device number 79 21:43:02 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:43:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:43:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x37f3, 0x2, 0x4, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:43:02 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r1 = memfd_secret(0x80000) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2a0800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000000)) 21:43:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x102, 0x0, 0x700}, 0x0) 21:43:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11a, 0x700000000000000}, 0x0) 21:43:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x103, 0x0, 0x700}, 0x0) 21:43:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x37f3, 0x2, 0x4, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:43:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) 21:43:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11b, 0x700000000000000}, 0x0) 21:43:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x104, 0x0, 0x700}, 0x0) 21:43:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x1, 0x0, 0xe1}) [ 3016.323725][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3016.330731][T10727] ath9k_htc: Failed to initialize the device [ 3016.356926][ T22] usb 3-1: ath9k_htc: USB layer deinitialized [ 3016.720975][ T22] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3017.241013][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3017.250203][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3017.258918][ T22] usb 3-1: Product: syz [ 3017.263674][ T22] usb 3-1: Manufacturer: syz [ 3017.268298][ T22] usb 3-1: SerialNumber: syz [ 3017.322228][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3018.001043][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3018.202367][T26470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3018.211794][T26470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3018.403411][T27978] usb 3-1: USB disconnect, device number 80 21:43:05 executing program 2: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001140), 0x121800, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1164, &(0x7f0000001840)={[{0x11, 0x4e00, "55d4714c6930f8ef56553859870b44b37d"}, {0xc7, 0x4e00, "3e892744b5cc208b661da327737e05db74498e2a43aca57d12ff0295535adf6e24d382c16f664c164b1dd0accf3fdd475e2c4724b008fd6749865339dcd369487669e062a371337fc3c3c5e59d72cdd58c7b1f654e13ff6975c47cf35636b9f88c9a7a45456edc347fe1ff4c2d97602ba090de27a1a64cc98ed5ea4e2f2346e1d7725d32ef865fc54fcb9c5200caaab5b0d96f1863452454b6d5d6971dc4263f759fa68d5916e652b979f74c0dceff63a5388ffe86dce8069957ffd1e631261df64be611fd8c19"}, {0x1000, 0x4e00, "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"}, {0x78, 0x4e00, "0b9c9a2d5765164637587f934fc74c405d73861c3cac5eeb91c1f9415124de0ee347540e3c0f4f5baf43a80f58ac7b994d3acb45c77afc65c73f9a67e24b6110325358fc5733f5c140e71ce4c86b488e700eb08c0f11f0cfcc5cf305eb987fd6ba3f060944a6f4ebc2a8bb89d8c2c2f4872333b3732c8012"}]}) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10cc, &(0x7f0000000040)={[{0x1d, 0x4e00, "7e18b4b43ca08232a0ea01b53ec067146a69aff56a90045a8882542aa7"}, {0x2f, 0x4e00, "2cd9cabbda5ce7d3a95acbeae0e70eb11bbb35d2ad06e475a1250c111531c955170c2c562a61c2fb67d5d1aa644fe1"}, {0x6b, 0x4e00, "df1edf6f0adbb5a2cb50be90b39a72482d44245574401c517efa7573ba3a1baf12a90d5a7179fc7e20ea773837cc94228d41e7aee9f1e9bf27ca10011a0dc504a0d388a846fb67b69490cc1d7591601e1f85ef39bba1a8c01f71e4c05f4b882c2f440bb9fc5a062fc27f99"}, {0x1000, 0x4e00, "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"}]}) 21:43:05 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11c, 0x700000000000000}, 0x0) 21:43:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x37f3, 0x2, 0x4, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:43:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:43:05 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x105, 0x0, 0x700}, 0x0) 21:43:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x1, 0x0, 0xe1}) 21:43:05 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x125400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x7, 0x2, 0x1, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7fff, 0x40, 0x0, 'queue0\x00'}) 21:43:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x1, 0x0, 0xe1}) 21:43:05 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x106, 0x0, 0x700}, 0x0) 21:43:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) 21:43:05 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11d, 0x700000000000000}, 0x0) 21:43:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) [ 3019.040843][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3019.054880][T27825] ath9k_htc: Failed to initialize the device [ 3019.076749][T27978] usb 3-1: ath9k_htc: USB layer deinitialized [ 3019.460837][T27978] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3019.980961][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3019.990031][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.004260][T27978] usb 3-1: Product: syz [ 3020.008426][T27978] usb 3-1: Manufacturer: syz [ 3020.015491][T27978] usb 3-1: SerialNumber: syz [ 3020.061791][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3020.162016][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.168356][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.651084][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3021.066500][T26483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3021.075276][T26483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3021.086476][T26483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3021.095736][T26483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3021.106768][T10727] usb 3-1: USB disconnect, device number 81 21:43:07 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x125400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x7, 0x2, 0x1, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7fff, 0x40, 0x0, 'queue0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x125400, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x7, 0x2, 0x1, 'queue1\x00', 0x20}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000000)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7fff, 0x40, 0x0, 'queue0\x00'}) (async) 21:43:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x20}}, 0x18) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:43:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11e, 0x700000000000000}, 0x0) 21:43:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x107, 0x0, 0x700}, 0x0) 21:43:07 executing program 2: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001140), 0x121800, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1164, &(0x7f0000001840)={[{0x11, 0x4e00, "55d4714c6930f8ef56553859870b44b37d"}, {0xc7, 0x4e00, "3e892744b5cc208b661da327737e05db74498e2a43aca57d12ff0295535adf6e24d382c16f664c164b1dd0accf3fdd475e2c4724b008fd6749865339dcd369487669e062a371337fc3c3c5e59d72cdd58c7b1f654e13ff6975c47cf35636b9f88c9a7a45456edc347fe1ff4c2d97602ba090de27a1a64cc98ed5ea4e2f2346e1d7725d32ef865fc54fcb9c5200caaab5b0d96f1863452454b6d5d6971dc4263f759fa68d5916e652b979f74c0dceff63a5388ffe86dce8069957ffd1e631261df64be611fd8c19"}, {0x1000, 0x4e00, "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"}, {0x78, 0x4e00, "0b9c9a2d5765164637587f934fc74c405d73861c3cac5eeb91c1f9415124de0ee347540e3c0f4f5baf43a80f58ac7b994d3acb45c77afc65c73f9a67e24b6110325358fc5733f5c140e71ce4c86b488e700eb08c0f11f0cfcc5cf305eb987fd6ba3f060944a6f4ebc2a8bb89d8c2c2f4872333b3732c8012"}]}) (async) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10cc, &(0x7f0000000040)={[{0x1d, 0x4e00, "7e18b4b43ca08232a0ea01b53ec067146a69aff56a90045a8882542aa7"}, {0x2f, 0x4e00, "2cd9cabbda5ce7d3a95acbeae0e70eb11bbb35d2ad06e475a1250c111531c955170c2c562a61c2fb67d5d1aa644fe1"}, {0x6b, 0x4e00, "df1edf6f0adbb5a2cb50be90b39a72482d44245574401c517efa7573ba3a1baf12a90d5a7179fc7e20ea773837cc94228d41e7aee9f1e9bf27ca10011a0dc504a0d388a846fb67b69490cc1d7591601e1f85ef39bba1a8c01f71e4c05f4b882c2f440bb9fc5a062fc27f99"}, {0x1000, 0x4e00, "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"}]}) 21:43:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) 21:43:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x108, 0x0, 0x700}, 0x0) 21:43:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x20}}, 0x18) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x20}}, 0x18) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:43:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11f, 0x700000000000000}, 0x0) 21:43:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0xffff, 0x0, 0x4, 0xe000, 0x6, {0x77359400}, {0x2, 0x8, 0xd3, 0xc, 0x40, 0xe4, "db3330cc"}, 0x876f, 0x1, {&(0x7f0000000000)=[{0x2cc, 0x7f, {0x2}, 0xff}, {0x6, 0x3, {0x6}, 0x1ff}]}, 0x3}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@mmap={0x0, 0x3, 0x4, 0x800, 0x7, {}, {0x2, 0xc, 0x8, 0x4, 0x5, 0x3f, "a8f30096"}, 0x8, 0x1, {}, 0x8}) 21:43:07 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x125400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x7, 0x2, 0x1, 'queue1\x00', 0x20}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7fff, 0x40, 0x0, 'queue0\x00'}) [ 3021.681177][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3021.688185][ T22] ath9k_htc: Failed to initialize the device [ 3021.698633][T10727] usb 3-1: ath9k_htc: USB layer deinitialized 21:43:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x109, 0x0, 0x700}, 0x0) 21:43:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0xffff, 0x0, 0x4, 0xe000, 0x6, {0x77359400}, {0x2, 0x8, 0xd3, 0xc, 0x40, 0xe4, "db3330cc"}, 0x876f, 0x1, {&(0x7f0000000000)=[{0x2cc, 0x7f, {0x2}, 0xff}, {0x6, 0x3, {0x6}, 0x1ff}]}, 0x3}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@mmap={0x0, 0x3, 0x4, 0x800, 0x7, {}, {0x2, 0xc, 0x8, 0x4, 0x5, 0x3f, "a8f30096"}, 0x8, 0x1, {}, 0x8}) 21:43:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x20}}, 0x18) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x20}}, 0x18) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:43:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x120, 0x700000000000000}, 0x0) 21:43:08 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10a, 0x0, 0x700}, 0x0) [ 3022.100938][T10727] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 3022.620892][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3022.629937][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3022.638099][T10727] usb 3-1: Product: syz [ 3022.642442][T10727] usb 3-1: Manufacturer: syz [ 3022.647046][T10727] usb 3-1: SerialNumber: syz [ 3022.691745][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3023.270983][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3023.676602][T26513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3023.685532][T26513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3023.686682][T26545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3023.703646][T26545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3023.713373][T27825] usb 3-1: USB disconnect, device number 82 21:43:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0xffff, 0x0, 0x4, 0xe000, 0x6, {0x77359400}, {0x2, 0x8, 0xd3, 0xc, 0x40, 0xe4, "db3330cc"}, 0x876f, 0x1, {&(0x7f0000000000)=[{0x2cc, 0x7f, {0x2}, 0xff}, {0x6, 0x3, {0x6}, 0x1ff}]}, 0x3}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@mmap={0x0, 0x3, 0x4, 0x800, 0x7, {}, {0x2, 0xc, 0x8, 0x4, 0x5, 0x3f, "a8f30096"}, 0x8, 0x1, {}, 0x8}) 21:43:10 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) clock_gettime(0x5, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x3, 0x4, 0x48, 0xffffffc0, {r2, r3/1000+10000}, {0x3, 0xc, 0x20, 0x0, 0x3, 0x7, "423834ce"}, 0x2d24, 0x1, {}, 0x8, 0x0, r1}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x400448c9, &(0x7f0000000100)) 21:43:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x3, 0x1, 0x4, 0x8, 0x4, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x6, 0x40, 0x5, "f4e73d0c"}, 0x6, 0x4, {}, 0x76f901e1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000000c0)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) write$damon_target_ids(r1, &(0x7f0000000100)={@val, [{}]}, 0x1d) 21:43:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10b, 0x0, 0x700}, 0x0) 21:43:10 executing program 2: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001140), 0x121800, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1164, &(0x7f0000001840)={[{0x11, 0x4e00, "55d4714c6930f8ef56553859870b44b37d"}, {0xc7, 0x4e00, "3e892744b5cc208b661da327737e05db74498e2a43aca57d12ff0295535adf6e24d382c16f664c164b1dd0accf3fdd475e2c4724b008fd6749865339dcd369487669e062a371337fc3c3c5e59d72cdd58c7b1f654e13ff6975c47cf35636b9f88c9a7a45456edc347fe1ff4c2d97602ba090de27a1a64cc98ed5ea4e2f2346e1d7725d32ef865fc54fcb9c5200caaab5b0d96f1863452454b6d5d6971dc4263f759fa68d5916e652b979f74c0dceff63a5388ffe86dce8069957ffd1e631261df64be611fd8c19"}, {0x1000, 0x4e00, "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"}, {0x78, 0x4e00, "0b9c9a2d5765164637587f934fc74c405d73861c3cac5eeb91c1f9415124de0ee347540e3c0f4f5baf43a80f58ac7b994d3acb45c77afc65c73f9a67e24b6110325358fc5733f5c140e71ce4c86b488e700eb08c0f11f0cfcc5cf305eb987fd6ba3f060944a6f4ebc2a8bb89d8c2c2f4872333b3732c8012"}]}) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10cc, &(0x7f0000000040)={[{0x1d, 0x4e00, "7e18b4b43ca08232a0ea01b53ec067146a69aff56a90045a8882542aa7"}, {0x2f, 0x4e00, "2cd9cabbda5ce7d3a95acbeae0e70eb11bbb35d2ad06e475a1250c111531c955170c2c562a61c2fb67d5d1aa644fe1"}, {0x6b, 0x4e00, "df1edf6f0adbb5a2cb50be90b39a72482d44245574401c517efa7573ba3a1baf12a90d5a7179fc7e20ea773837cc94228d41e7aee9f1e9bf27ca10011a0dc504a0d388a846fb67b69490cc1d7591601e1f85ef39bba1a8c01f71e4c05f4b882c2f440bb9fc5a062fc27f99"}, {0x1000, 0x4e00, "66b86999798dac97a8415ec3523435a193cadd1cb052e4030ec661560aa6c35d311892a91e5600a920fc7a8a79101c4b6887f164540ea031aea659ea925ecb0ccdc11603f88c9f4e429db75ca21bd6c23e1c94338d0a0dc267ff1fc26e8c0c13d5cde5e3d11ffb9c2d92fdbb13b4cb5486d070d2e174c6ab22981165cd5ac6976b7a8156b77f45286d46202c686e65a9277848e1d31fd18027730ebe1ed5f89e7ea7eb0fda4ec5dfa000237104781c0ce678724247cf33c55f21c5337a1bdb5348d2da45b929e898a2d7fbb861a17323fb3e6cd4c8a624004e91d0d9a4749917c1d195197e9d776c556c51c4f5f3b02becfa6050c1f42f40c6bee73cc35ec79650e260a005c642c2970aca1076c7e40946459461bb0316974d933168a1f8f9e4203458681e7ac18eeae598816bcf862c86fce9227ea6ec9b83360edecc45f25a29828e6c0b1547c1e5ba0719dd68081b88f5281da49037a8ee2266251aa1d639c1662836b383958b7660a266a899221f5de3daf791b5aeed0b92ddadce9e7eb23d5f48644d945e27ede6a1e02acfceafae7cbc262fa8e78529bf0fb13e3b43a41f45f76096885c71035a14f8c0d313b805921254bed0b855e4fb89a6c62f205e3b12523dfd222b1b98087c911e5b02ea05648e0f186630cd0e44fc07ca77d33c79134b992af207e6fcb667a28309c47a902cb1b4f8eea75321f837a28285a64a9e3428a57517696f5c173ce2b1361902b200f50aae6038bcbf162ab587aeffb09e69d3d54869ed08800dbbfc78a31207a924d42cf0c6c1bcf6a179294d8844188ca51b6e12b8628e4343567fc38da53ee255b2d277c512a2c7157d87b3cafe6fd3f28fa1ab5127dfea4ce6b85a504269049e83d9899787a352d8b7ac0d6bf65337ef8cf84e915fcee9861c56bdeaeae6392ec49c72edc50ccd47d0333ef6db9b70c480b4b2cff62a23e11cb2cc14fe82c1b378846ba34ac371221c8385cde6e986eb75e473b96ce6e8e1b69d5a9283a62eace434b1c4cd4eb3aa6e4aebe4f36d6486bb458e5e8f9e132f7065753021fbb5c2f41eb8fb722f5a0b7585787ba742227c3b8c02bdcd4854446a3c1b9f928dc311777074a8dcc891224bb6fd8d8a61d58c46ae3396f9da93bacf8b57fbd2faef0b3d9b7c6d6a3c9951e65f7012bbd4d83f3e53c96833172947656e1dfeb43112edf6dd6242f9284c2b7f19de8a24f62142f6b899b988aaac9125f34e97d345b568544aa5c1e875731cb488b15334629e5c07a1544a267188ea59237b93977d4f20120a9f3a2de205f864e99cb0441369c89bd0b2baaeabc7d560ae9c4711649199e22545ea77e54d89063653a24ebfe8eaea2c08002ec1241388c41ca7ec43cc60e3079922a77879c68f853bd844c106771032c80febba34558a9919ba93a1ea21adebee76e3b85d23e0afa0b9d54040ac238aa6156d75896e0435588b34add434d0f95cba13b143ddeb306b3bfdcea0154e7592a0c375d10db36911ff778fc6639b5e156464071e90c299032a384c0d3aa4688e845367f200f46a68358c4c008af3364171bc540f61eae8f4c44852653b926bf4cbb25540890d3150f78dd6f6164da419d17647c0d647ada24e4872ae883d9cb492ca69832e182d2cc35bdd877289f86815071d130214a7acc0ab24226b8f24c301c971265b77277741ef27691c9b1396c55c76c0455c14789bb7e557203b8d766cca613134416087950c525e6bc373c48fa48199dcc0953013fa243358593199f9f091fe951c4c7025bf7ef0cb1383208d1cb9010589c98ff55504656bd660bae5a0069979d6acc49e3b97f3b9308e2df1d9de97a6f189033f75ba984a1844b3c9a1fb93fa7a45c2efe22c7a8549ff395fee771f3f579e4d046ddc1681a92abca40278368ff537ca2425ed0e01595d6400b3ae7267866ce61077afc83c16f5f30fb91099799d068786510b63ddab0714d19443778b3f0abfda5962633dc4813b12ab09028f629ea97448377dec24b9091fce63ba6a8d893fe797341cc6c653609b2d3164797131a560f1be111848f266bc2a169ca57556b29b38106a5fd434cd1e6f0807e638abac4ce06c4dab6be04f5ee23d7ee6bcf2b4bbf8aaaf660d18beeb002d6cf3ff3c29c7904a454563f96cc6dcf689637fb9fdb53929468b9cc63ece38e48e62b32511a159e79e48901b4a31caee90a0b0294f135e2481dde5388f5cb2fdf2206b0e30ef83411b7c51b2665b411ac1227fb61e07b0e8a38bb7120f251923ccaad97159e0a558fdc46c97a0a05d5f9b173e96f09f646699328c0072d1753d1d769ddff71abd4ce3993672b007c1fcee85aa09418455f221b2523da8d84665512af55109376a20c5ff9bd9e59f1aca99c42965c9e1c056712254b23e5d86c164afd4f6becc3398be0ffc07c41df03c924f6165f6eeb357f9a3843dbe19126b9fa9d7c64d40722f26b704ee0543652fdf4f94dafaf4be8ff48b471f7319c8666b9613e9b60f99801d395e752dc608142f809aabfcd4ecb2b5d46a27fb35370252008bf6fbecdca345e19e328b9a45f929eb762bc0c887b007d9d606881593fb22d20137bf5c65bd904551aac833dd4cd9b2b69b212b13b69a75adeaac57ec3fb0de6fefdcde85a0b4b70ed79f2cde1a2855746866afe50bc3d324267c41a7f6d972c302352c36581fcac1baf14bb00de30f00a01e6dd55696fcddea3b520354f669ca6cf823b1cf776bb28c9c975066a5a9c94256771480a16e2a587de71750598ffcf38aefcecf58cb7fb8b2f10cf929ea1bba06357bfbd5d405f0167e2d8ab63055e9ec48fa1734a4ab980e535c89f7dfb396a1a7a2d66cea383f00b04c67bf41ed3d4f422b3c7c1945513f427d83d0f91f53d04e43b546e38cbf115af76d8da1b2400cee93fdcbfec7d1e3254cd4a8c8563d9233fd46021a166b50faa34cdf62972277a134d45c72ba26646a5211e2dfc5b5f3b80615239d5d0f95c960493fd9eedf63b17558fbfe6e1ab1884e75a32f976da41607cc2b507d4ca6d8116d7ddc7b8509c096835453ef6f58463037978a9c13159350b83605035016a449a22d4e1d3190a1aff0d2e8af44457d6cc477761fe973a80c545b2e7dc2b1b6ba1d107e1a2223fccf12440e06caf9da47b3679825ed93ee556802e4cbf18a282e2970c7ca13d5c3815f940b47b5f7d87b1c0f603a976e413a1bc987e2537055b8aeb4ec30bdce0bc768d508c41ddf1a7be62be8a7b71e10999d5ed0cb83afc603e232a5efdd1f03e702c543eb51dc01978abdef07a82ebf458ca14f3b85eaf591eb7d7f8ea47d056223fd06081baeb52a829c733d911636302960a4922e402dd1bea8f5c87bc58c38244f81138ad69ddd90cad984ebb44f642b2d66256950e98aa0762e26925981b94caeca8208e7ebd13b59f3073b4e90709d5c2a597784ec42520998c25b6f7b51e0fd87afcb84f4f02354e4ea3e5ca358496580d35b9b32bd1ca3e666fcc7f949c00c69051dee90d1e37284e781d2080793e66935820ca0d120252b9b5a19ca477433c39ebc3d3a3611387068e880aa19185c72f68307fa2c7285d9cd33ba1f11b1867b137feac1bb5e577e2e8735e28c69d700604105f76bd47628dc31a6eddff168de897e74bbbf2dcd4d5ff5139bffbcd7ca3302cf098b4dbb12d8f3f128d67a314ce849d8477f88ca31162f4c20dccf0e364608ccfb1deac48ab18dd44272ac43a5f5d170bdb0a1b7c74998ca09427f08db4024e5ce0b6a317d1990d9474d2f29f437098f9cbd3268cd6cb8c657c7bb67c436d2038a38b19ef1167fdc8365cd101750bee2d6fe2431ce4eb5147691747e5a974494e53e2ffc43c34ef0d2fc5447d39a84e4e9a7604c3b530b12cfc5741089b6acf500fe4ebfee0af141688b5ce7d5d88dc83cd769abc13eb0ee69827d793714b56186dc646055a2f88a2f9bec010bb63b0074bfa4e8a5c341dcc6736cdf043dc535a5decbdd72a1528305f4d077ddca5a1c4caad36c9b156f20fc56e1d533cf13a7a3e430f4976035b995fa94c81e802bda4b269baef6a946352b449f0113a0599e91f53475fbefe43a1489b2d7d253262347e249d36b41cf9d6ddfd17d0e29a598749fe246a6a5689cb10b08c2f42d1d267d58c85a3826484f1fd4ef7f647a22fe20873bb2f672e9be287bc5c26fdfe5882e0dd425db832db50dadc671a24590ebb395a61afa4a14414c9ae0f691e56ee272750809802e779e55fd29ba6d3dea6d6e8a1e8e72cead8ccb1c733f92929e97c73b5842c7295981b206e886414c5d7a0a8fe1026d1dae2c3f4a7f05280398a951a931484b94fe9ce278016cd467526dbe91638a4ea18b3a25877fd6e5212c5607885150c4f3735a8b98da3aac5fd7faee6dd0fe07f52e3967708aa474f00c4dddb51da15c7fe0e0d3ae5706bea2882507bdab757b29646547dccb1b15928b1a5af04db2a48324c6c67d60b23814581d8e1c5871af9ce8bd7c5f48af068d9e6157a16c2fa69cb9049c6ee2d2f5f6fd27b2cb14db322c17702699053b67ae53697ea9526cc926be0a9af889fc0978abe1a519d15ed668576f28baf06c6674b64e9c554c6e6393141e84cca3bc37b5cb3ceddda685231107bfec85261df276cc862ba1f2ebfa2a94055487833775659629d079d949594606dce77f16ffd7002f33782fc1b050223224beb4c9da9d6d987ee781a5740c9a84d19836c0d506594b3c151edd9ede59b45aff9a97098d92172c5555483f5bb535dbe6e77faf123a2814d25718923db8e398bbe5eac2b92952932a42167243540a0f7bbfaf63bdfaa3fce5aba55138bc052bd9b4bccf58dac830f825cdbf53f60629bb97f53e7d9231a5c76188f4861ebce4145e357c7f193541468895048fdb564eff3036015320d1484d4d790a84786242b5c59b19dcc04de55fb21e4e5cae61d2934ccf5c502f9bf3c3efec3da0a606c54ffa37ff950c0c2aee7e9bf313cc2fc62a8c8e97ea54dc4895b537dfab6c612793db048b981475ed0e6654e95de4e9bd801a4af2175aeec536a49eb5cc86fc1489adf0b94468ece2c81e49bbfa65647ebf9fab5abf0b4f0af3f08b26a38338d9cec1f02e12f0c7bac633ad4f6c8ce57f7673d92a9c2b29de68ad980f68b437e7e2ce6dc0fc6fb433a3b35985b0ece523e33beb13c552d2a33c5c8b610642f1ec887d2c84ca0f68618e4836f4f2c3f72ab2598aa2f18531cfb9497692b3c65191c295d1a29e548c1f12986090e9b55724549f03a96c8c6713f66329f28470bb2afc5637f5a3dc46d805f8c2f533e9dea91f80e0b0ac67daa7d5ac64c2d180752850f4fe0770a94d290f1c619bda8864822498a93e8c336d64cc5bad4290cdd0cc340d5f848ee77b8e13a990690bc3dc87c099176c3aeb7ef39660d31d0f1bee83b50916536ac33b94de0803741e24f625ce791a572efab68837158dac4e0f83e84a625ce2108a483de89a76af37ab42255ef5dfe3a4df77f25bb91fa87a01913a07f9aa4f903254fa5741f6f1566f911f66f9cd45c02ba32d626464aaa8e210a4d8ac1589815ed0ba25e2d197fc8a138922495332de164c7d806be6144da71df7c54962183408b186250188d247e8a237794244e4dcc6695f772b2a9d49cd4e13093f61bcd3be1f92550cd56d478e7f37eaacb9f4ef46d92b83ab4afab23914b75ddc50398b7498d3cda36bb8b9d8aa30bf45327b9aa14e148b9810e8b9976c78e05a142958c275b3ed625f3d1ee61bcffc6b0eb2a55f2fc8db8db415e26d05924d5cb2"}]}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001140), 0x121800, 0x0) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1164, &(0x7f0000001840)={[{0x11, 0x4e00, "55d4714c6930f8ef56553859870b44b37d"}, {0xc7, 0x4e00, "3e892744b5cc208b661da327737e05db74498e2a43aca57d12ff0295535adf6e24d382c16f664c164b1dd0accf3fdd475e2c4724b008fd6749865339dcd369487669e062a371337fc3c3c5e59d72cdd58c7b1f654e13ff6975c47cf35636b9f88c9a7a45456edc347fe1ff4c2d97602ba090de27a1a64cc98ed5ea4e2f2346e1d7725d32ef865fc54fcb9c5200caaab5b0d96f1863452454b6d5d6971dc4263f759fa68d5916e652b979f74c0dceff63a5388ffe86dce8069957ffd1e631261df64be611fd8c19"}, {0x1000, 0x4e00, "e0114ccd1331e965b83315f2fb9ba23b523ec6bc69e1041e2f95b48e38a488757170a0481e2011a6fe34f5f9f00bc672278c2a86a39c6d7b891b449aa874c9f3ad27bac156afedd325525b18a202e79c5c80d0cf144e9150f491e508c8882ed994a328ec6aa1d7afa3e6c4fe332e8300b897ebfa08ff70eee553b25423610cd2b6f9fb96799806ec1ead7f70341372fa993edbd4bc060aca829eb89157249c047245e3f8c81097b71cb18720033550ba0539e045ba9960a6a5894f2c8187df2a2cea6532eb4750d00696454d28d359033281b1a47fe2eb3aa935988e5ecbc7c5ade9d9fd61392c5e20c08d6bd79d467fdd4a53c9a3ceb6fc46a16495b913b059d56af10f8cf00d00574c29305856b84186dca93c8153331601428605eb8b18d8e439f2cd0a01115d4af198571e72a3a82afc157cb48e06b27dcb2cab94fc31e0699d44ec9a91557e01218af20f2c6fa12cd54c489f8120ec55788251af2c8bb7f6627e4d4cddf1789562be198776742c36c990be85ea3a7507a000297ddaa3c461e9a941cf7a4bda1fde4208aa5bba94defaac784341d68f1462624c91c07a8f9ec1b25ada977a5458ade26536d4369c0708983ed837346b39de20ee6d19816e8ab1081f2202f88dedca39582ae9d0657d65c6389c34bdbab1693ab781a8961dc8181e2371556e67590e84ab8dc7408c42a14010b75ac5c7d86606fc480c1c287e2a78eb29ce6f46db6e420be182a28644239914566ec87f5e893cb08f1da583ded8dd74e736030c861aa5cc293f41edae7b57b6f44a77b004d74bae3e702b1ca07709e47b17343f427b5209949a9588e03b847513b888a065131e160c9afd50b279a3607a88e7d91f6b6a7ded5168def6bd1ee82f51fc210d49f1f7be10ece69dd611aede969139a9fc9af134434ccb508c704cdd3cf6d5f56378ea7c734f68bc98bb03273114fce16f7b054f795cd6106e90c7a96be86fe63eb5abed65aeca3f30f403dfb0e6d851fedd531cf01a3a0676ac111f93f0dde0a01f5cb936bb865f78fc40d1a221dc6731d96ecbf3a3305ca4ecda2a7c1ff10512a0dccf2accb2d1269909204f11e2785f86093198c722615f6f32848a7415cf2b9bc493c1acce70a956855ca63fce16a3d66583e921d7058f7d5c56d271ac421ea80397f105eed78778b9f020a897719243224b84f00966f340acb332137be0a7100b1c44f46af2d14b116621b8dfed8f44766cc4dc842c5cb625b3ae9ee91ba670560805294c18e88b29e940ae4613a6a00f6961b917e2b253c53de5490e05d5a72eed6524b66995780bde33bbf8f680558717ec147c3d09e15a84481e6a7563c02a32da3153398ebcdca49be47dd1a4583d226191e494cfef79ed1a25ed7952275a2ec0b47b23afb87b8c6a6d10bb22a8c9b874cb99810cf03f82a832353fca7d6b2e458241f10efec672a5d0789ee877d6b106c6d4ba6a64714055ba4bc0994df423b30751d3697f92347c1762df0983c5ad6327293437e2f2b91961f037505b580d1a07e9ef23b3eeb1c539cbbbc7ca36cbd87d488f17982f13b5e780fd788e8b2f68ad6e33dedf6a7b2278efe922b3f28dbfcb398e8ce6a17f2ea116692a3fd4941248bb5d09d09d5cb6bb2403c0729a964af3d8c86f9f7f7360f1b31e5e54df80947e598eec97cedc71248c8957df3bc982ee04f2ed0a8cc366d3210c14976222153cc7f5e1695ce36b213dd6e0e1ad7c9ab927115876eb2da1bcf1c7c29c174d0e472ebba67ece107e53ceea13435c9d7a8b050894fc96b8823f6373340d253c07dc87323c0f187197a514a4bacfcde48b1c92b082d5a8325a14b6b75493643b5fd10604af6d4322272e0b4a9ded6ae43eed0dc8807b9e25255af703ff663dfc68ea86a23077b395dbf6c82211be264bb04b638edcfede6ad1b63fdd5ba39a61978b4f6e2921b97e259760e08482c024f68a0ecda31164f4f037481a84e646b33a8d3be2e5114248befdb7ba408fc2bdb5e94d4bda66276fcd63fd43acc40a8b9c38ca6041288fa01bf863456181a063709ee54dcf994a01f0ec04339a62fc80beede0d63dff71ae7b46c0b0508a0426fe996923ab071c0a81553ce44636eab3a6e7d10f9c81602cdce7d09768d1057806252ae10e6bbbb35a8c58a4914130c2c131f59a809fdbc9747b35e3c9bc241251831a90139794608f021a7864e501a815df55216c5e7a4317d8e55b0f91b5c6cd4465d6f3285a5d4715a75e72f71b2a99ba11bd80fb07089335161aacc81eb2c7026b939270f95bc8103592a07ced6ccdf23d718ca271833b495527543254a0286b46b9d39b620e397058f92e78a5742b485e784d3646e10c5317529e4993a9db64c172c4d7cb5ca9af350716989cddc49fd971fec817eda8991fc50de28fe308e4c8e2f8713c45889cf6dbd4edb10910ded2c42c39146d7ae0d527e68cefbb4cf77c6cbcde7e9f4f92afebef241e166eb9f673f44963d3c5a658fd57e1cd34a67eb040af1cf4c11e90052fec47519af75fb41678dd482dd7e616af83cd0ab3b0c623e2a50d62429c9587497b2bdf3a4f1879fcf9707aff82cdd8fa5a12619c613cf0ae98588c1b00089fa8f726dec30dfb000b54c139d9b11600bba2ce9596b69ec2a5b916b48a47f6a94b27d105258e4e35a8a2abe19101dcb4ef626d61798860a2bf4735d5cb97f100a9bbb96eb4722e70f52616bd8a3d44bbf6e6985de3613910def3eb5b6b3b035616b8dc45fc946206f2ea776da65272d146c63de34d28272db570dd33e8a4e8767a68a743276e5753f103b1f061dde87d7a5e9512a7931fac75d5912e05a4c2fb590d2c402a4887d9617dff273d9d074def7ab1e2d4ffbb04d0d91bb83136c3e904c1626c696d71def1693ebc10b981d667b08dabc239dcac83afc3de3919db19b112804ec8a1909c60e116bbde885d45d8d47f51ddd4b83c2503167afc54beb11f3144c50784324c8d30f9856903d0a00879fd9fe4e937dd0f77107493660aba92fcd39057c7ab39424595e028057dda72074ce456a9a9df4940370c70931c5519d564157658de820f1ec278eca47d4d103b707f3bf9d804641e817404a0e5a32dee02c2f69d72f691dafbf3efa1511e02ded68e0cff00f59962e4d336b6870571c3b4a9b1406699ba58e1606f32f90fcaadbd476b93b511268d66c029d235e1abf304093deff297f9ab1c723a58bb1599a3a1d61b8e0afa9e39495bd1edd20f6487168fa773d82d0399f10861ca5588f6e75145754e3653d662a58444acb05daa546196bca10ba0d9bdc4305919ef03003d013b9ac01dfd583f60b60a71374834fdf395c097ca2c316e67e93fa3adbb0800fe796c853473fca925baa3f908ff8d4fcb9797439d4e55edc03e4c7a7dba3e600786401deb8ede50a8d77dbd8dc7559de687336f23a6d9b9bb368e3e6b17af2c360077b3498c1a68aade78f54425443719348d37fae45925585a261ba0a045fb839878956018b0a88e853be54a9d45d4e4fc1d5b35a998454475d5126b7767df242d3211e225e1ef2dadf86033a3ca831b72ba9903aa373d4af0fd6e8d2bc84450e76b7600d18be50788ae3eafd1cd76e89e6b7d95fde516a7efae43bf19d6a16a64b7cea18d9de1cdd9ac4941d0f19e2a79b4cca22857885206612c292abb4066092adb4d80766aecc9d51b1449112d7e2c8422997e7b58679e5312bf26c3e6dfc7957b9c9b064c279920028db27d6a6c68e7dd6426dd3b65357425cf6fb01afb8dd073f021fd19cbfa5828942eccbeaed028d1b94c70f50b875fda02659bd4efc45becac48a9ef33b88b4cef8a48f4f13d85aa00d6bc13ed13e149964c9f41d7fe1ec414095c6a9aecc130d5329d198cda5f24cea25e4589b78bb8bfbda492b83aa6c73a7ee9cf51b508f168844cccf49b861093f243a4681a5175ad43de3b03576c929e68c8b9b14f90e211ba19ca074685dd6d92ac86d8f629005cb1b0a305f59e6b732e5fc9eadda6354830dd8a4b1ba41e685be67e413c0ca6590c7eafe6960c69ddc8b5bd487cd9960ed51dbf4aa4f91c73472c92dd26229031aeecb20499ba8e1d37b8c4b3388b262123aed975863b6ea9a035f7558864768a8499ceafe1b61e303b8982bfaae224837ac412b1b72fdc14c9dec1492514472b946bcef9499045cf128bd0ab16f9962337628e6aaf5c2518ddb711d9735b3908f78b476d5dc3ba1dfc7fe2ce910dea49249c6bd96e42bb136af61ca8e6663eeb1492a4a0cdf74bb2adf3061c0674187f155a8b19ecaac96d1338a506dff3740917b082cc6c4fcf9dae5aee82e110959bf27bf870908f6676f88d2113d86a318257b69d6380dbe6f61d3b3b0c14dc749da28694a02350d3150b73a33fbff011adb01002b87d2d87434a4b142b3a9d3f49238f9a21a02f1013150600ae45ea66c2d71a6ea7b61bfaeefe2d341a8b65d162fe25d5516f17508b024d5fb4617b4a40f7c5183e2d55dcfc468102d102d2a5467b22c34864ae584788c3dc8920d60c4f3fbb2b1bdb937d5d8b34ca8b1f4129913cc1eafa7e6b2ac44a6af26fff28b8bde61d4256ff2bf9c11e2adeabfa75e8eb8562f7af553b28e0fa37e51742b7dd59f93f97f9aae232dc1084c217000efa6cb8d34175c89eb19722a2fe8d7be1777d1bea4a5074d8561217036c5d922ce2fe520ba2c052164fa55ac24702642aa7e23a3452f68e55a470d262280dd50840631f704277c3a4aa885462c4f298cd9c3141343ecf46ea8b52ffdac55947b15896f97c059e3e8ec17987eeb32e7db04b83275f93f18e32ce78dcceb84f3f28fb20dca221b42d93888c9a85052b448bc28313a22acaf0db8a7eebcc383c5a97c47b1d811034e24bbe37e2c4c33fdda82bb1c52b085955cd8c21fc460c5862b7e5e26cfe06cf14f806c4891e11f1adaf72d87defc583b50c89627c0e1e2afa2549dc6bc092c8916dd49af61580660f70006c845412d966746c636a7df78ff9673a581e0cf04f2887f7fcbbd2cde72b483a8ed886cd8a060e6dc322f34e14871204aee0a954f9ad9af034c929dddfb8cb35da89997900840c344c253c90d90f4e74cc7ea60ec13849680f66ef0a0f7313f454f6c4100f6f0e56577b5b7fca66b04cb18ccd4e2b7910589f8ba4e1a44cbbba6f477c4971ed0d2b6fd37570943f124b3dfe20cf2381f4a9c606fde290ba70ab53d67a05a290138aa6c8d5921a07b8286409a7424d1bc4f095f28f0bf72c6c44748b203a8e616a8f0883f6f0fedd1cf24f415f4ca88966e1a127fdf55242c97abdfcdaa6bceb0fe605f1be389c577f1270fd5340359b05988cb0dcc380a6456540a284ffc01e6d691a1cf9e78239b4b77c8f489d7688bfbbf4264707186506b679134927cce2a5e48230865dec2854d97650c2814bf631d2b82e15624d3c3fd0ebcb22005424a75b0e5ea7d4d754a1b7bb3c8149cf3caced2f840a53d290eda86e0b169fb8a36b26799329060b1e6d7fac28373ad8ae20a578fa7ae9fbabde2e689bd61ec203d0226fa2f70173d12eba0c7aea3d9b873cb385311b77d5bfe7f5867251165d7826647c282f0ab799fad3cbc319f2c8463a9cdf088cc72ae7a3ea6a9948778938a617f070b7e853a884023ef191be781c22e316f636256dae289f1aaed451dadb58dfbe70df4c347a3ee9575f1e8fd450749c808af7e97d2719022612271e301025848459e8181d186ac183c2b2b8e20bdda54bdfe038c42b64657ca797a2f24414e0b83b329f69cf4be8237819193cc4e96a6da0"}, {0x78, 0x4e00, "0b9c9a2d5765164637587f934fc74c405d73861c3cac5eeb91c1f9415124de0ee347540e3c0f4f5baf43a80f58ac7b994d3acb45c77afc65c73f9a67e24b6110325358fc5733f5c140e71ce4c86b488e700eb08c0f11f0cfcc5cf305eb987fd6ba3f060944a6f4ebc2a8bb89d8c2c2f4872333b3732c8012"}]}) (async) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) (async) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10cc, &(0x7f0000000040)={[{0x1d, 0x4e00, "7e18b4b43ca08232a0ea01b53ec067146a69aff56a90045a8882542aa7"}, {0x2f, 0x4e00, "2cd9cabbda5ce7d3a95acbeae0e70eb11bbb35d2ad06e475a1250c111531c955170c2c562a61c2fb67d5d1aa644fe1"}, {0x6b, 0x4e00, "df1edf6f0adbb5a2cb50be90b39a72482d44245574401c517efa7573ba3a1baf12a90d5a7179fc7e20ea773837cc94228d41e7aee9f1e9bf27ca10011a0dc504a0d388a846fb67b69490cc1d7591601e1f85ef39bba1a8c01f71e4c05f4b882c2f440bb9fc5a062fc27f99"}, {0x1000, 0x4e00, "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"}]}) (async) 21:43:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x121, 0x700000000000000}, 0x0) 21:43:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x122, 0x700000000000000}, 0x0) 21:43:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x3, 0x1, 0x4, 0x8, 0x4, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x6, 0x40, 0x5, "f4e73d0c"}, 0x6, 0x4, {}, 0x76f901e1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000000c0)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) write$damon_target_ids(r1, &(0x7f0000000100)={@val, [{}]}, 0x1d) 21:43:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xd0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}}}, 0xa0) 21:43:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10c, 0x0, 0x700}, 0x0) 21:43:10 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) clock_gettime(0x5, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x3, 0x4, 0x48, 0xffffffc0, {r2, r3/1000+10000}, {0x3, 0xc, 0x20, 0x0, 0x3, 0x7, "423834ce"}, 0x2d24, 0x1, {}, 0x8, 0x0, r1}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x400448c9, &(0x7f0000000100)) 21:43:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xd0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}}}, 0xa0) 21:43:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x123, 0x700000000000000}, 0x0) [ 3024.320831][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3024.331810][T10727] ath9k_htc: Failed to initialize the device [ 3024.348437][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3024.760874][T27825] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 3025.281775][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3025.290912][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3025.298887][T27825] usb 3-1: Product: syz [ 3025.303571][T27825] usb 3-1: Manufacturer: syz [ 3025.308181][T27825] usb 3-1: SerialNumber: syz [ 3025.351631][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3025.930932][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3026.334209][T26558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3026.342849][T26558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.351257][T26558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3026.360116][T26558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 21:43:12 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x218, &(0x7f0000000100)={[{0x6f, 0x4e00, "06a42591c0d165c020e7da1a64561c11f035507e0cce557539f501bb761365df44895cdf4da3fc411a4c9ae52842d0de15e11db3a7dbf3402b5825b607b53085e2324a08e4fe1ed5054baaee5c2cd9decf8aaf0b2aaaa54be13df10c432b8acde6a2d9c7bec0ab1e0afe2b135e4b0c"}, {0x47, 0x4e00, "97fed19d84adc6e36efe9c369fb393ff54f0455810a2c8486d241d9868a94e39872dce4c1ab440b872b9d412ddce96cbafde9c58311144f473b70263936c572b5cf6c146c5efc3"}, {0x6e, 0x4e00, "95ea0de216958574cca2be8acb39b6bacd5ac8f4723f5dec4a397701caadd7827c158c922383030c099bf14d56a976c2bb00e99a96c52d63c96f6e34f8d689e83acec4d3043c8b4c757fd8ef50da70f934024715c60a080178f055dac32d065a84b923f11d46f89420ba175545de"}, {0xe0, 0x4e00, "0cf12c2efcb888c98c9bd0de62755d3c2fb1dc5f673d8c3e8137627b2dce1c8337e327e70164ff201ca168028df32579e82b7854155605e98dd51d52c8d65c07c175652c44a7e551645c8a71798d2ae7a377f33e83d08cacfd7b7834269f0af84fb6d8693e1d634a3c13bd712ade8c32d792bdd9e1b5ebd4b484336260ec983805099c5f1e2b0952cc1a48b71da306edb4092742a1509e806a32d195219f06cf7eed97887b64cf50b9931cbaf093795121b0a52a05a593b5e8a26c6cc30b94f4664481d5219391b49918ade11d22066ac7a79868715104346c0e156220ba7e45"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000016c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa0, &(0x7f0000001800)={[{0x9c, 0x4e00, "1e6e0c4184fab37ed2cf0d2d268febe8656e8917d2aad8545a3042c9a2832e4f0c035855940222f9c59bf779e28017a47a49943a6aad56235ef163f64421ca6f7e81e4ea86ba00c234d6e114300b3242b1c7640621a91edef20530f7097fc7581afbf4694b9f7664c8544d5d02f8b8da412e20f9e02a7eae016bc5e43673536b1f2bc54042296745731280557f9bf1429a222fd89d6d7475f1f8f801"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x134c, &(0x7f0000000340)={[{0x81, 0x4e00, "512eff6d7b5445d49650428029022504a3ed9cf3ab494c212ce996f2ffc836773e26ae867e8a30c7ebbcd7560ae00dfca6cfe73d432bccbe86a42071df73009ea2a21d9f7a56080925b2dd73cdc3adda00934c819565058c566899a372c702cb5dc33889ca0c88314230b10086b293d9c4ccccb9c31c99b2aa60a4576b7552f82f"}, {0x56, 0x4e00, "6c08ee2150ad532111dc472f2a372033be96b7b13f9adfde2fd9ae42298a444935262d05cee2198adbf4d627a13101135433a3e9e79d5107b77f5b050e056cb58c4b1c7ab8bf9612a4be8338009d6eba184f783e2cc0"}, {0x35, 0x4e00, "bc21ad7b7d4ec879224f6bed437050f24abf251195be6d2a3a05bf9cadfbf6b2d40426472913307ef5a61b4d002d61be737892b95a"}, {0xab, 0x4e00, "f7f3e0bab1311ed0c7434bd6daa781b97a2f172f4c592bc8dae449a93ff9333e0f491c44b794915a2b0c4fe06af5367493ba4280b61833067d10c2b9e4f9d2a4e93366845f09811607b736fbca085fb9b63e9fdb5e9aac1080eee95175e3d84fef6685839452bede018f62fc10d00976a92b2101a9d834e1c220843a91d62f12d73e6d6dee426d4fbb249fcf6da913639987d3ecbd9acd70fd30f8b00a4aebffa97579ce1256323fa3fc54"}, {}, {0x1000, 0x4e00, "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"}, {0x8, 0x4e00, "29d996440734c303"}, {0x7a, 0x4e00, "b5f63ef0e7588b175f2911c9720868bb4375a9213970a73b183dfe17fb770d3850d4ea830d610c9e373b1429e7286205d396ea135c00bcb3a419c642759d4565746222c5bce6873491d6aee1120370ce21a477789ba6b87249ce357c76a6dac2927dec0d03a0883b363c9c05597e840fcba483b050903d779780"}, {0xe1, 0x4e00, "307abe9ae6b7c5a623307ef38f7de35764145dc11c272906bd9be4eba45042c718b3ac654955b0f5db78766f956cad98300f647164994c1fc630d5097aec0ec20d3f3afcdbe9d0e8b03ec918caf360f0d41e57b3f5d02de27dd9b7aab07735e2a8bb8b9e873f4d171e02d8a078081c668560954f9d797e72481779ae34915553c08bb790660e718988522fa626c9c2e993f53b999d2b0b592a18e5ab03a0a3371a12a1ee3dcaec6e152e604927fee765948d4f32016cb38e5f7d7fad82d4eed315c97eb567871d307375120a97e98523c7c20aee4d1881e8541c7c8c1cf71926d4"}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 21:43:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x3, 0x1, 0x4, 0x8, 0x4, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x6, 0x40, 0x5, "f4e73d0c"}, 0x6, 0x4, {}, 0x76f901e1}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000000c0)=0x2) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) write$damon_target_ids(r1, &(0x7f0000000100)={@val, [{}]}, 0x1d) 21:43:12 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) clock_gettime(0x5, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x3, 0x4, 0x48, 0xffffffc0, {r2, r3/1000+10000}, {0x3, 0xc, 0x20, 0x0, 0x3, 0x7, "423834ce"}, 0x2d24, 0x1, {}, 0x8, 0x0, r1}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x400448c9, &(0x7f0000000100)) 21:43:12 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10d, 0x0, 0x700}, 0x0) 21:43:12 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x124, 0x700000000000000}, 0x0) 21:43:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xd0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}}}, 0xa0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xd0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}}}, 0xa0) (async) 21:43:12 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10e, 0x0, 0x700}, 0x0) [ 3026.385023][T10727] usb 3-1: USB disconnect, device number 83 21:43:12 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x125, 0x700000000000000}, 0x0) 21:43:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 21:43:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_fd={0x41, 0x0, 0x4, 0x800, 0x3, {0x77359400}, {0x3, 0xc, 0x1c, 0x0, 0x4, 0x40, "31893082"}, 0x9, 0x4, {&(0x7f0000000040)=[{0xfff, 0xffff0000, {}, 0x9}, {0x1, 0x20b, {r1}}]}, 0x80000000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21:43:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file0\x00', 0x88, 0x40442}, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000004) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0x2, 0x7, 0xc, 0x80000}) 21:43:12 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x10f, 0x0, 0x700}, 0x0) [ 3026.960954][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3026.967915][T27825] ath9k_htc: Failed to initialize the device [ 3026.975015][T10727] usb 3-1: ath9k_htc: USB layer deinitialized [ 3027.340853][T10727] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 3027.861008][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3027.870104][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3027.878287][T10727] usb 3-1: Product: syz [ 3027.882521][T10727] usb 3-1: Manufacturer: syz [ 3027.887135][T10727] usb 3-1: SerialNumber: syz [ 3027.931727][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3028.500940][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3028.705970][T26596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3028.718615][T26596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.728425][T26596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3028.737264][T26596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.948256][T10727] usb 3-1: USB disconnect, device number 84 21:43:15 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x218, &(0x7f0000000100)={[{0x6f, 0x4e00, "06a42591c0d165c020e7da1a64561c11f035507e0cce557539f501bb761365df44895cdf4da3fc411a4c9ae52842d0de15e11db3a7dbf3402b5825b607b53085e2324a08e4fe1ed5054baaee5c2cd9decf8aaf0b2aaaa54be13df10c432b8acde6a2d9c7bec0ab1e0afe2b135e4b0c"}, {0x47, 0x4e00, "97fed19d84adc6e36efe9c369fb393ff54f0455810a2c8486d241d9868a94e39872dce4c1ab440b872b9d412ddce96cbafde9c58311144f473b70263936c572b5cf6c146c5efc3"}, {0x6e, 0x4e00, "95ea0de216958574cca2be8acb39b6bacd5ac8f4723f5dec4a397701caadd7827c158c922383030c099bf14d56a976c2bb00e99a96c52d63c96f6e34f8d689e83acec4d3043c8b4c757fd8ef50da70f934024715c60a080178f055dac32d065a84b923f11d46f89420ba175545de"}, {0xe0, 0x4e00, "0cf12c2efcb888c98c9bd0de62755d3c2fb1dc5f673d8c3e8137627b2dce1c8337e327e70164ff201ca168028df32579e82b7854155605e98dd51d52c8d65c07c175652c44a7e551645c8a71798d2ae7a377f33e83d08cacfd7b7834269f0af84fb6d8693e1d634a3c13bd712ade8c32d792bdd9e1b5ebd4b484336260ec983805099c5f1e2b0952cc1a48b71da306edb4092742a1509e806a32d195219f06cf7eed97887b64cf50b9931cbaf093795121b0a52a05a593b5e8a26c6cc30b94f4664481d5219391b49918ade11d22066ac7a79868715104346c0e156220ba7e45"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000016c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa0, &(0x7f0000001800)={[{0x9c, 0x4e00, "1e6e0c4184fab37ed2cf0d2d268febe8656e8917d2aad8545a3042c9a2832e4f0c035855940222f9c59bf779e28017a47a49943a6aad56235ef163f64421ca6f7e81e4ea86ba00c234d6e114300b3242b1c7640621a91edef20530f7097fc7581afbf4694b9f7664c8544d5d02f8b8da412e20f9e02a7eae016bc5e43673536b1f2bc54042296745731280557f9bf1429a222fd89d6d7475f1f8f801"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x134c, &(0x7f0000000340)={[{0x81, 0x4e00, "512eff6d7b5445d49650428029022504a3ed9cf3ab494c212ce996f2ffc836773e26ae867e8a30c7ebbcd7560ae00dfca6cfe73d432bccbe86a42071df73009ea2a21d9f7a56080925b2dd73cdc3adda00934c819565058c566899a372c702cb5dc33889ca0c88314230b10086b293d9c4ccccb9c31c99b2aa60a4576b7552f82f"}, {0x56, 0x4e00, "6c08ee2150ad532111dc472f2a372033be96b7b13f9adfde2fd9ae42298a444935262d05cee2198adbf4d627a13101135433a3e9e79d5107b77f5b050e056cb58c4b1c7ab8bf9612a4be8338009d6eba184f783e2cc0"}, {0x35, 0x4e00, "bc21ad7b7d4ec879224f6bed437050f24abf251195be6d2a3a05bf9cadfbf6b2d40426472913307ef5a61b4d002d61be737892b95a"}, {0xab, 0x4e00, "f7f3e0bab1311ed0c7434bd6daa781b97a2f172f4c592bc8dae449a93ff9333e0f491c44b794915a2b0c4fe06af5367493ba4280b61833067d10c2b9e4f9d2a4e93366845f09811607b736fbca085fb9b63e9fdb5e9aac1080eee95175e3d84fef6685839452bede018f62fc10d00976a92b2101a9d834e1c220843a91d62f12d73e6d6dee426d4fbb249fcf6da913639987d3ecbd9acd70fd30f8b00a4aebffa97579ce1256323fa3fc54"}, {}, {0x1000, 0x4e00, "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"}, {0x8, 0x4e00, "29d996440734c303"}, {0x7a, 0x4e00, "b5f63ef0e7588b175f2911c9720868bb4375a9213970a73b183dfe17fb770d3850d4ea830d610c9e373b1429e7286205d396ea135c00bcb3a419c642759d4565746222c5bce6873491d6aee1120370ce21a477789ba6b87249ce357c76a6dac2927dec0d03a0883b363c9c05597e840fcba483b050903d779780"}, {0xe1, 0x4e00, "307abe9ae6b7c5a623307ef38f7de35764145dc11c272906bd9be4eba45042c718b3ac654955b0f5db78766f956cad98300f647164994c1fc630d5097aec0ec20d3f3afcdbe9d0e8b03ec918caf360f0d41e57b3f5d02de27dd9b7aab07735e2a8bb8b9e873f4d171e02d8a078081c668560954f9d797e72481779ae34915553c08bb790660e718988522fa626c9c2e993f53b999d2b0b592a18e5ab03a0a3371a12a1ee3dcaec6e152e604927fee765948d4f32016cb38e5f7d7fad82d4eed315c97eb567871d307375120a97e98523c7c20aee4d1881e8541c7c8c1cf71926d4"}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 21:43:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 21:43:15 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x110, 0x0, 0x700}, 0x0) 21:43:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x126, 0x700000000000000}, 0x0) 21:43:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) (async) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file0\x00', 0x88, 0x40442}, 0x2) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000004) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x2) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0x2, 0x7, 0xc, 0x80000}) 21:43:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_fd={0x41, 0x0, 0x4, 0x800, 0x3, {0x77359400}, {0x3, 0xc, 0x1c, 0x0, 0x4, 0x40, "31893082"}, 0x9, 0x4, {&(0x7f0000000040)=[{0xfff, 0xffff0000, {}, 0x9}, {0x1, 0x20b, {r1}}]}, 0x80000000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21:43:15 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x111, 0x0, 0x700}, 0x0) 21:43:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x127, 0x700000000000000}, 0x0) 21:43:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file0\x00', 0x88, 0x40442}, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000004) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0x2, 0x7, 0xc, 0x80000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file0\x00', 0x88, 0x40442}, 0x2) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000004) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0x2, 0x7, 0xc, 0x80000}) (async) [ 3029.521019][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3029.528065][ T3667] ath9k_htc: Failed to initialize the device [ 3029.542368][T26630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 21:43:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_fd={0x41, 0x0, 0x4, 0x800, 0x3, {0x77359400}, {0x3, 0xc, 0x1c, 0x0, 0x4, 0x40, "31893082"}, 0x9, 0x4, {&(0x7f0000000040)=[{0xfff, 0xffff0000, {}, 0x9}, {0x1, 0x20b, {r1}}]}, 0x80000000}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21:43:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) [ 3029.571275][T26630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.575408][T10727] usb 3-1: ath9k_htc: USB layer deinitialized 21:43:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x128, 0x700000000000000}, 0x0) [ 3029.619154][T26630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3029.653240][T26630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.960843][T10727] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 3030.481428][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3030.490513][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3030.498572][T10727] usb 3-1: Product: syz [ 3030.502855][T10727] usb 3-1: Manufacturer: syz [ 3030.507469][T10727] usb 3-1: SerialNumber: syz [ 3030.551689][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3031.120915][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3031.324140][ T3667] usb 3-1: USB disconnect, device number 85 21:43:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) 21:43:17 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x112, 0x0, 0x700}, 0x0) 21:43:17 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x218, &(0x7f0000000100)={[{0x6f, 0x4e00, "06a42591c0d165c020e7da1a64561c11f035507e0cce557539f501bb761365df44895cdf4da3fc411a4c9ae52842d0de15e11db3a7dbf3402b5825b607b53085e2324a08e4fe1ed5054baaee5c2cd9decf8aaf0b2aaaa54be13df10c432b8acde6a2d9c7bec0ab1e0afe2b135e4b0c"}, {0x47, 0x4e00, "97fed19d84adc6e36efe9c369fb393ff54f0455810a2c8486d241d9868a94e39872dce4c1ab440b872b9d412ddce96cbafde9c58311144f473b70263936c572b5cf6c146c5efc3"}, {0x6e, 0x4e00, "95ea0de216958574cca2be8acb39b6bacd5ac8f4723f5dec4a397701caadd7827c158c922383030c099bf14d56a976c2bb00e99a96c52d63c96f6e34f8d689e83acec4d3043c8b4c757fd8ef50da70f934024715c60a080178f055dac32d065a84b923f11d46f89420ba175545de"}, {0xe0, 0x4e00, "0cf12c2efcb888c98c9bd0de62755d3c2fb1dc5f673d8c3e8137627b2dce1c8337e327e70164ff201ca168028df32579e82b7854155605e98dd51d52c8d65c07c175652c44a7e551645c8a71798d2ae7a377f33e83d08cacfd7b7834269f0af84fb6d8693e1d634a3c13bd712ade8c32d792bdd9e1b5ebd4b484336260ec983805099c5f1e2b0952cc1a48b71da306edb4092742a1509e806a32d195219f06cf7eed97887b64cf50b9931cbaf093795121b0a52a05a593b5e8a26c6cc30b94f4664481d5219391b49918ade11d22066ac7a79868715104346c0e156220ba7e45"}]}) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000016c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa0, &(0x7f0000001800)={[{0x9c, 0x4e00, "1e6e0c4184fab37ed2cf0d2d268febe8656e8917d2aad8545a3042c9a2832e4f0c035855940222f9c59bf779e28017a47a49943a6aad56235ef163f64421ca6f7e81e4ea86ba00c234d6e114300b3242b1c7640621a91edef20530f7097fc7581afbf4694b9f7664c8544d5d02f8b8da412e20f9e02a7eae016bc5e43673536b1f2bc54042296745731280557f9bf1429a222fd89d6d7475f1f8f801"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x134c, &(0x7f0000000340)={[{0x81, 0x4e00, "512eff6d7b5445d49650428029022504a3ed9cf3ab494c212ce996f2ffc836773e26ae867e8a30c7ebbcd7560ae00dfca6cfe73d432bccbe86a42071df73009ea2a21d9f7a56080925b2dd73cdc3adda00934c819565058c566899a372c702cb5dc33889ca0c88314230b10086b293d9c4ccccb9c31c99b2aa60a4576b7552f82f"}, {0x56, 0x4e00, "6c08ee2150ad532111dc472f2a372033be96b7b13f9adfde2fd9ae42298a444935262d05cee2198adbf4d627a13101135433a3e9e79d5107b77f5b050e056cb58c4b1c7ab8bf9612a4be8338009d6eba184f783e2cc0"}, {0x35, 0x4e00, "bc21ad7b7d4ec879224f6bed437050f24abf251195be6d2a3a05bf9cadfbf6b2d40426472913307ef5a61b4d002d61be737892b95a"}, {0xab, 0x4e00, "f7f3e0bab1311ed0c7434bd6daa781b97a2f172f4c592bc8dae449a93ff9333e0f491c44b794915a2b0c4fe06af5367493ba4280b61833067d10c2b9e4f9d2a4e93366845f09811607b736fbca085fb9b63e9fdb5e9aac1080eee95175e3d84fef6685839452bede018f62fc10d00976a92b2101a9d834e1c220843a91d62f12d73e6d6dee426d4fbb249fcf6da913639987d3ecbd9acd70fd30f8b00a4aebffa97579ce1256323fa3fc54"}, {}, {0x1000, 0x4e00, "a9f451d8043095e518c93bdd1e65fe5dbc441ecb697fc5f4d25384ce9d106ad82f2c93fa046312e045b7981d0d46b3835765d8407a743f0f8b99aa68622cff4ac7946ddc555e1d172dc848f5a42d16a701c707700bea9eb9c07e79630b0b0b7cff5121f8854e671ac13d3407566bce0dc53a4f51aac000f34376bc016bafaac0dbd778ba6e48ec009f708e2c0a5faf6749041982cde176181db2d612613b3527d1126587ab58f55ac49730ba5c006df6fcad6287ebfd8b8343037fb720c9b40986d56ef0b64b800f95340b7070f9b69ff0b4ed56edc02f7d5453a19484d833784db25194767713f44bc288e74caa6d3c5fe42eedd9781302671470f8fb7c680d2488748202005587e33f2aaee85bc5dc1162b86d72b7daf58a6f35b0301695adb4284d0dedb92d1815e330cbfec8478b0cedc24bab44fef1bf7591465f37d0f8cc8c8b06454857599a678e8090045d005d1cc810c53dfb6f1ee447a4fab232835c8e1224ebc3a934cb643dfc9c0ca8793618a09a37b20feb4f7d5ee182d4b99787e78aba3fee3151e58e36e212016e17eb16dd38571b44e2b37475b4733373dfe53eab34cfce0ed8d7902a68ccbc8ae11ec5f22039dd77c52108e20795038127702cc591d44528545e274c29f719fdf319d0f2b2a84adcdb3aa184ecda652f2b33aaf66e0d06f435fa64155b787daad7628018d5f480f829fb02f984b1550927f39e840a4c7325248255fdc16ede54b7fd8a0ef71654bf338873a227bfb9653b853c84ba164aebbcb7aaf470420646a784f296bbfb2f277cd33983ff38a7dbab2493c1af0946116feff06d4151a923d0a242065a189c7b96fd96bb10809f4906f5aff4cd415a2314395ac2650af810efc87b5a7ca4b0b77b885033da0c07e4d8a5c912a5fd4a9254a3e89a6c27365710fc6028052f7ffdbceb90f6990e114c36ac58f23396743271aafc6919e28ada74a7edaeb61e6e87cf5650f43673d738893340be786ea1f73802550f397263114762bf7d6f52d4386ccb1b28b8d8a1d9d8cb928a60fb944b7c4bc9ce8e4b8acc782f4c2cc44f841f11e8d0777796aea47ce9c708c42ee9dabdc02cbd55841f4c05d456257008d8f76828020d1e8a23e8db8d6c7bc4429763546794e41220765856ef7293727a46c73f0f593e7848767e945ad6870d320f24723e5c20cfaaa6e43b9053819a271d4979835fe969bdb9b7475816c4085a6d245fd62745a46c457b5b69ae1c67841b4fad846f0bf27c9fa6c51715884736d1c9cd5fb81b31a35493f0c56815bde9fc3c52c9342ffaa4f82e239d88666e4e86d998237910869d6c12aa527569b77092e45156f1a064cc140d3703ba119a7ac8a35334934d91421b516ea2d3daf52a7d8c47b66137910d2bfa982fec7abd5e83261efa01fd3bba47b9c5eea8cae17b3f77fef0c17e41c1be6ab2b6db81fc925e5cf6a212384333218fc341dce742a1a5affcc5a33452580546bc319ae7f9b5302d558f752b0437871602ab801e230e1f729ef6ec81bf784fa18b00e5e0a1796e7bc2a325b4b7f5f34ee01572ab7b8d2b39207537e0d225b3cdd8d9145dce0d4d42ccce812057471271b4d2670edb5d19a0add3794e045dd2800198ee6833b170d7075878df4df9c3472bb8add184775d4d9d06e2b854d97effb78487171e04fb6b2b42377680a4c7c8d066a4e27f0bc91dd62edf8a9026e77308594742aa1193a71dab1957ab5ddd03d5b25d36b54b31442ba3676e5a9927f4f637b478d83fbdd2302f50ce5ec7643cf7f957f2aa3c5c4011aef19a0c4d067d661de0db6156aeb121fb5ada60cb9c3312a06592a06b192db3469649ab1b6baac204ff5555e399deb251d4dca7b66a4da87caf0a39ceee9cf871b72d04a61160e29435e11ab8599cbe67c47acd4a45c8d0d82da93025988063921b9d4a659a6f38a71e37d96568e8f94c338d65f171b9a22eff8466a705b56acedca0ab7a30edff204d2b5172c16e0842b78b6f7ab62870732b60e37a79afe66097f128c37757a1013fba03939bd08cfa27b262fabeba8f0b06213f3c4d74ef8a2ba1343a5b0e21e72aad3cec2f29f4fd7384f6d5a142dcb676aec7c661412b8db60cd34a04a21beb3ba56c8714fea4e3bf9911ae2c18ba5f4d7262d57b0f9c655f4b7356f688da7f5fc5403016f4648bbe7838785fb1cfdb87984cf43aff08139cbea774d9d436ccb1000c680e6d614793288cc76cd94d96dff57fd370e094148866e9d3b1027c94f66d68bdf50c97f96ef2e84b5fd74e8b5f175c592f588d7fe5063c8cb5f77eac592a3b8f828e2276cb5ed16cf55eb1148f60d97f1564ae9d8185e56b372eeb3c16f83a96d45b44dffae0d8339132987f3f713a71e55f65f5c47704bf1b42295654ccd952f53b530c144ee61c11586c14adbb482eccbb46c4dbf9d815c79693a469d52f8c7e194371ab83e846ac10e088f5060a568ddcfc6d4c78e1c856a2daca1faa5f379d6999a46c030596922f5ac9bcbf1ccad5b105869b147390aee49d41766c765d40a751d3dbe0ef3a1ec6ee7e61ded00a4eec2243154f9e20eb670a161e31aae09b58aa216a471c8478ae869403674b3eac3911c9b5eec1b3bb6311010fb8343ca5a010e5e3e72e4e0fa8fbd387a0aac4fd06bb89947b40efc8c5f42f67c16d0b0b5154e85a45d2d8c0c797e43ff99555bc35d5b9bf77793c17b863b069e444725dc8b58279293b4fb8dfaa9a4650c72833ccccfc0dfe87e99374c6ce60592a940ea4c7296f91c14987ec1a570085f271d259ce6ea95fb3818c49008a4c8621b017c608795140eb4acf6ac59229cf7c3441e8e71f1156fe1834ac302eb44779ccc4961fb4f9bcf297f1c616062b0224d9e784c9309595c77cee33319a83bf53b79b62ac2d39fd0e314a3eefa362b5a8c3d230317c74101b4a493fad192b9ecb003342ea96c80c244062c81e81c4e5f80c21c7e6612d3e922027939ac23970ee603d501dd162c69deecc75c25f74718db04b41057030563e24d6ea275b99c7d1c0b861927a01ccf39fa098a17cc7b3b6a80b1364f0a701baabacf79449e44c62a4c31e7c69e14b3fe516644e42a5e9b8b453f1dc3ee963fcec523474a107ae0dbc35cbc63beff54ae6c1e1ff26e5bdb359ed9c23ac30ab1e7641069973813c147400f5d09acd7acba8e03d5e8feb25063614c56389ff37ab2278baa6db8b6365508f86c8e100e9898f4bcd2c709feeb85e2b298be32bfd7b0dda1a1d6bd304551a153a90de7f7cb1d9d55a48df55ccee1f72e12687271213d6c7dee35979924227dc15a1dc005d57c85a2ac8a32036f459dd2fb0370ea9d57be23d933d2b241c9575bb6b526532d52450815d5682553bc41243d7b8e5d5574cd269b738cbeacfcd579d15e1501f915ceac56889396ad120acdba5a7c99fecdf07abaebfae71945201b634ce38c386335a338b97b0308a0eddd5e83257a3fffa4828655dfada265d5564d7c02617b10c954e08fb42b1720bc3f1545ab62fe413acb51167e852c9beab41847ef20284de3ed8ead86d1792d1aad6af8f1146b7e26043edc8742f9863feca48ddb23b8764022355ec2c528c991d5c83d5e088d31d04129b8dcaca83c603f353fb74ed4602faf4711df0c5762873e4a93a3d32fd3d23d5e59466767c06e67a5a78c7125ce2408d700c28f5c68410c435b333fe768b748b597cea9902b8effce4a9f30041c642f943be3f4ffe031a3eec00e72cafc357821be116d50cd626be7011b6f407a18ac20d19ee74aea1fd891a8af16b6adb9c98df9427056a056296716db4eedf4fa7252c73a4a67db619e717620dcae3adc7f4f5c4079f90c85ffaa64af9f492cc700b88d9cf878a719e5ad40716643b88f6bda9a2c314722b6d556b5527aacf84ab4d32d81b9efbd4d10f312b7facad30d5d222cf24cfbb55ef263f90db502cce46af8693b12ce3eb55db083140af28da9977c45d9a3a0fc164e39772ca2a6e94fe0438814b7d237062269f83a6936487089368f359043a761d447e76b409dbde7a8165d0b96cad91cc4a045ab07335d59ce668fc708e46560ad8a6369cbd8ec159a0fcf86ba2f82ee17bdf0fa76e0e1be05f6517c2956a133eaa1d6b7c9905851ea06171ad04f57fb74c459823cacace7f6e1b86ab319c8bb79f661ae74933c505643bffcb1c5e483412cd7f178969c28d3a625898c13bf371853a7c95e2ee332f244a771a4263a20b37b38c2050406435284454c49e55e20fb43c2427a7c1254d5f47e30c94341e0613fd34f51489d7305a0de04aaff0fc8a06de6aee06e007646069d300afde992bd8599734db4b75f6ac0d816dd78a384f2c9b2e48f1bbbd29a173070e0d45d2b3b83e4ea2af3d1b4a106b20d3143cceb1e7a592852b71a260f36cd50aebd6e44dccd48fbd6cec3c22684ad90051cfac5b1427b79538d737f8f1d3954efc2763b38dae86be70da92d3f42dc6c2ee69fb21357754fded700910527c55dc38bddef7e7e45b9d7ad6295a0434c7e72a0bdbfa12c50caa80ac0b5cf07a437c72b5ac50ec5299185ed5a8515ee12599ced44e4419bcc080594fabbcd0f9a2a896c555315d8522a944a646b64a05604d261989617c486a8027f1cb27434133c87340536c293e2e9092825dbe2df46fe8779997b47781b123d46331fc5dceb186c8650ae4a268eb34d2b3a7fb5a25717390773d94d122528cc6a7bc807e86dc08f84929932334b2938479b27ad343361b8138b3271e0e65f87134e9697ce986bfcfe90edee312253f335b477483c391a5c641c60b8c5dafdfe93a33eba8fbfc06e33d258764466766bd1270afbd4e6ecf5dbe8c474a0078b12d04d9960c757944e65ecc22c1b81ee86175799d7845d55a17afdb22755e9964795851abc0d4ee3394bbd725fe6d7580e05549f2c4ecebd2c2c9bf84f623ef57a6202e484d574cc891fdb6ca2429632f8f75300a21e8bb3712aa03004fc902bbafcac4e617bcb26542a6d0d6a6146c344af6713a43c9ed6464fef7f2d2442677c45788c2f92dbf8b47bfcea982f7993b8c97f06c5fb56673c2bbd78f1e1efece2306e3cb46d23fb4d6338374485d43a2cd2bdde4c4d34a7b5edb59ddcf485b5a54aac711c1b650cb509f3fc72553037982486443765d3335afcb7415bc4d012b1f3ac0a8dd56c340845f6c9e6424928a2a5f31dff82969d4901c8c5123938f59227a3b1222c45d7b153071458599a228ef484fe9012d498d81b510b3c7543e495903d66d094e50c130fcfca8f6051b0551b57ab9f599d53f034116ec4db602ad58184e3bc5593be8f9267c4d337de15f3238f42276141a3a318d1fec41792651a09885828777c4f4f5f0a1ebe5aa667c92d824c81bdfa3dc701ea0e39cb3bfece1565261b487466019114ee4456c5c854c6ca9e7a31fc68e609504e8664378f28a3854c165015dfd3818ed351540c842746abc2ed0a71f66cd6095ffbdb2dd6b9498532025f89bbdbbb147821bfed9edddb268f505309fc765e754b648d676d8ddb445c11127e3fc9bb9b0167ea882d3dfc6361acd4ec954b8c1f43ec1b7b05832e7dfb066d532621eb9b0b085d62613d3d4f50e5658e0deb4c8589053eb91145cd8b1ccd287ec18778f94f4c5ec9371a5a17759319af41602f7088905a5e4053f84a123b5f2a0b87c28c87a32b41dbfc0c9c70b8a342999a7856dc74dab2f0e640bcf0098ef580199fdb0e0a45f6187c71a36fec75cd1dca4d012174a7f0ee0d5e383e59d0913389748439f5012339f412b48174ea0"}, {0x8, 0x4e00, "29d996440734c303"}, {0x7a, 0x4e00, "b5f63ef0e7588b175f2911c9720868bb4375a9213970a73b183dfe17fb770d3850d4ea830d610c9e373b1429e7286205d396ea135c00bcb3a419c642759d4565746222c5bce6873491d6aee1120370ce21a477789ba6b87249ce357c76a6dac2927dec0d03a0883b363c9c05597e840fcba483b050903d779780"}, {0xe1, 0x4e00, "307abe9ae6b7c5a623307ef38f7de35764145dc11c272906bd9be4eba45042c718b3ac654955b0f5db78766f956cad98300f647164994c1fc630d5097aec0ec20d3f3afcdbe9d0e8b03ec918caf360f0d41e57b3f5d02de27dd9b7aab07735e2a8bb8b9e873f4d171e02d8a078081c668560954f9d797e72481779ae34915553c08bb790660e718988522fa626c9c2e993f53b999d2b0b592a18e5ab03a0a3371a12a1ee3dcaec6e152e604927fee765948d4f32016cb38e5f7d7fad82d4eed315c97eb567871d307375120a97e98523c7c20aee4d1881e8541c7c8c1cf71926d4"}]}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 21:43:17 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) clock_gettime(0x4, &(0x7f0000000180)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@mmap={0x843, 0x6, 0x4, 0x4, 0xff, {r2, r3/1000+60000}, {0x3, 0xc, 0xff, 0x6, 0x3, 0x1f, "b558d0b5"}, 0x5, 0x1, {}, 0x1, 0x0, r4}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000002c0)) 21:43:17 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x129, 0x700000000000000}, 0x0) 21:43:17 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) 21:43:18 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) 21:43:18 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12a, 0x700000000000000}, 0x0) 21:43:18 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x113, 0x0, 0x700}, 0x0) 21:43:18 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) clock_gettime(0x4, &(0x7f0000000180)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@mmap={0x843, 0x6, 0x4, 0x4, 0xff, {r2, r3/1000+60000}, {0x3, 0xc, 0xff, 0x6, 0x3, 0x1f, "b558d0b5"}, 0x5, 0x1, {}, 0x1, 0x0, r4}) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000002c0)) 21:43:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) 21:43:18 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12b, 0x700000000000000}, 0x0) 21:43:18 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) (async) memfd_secret(0x80000) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) (async) [ 3032.160933][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3032.167897][T24210] ath9k_htc: Failed to initialize the device [ 3032.174543][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3032.530962][ T3667] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3033.050960][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3033.060139][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.068278][ T3667] usb 3-1: Product: syz [ 3033.072564][ T3667] usb 3-1: Manufacturer: syz [ 3033.077207][ T3667] usb 3-1: SerialNumber: syz [ 3033.121747][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3033.690924][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3033.892737][T26670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3033.901523][T26670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3033.910206][T26693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3033.920194][T26693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3034.133123][T27825] usb 3-1: USB disconnect, device number 86 21:43:20 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x3, 0xd5, 0x7f, 0x2}, {0x0, 0x94, 0x20, 0xfffffff7}, {0x6, 0x7f, 0x3, 0x400}, {0x9, 0x4, 0x40, 0x4}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xcc, &(0x7f0000000040)=@generic={0x0, 0x2, 0xc4, "4dd2e622", "c7cdb52876399d4fa84f9f1e49266c3dbfe58b086840e033dcb52dc08c2e3c587f3a39a8e0451d0fd7e3a5760a75cc23616bdbe5316d806e39594f1dd6a2d3f3ea6d1a04f91f2abfe69ec0f5f4701573a288b1b1a44cf6bda8a959b9665ea010ea47faa7eab3bcca9f62389e6f6b75ba0b5f6c24a71ad2d071a7495b7ddc7572c1e9a47bc00ebe5c8106b3e2f3af947bfae7d1d966e14558969e8c76430762f11431a9ce15b6dfe00d9ce23e7c7b00b3a657a8adb5b9a5908f4dd716df11d03649d0bf72"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:43:20 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x114, 0x0, 0x700}, 0x0) 21:43:20 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) clock_gettime(0x4, &(0x7f0000000180)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@mmap={0x843, 0x6, 0x4, 0x4, 0xff, {r2, r3/1000+60000}, {0x3, 0xc, 0xff, 0x6, 0x3, 0x1f, "b558d0b5"}, 0x5, 0x1, {}, 0x1, 0x0, r4}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) clock_gettime(0x4, &(0x7f0000000180)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@mmap={0x843, 0x6, 0x4, 0x4, 0xff, {r2, r3/1000+60000}, {0x3, 0xc, 0xff, 0x6, 0x3, 0x1f, "b558d0b5"}, 0x5, 0x1, {}, 0x1, 0x0, r4}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000002c0)) (async) 21:43:20 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12c, 0x700000000000000}, 0x0) 21:43:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000000)="fe1339be2f8fa356113acc2fea81bb6ee06fbb09e334e3964291c66ac12dc2f7f57395fffd0e1d8ed2fa6305f0fd4273e87bd1110aac2d5c9b008e4556402ecf1c759791b0102a77444c", 0x4a) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:43:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) 21:43:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@multiplanar_mmap={0x3, 0x1, 0x4, 0x0, 0x7ff, {0x77359400}, {0x2, 0x7, 0x5, 0x77, 0x1, 0x8, "95fcb5a3"}, 0x3f, 0x1, {&(0x7f0000000000)=[{0x5, 0x8001, {}, 0x8001}, {0x7, 0x8, {0x9}, 0x4d1}]}, 0xff}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:43:20 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12d, 0x700000000000000}, 0x0) 21:43:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000000)="fe1339be2f8fa356113acc2fea81bb6ee06fbb09e334e3964291c66ac12dc2f7f57395fffd0e1d8ed2fa6305f0fd4273e87bd1110aac2d5c9b008e4556402ecf1c759791b0102a77444c", 0x4a) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) write$dsp(0xffffffffffffffff, &(0x7f0000000000)="fe1339be2f8fa356113acc2fea81bb6ee06fbb09e334e3964291c66ac12dc2f7f57395fffd0e1d8ed2fa6305f0fd4273e87bd1110aac2d5c9b008e4556402ecf1c759791b0102a77444c", 0x4a) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) 21:43:20 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x115, 0x0, 0x700}, 0x0) 21:43:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) io_uring_setup(0x4a44, &(0x7f0000000080)={0x0, 0x8bfc, 0x1, 0x1, 0x31b, 0x0, r1}) 21:43:20 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12e, 0x700000000000000}, 0x0) [ 3034.732261][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3034.739276][T24210] ath9k_htc: Failed to initialize the device [ 3034.760278][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3035.140942][T27825] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3035.721009][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3035.730084][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.738465][T27825] usb 3-1: Product: syz [ 3035.742900][T27825] usb 3-1: Manufacturer: syz [ 3035.747517][T27825] usb 3-1: SerialNumber: syz [ 3035.792265][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3036.450916][T27979] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3037.073888][ T3667] usb 3-1: USB disconnect, device number 87 21:43:23 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x3, 0xd5, 0x7f, 0x2}, {0x0, 0x94, 0x20, 0xfffffff7}, {0x6, 0x7f, 0x3, 0x400}, {0x9, 0x4, 0x40, 0x4}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xcc, &(0x7f0000000040)=@generic={0x0, 0x2, 0xc4, "4dd2e622", "c7cdb52876399d4fa84f9f1e49266c3dbfe58b086840e033dcb52dc08c2e3c587f3a39a8e0451d0fd7e3a5760a75cc23616bdbe5316d806e39594f1dd6a2d3f3ea6d1a04f91f2abfe69ec0f5f4701573a288b1b1a44cf6bda8a959b9665ea010ea47faa7eab3bcca9f62389e6f6b75ba0b5f6c24a71ad2d071a7495b7ddc7572c1e9a47bc00ebe5c8106b3e2f3af947bfae7d1d966e14558969e8c76430762f11431a9ce15b6dfe00d9ce23e7c7b00b3a657a8adb5b9a5908f4dd716df11d03649d0bf72"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:43:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@multiplanar_mmap={0x3, 0x1, 0x4, 0x0, 0x7ff, {0x77359400}, {0x2, 0x7, 0x5, 0x77, 0x1, 0x8, "95fcb5a3"}, 0x3f, 0x1, {&(0x7f0000000000)=[{0x5, 0x8001, {}, 0x8001}, {0x7, 0x8, {0x9}, 0x4d1}]}, 0xff}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:43:23 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x116, 0x0, 0x700}, 0x0) 21:43:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000000)="fe1339be2f8fa356113acc2fea81bb6ee06fbb09e334e3964291c66ac12dc2f7f57395fffd0e1d8ed2fa6305f0fd4273e87bd1110aac2d5c9b008e4556402ecf1c759791b0102a77444c", 0x4a) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:43:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) io_uring_setup(0x4a44, &(0x7f0000000080)={0x0, 0x8bfc, 0x1, 0x1, 0x31b, 0x0, r1}) 21:43:23 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12f, 0x700000000000000}, 0x0) [ 3037.521079][T27979] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3037.528099][T27979] ath9k_htc: Failed to initialize the device [ 3037.536150][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized 21:43:23 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x130, 0x700000000000000}, 0x0) 21:43:23 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x117, 0x0, 0x700}, 0x0) 21:43:23 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) memfd_secret(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@fd={0x0, 0x2, 0x4, 0x1, 0x7f, {r1, r2/1000+60000}, {0x4, 0xd, 0xb0, 0xc3, 0x20, 0x7, "02986f92"}, 0xe60}) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/45, 0x2d, &(0x7f0000000080)=""/126, 0x2, 0x2}}, 0x48) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x200, 0x3, 0x4, 0x100000, 0x5a8, {r4, r5/1000+10000}, {0x4, 0x2, 0xff, 0x0, 0x7, 0xff, "cf8375dc"}, 0x80000001, 0x3, {&(0x7f0000000340)=[{0xfffff79f, 0x3f, {0x100}, 0x2}, {0x2, 0xffff, {0x93}, 0x5}]}, 0x3, 0x0, r6}) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) 21:43:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@multiplanar_mmap={0x3, 0x1, 0x4, 0x0, 0x7ff, {0x77359400}, {0x2, 0x7, 0x5, 0x77, 0x1, 0x8, "95fcb5a3"}, 0x3f, 0x1, {&(0x7f0000000000)=[{0x5, 0x8001, {}, 0x8001}, {0x7, 0x8, {0x9}, 0x4d1}]}, 0xff}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:43:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) io_uring_setup(0x4a44, &(0x7f0000000080)={0x0, 0x8bfc, 0x1, 0x1, 0x31b, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) io_uring_setup(0x4a44, &(0x7f0000000080)={0x0, 0x8bfc, 0x1, 0x1, 0x31b, 0x0, r1}) (async) 21:43:23 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x118, 0x0, 0x700}, 0x0) [ 3037.990973][ T3667] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3038.571044][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3038.580114][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.588470][ T3667] usb 3-1: Product: syz [ 3038.592958][ T3667] usb 3-1: Manufacturer: syz [ 3038.597573][ T3667] usb 3-1: SerialNumber: syz [ 3038.641429][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3039.220997][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3039.843575][T24210] usb 3-1: USB disconnect, device number 88 [ 3040.240863][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3040.247888][ T3667] ath9k_htc: Failed to initialize the device [ 3040.255165][T24210] usb 3-1: ath9k_htc: USB layer deinitialized 21:43:26 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x3, 0xd5, 0x7f, 0x2}, {0x0, 0x94, 0x20, 0xfffffff7}, {0x6, 0x7f, 0x3, 0x400}, {0x9, 0x4, 0x40, 0x4}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xcc, &(0x7f0000000040)=@generic={0x0, 0x2, 0xc4, "4dd2e622", "c7cdb52876399d4fa84f9f1e49266c3dbfe58b086840e033dcb52dc08c2e3c587f3a39a8e0451d0fd7e3a5760a75cc23616bdbe5316d806e39594f1dd6a2d3f3ea6d1a04f91f2abfe69ec0f5f4701573a288b1b1a44cf6bda8a959b9665ea010ea47faa7eab3bcca9f62389e6f6b75ba0b5f6c24a71ad2d071a7495b7ddc7572c1e9a47bc00ebe5c8106b3e2f3af947bfae7d1d966e14558969e8c76430762f11431a9ce15b6dfe00d9ce23e7c7b00b3a657a8adb5b9a5908f4dd716df11d03649d0bf72"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:43:26 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x131, 0x700000000000000}, 0x0) 21:43:26 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) memfd_secret(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@fd={0x0, 0x2, 0x4, 0x1, 0x7f, {r1, r2/1000+60000}, {0x4, 0xd, 0xb0, 0xc3, 0x20, 0x7, "02986f92"}, 0xe60}) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/45, 0x2d, &(0x7f0000000080)=""/126, 0x2, 0x2}}, 0x48) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x200, 0x3, 0x4, 0x100000, 0x5a8, {r4, r5/1000+10000}, {0x4, 0x2, 0xff, 0x0, 0x7, 0xff, "cf8375dc"}, 0x80000001, 0x3, {&(0x7f0000000340)=[{0xfffff79f, 0x3f, {0x100}, 0x2}, {0x2, 0xffff, {0x93}, 0x5}]}, 0x3, 0x0, r6}) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) memfd_secret(0x0) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@fd={0x0, 0x2, 0x4, 0x1, 0x7f, {r1, r2/1000+60000}, {0x4, 0xd, 0xb0, 0xc3, 0x20, 0x7, "02986f92"}, 0xe60}) (async) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/45, 0x2d, &(0x7f0000000080)=""/126, 0x2, 0x2}}, 0x48) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x200, 0x3, 0x4, 0x100000, 0x5a8, {r4, r5/1000+10000}, {0x4, 0x2, 0xff, 0x0, 0x7, 0xff, "cf8375dc"}, 0x80000001, 0x3, {&(0x7f0000000340)=[{0xfffff79f, 0x3f, {0x100}, 0x2}, {0x2, 0xffff, {0x93}, 0x5}]}, 0x3, 0x0, r6}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) (async) 21:43:26 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x119, 0x0, 0x700}, 0x0) 21:43:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:43:26 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60, 0x0, r0, {{0x3, 0x42f2, 0x7fffffff, 0xffffffff80000001, 0x2, 0x10001, 0x2, 0xffff}}}, 0x60) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000004640)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004600)={&(0x7f0000004580)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000004500)={0x10, 0x0, r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000043c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000004480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB='5\a@\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf25010000000000000001410000001800170000000e000000007564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x48804) write$FUSE_ATTR(r5, &(0x7f0000000080)={0x78, 0x0, r0, {0x0, 0x5, 0x0, {0x2, 0x5, 0x6, 0x3ff, 0x0, 0xfffffffffffffff9, 0x8, 0x6eaf, 0x9, 0xa000, 0x8, r7, r1, 0x8000002, 0xfffffffa}}}, 0x78) 21:43:26 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x132, 0x700000000000000}, 0x0) 21:43:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:43:26 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) memfd_secret(0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@fd={0x0, 0x2, 0x4, 0x1, 0x7f, {r1, r2/1000+60000}, {0x4, 0xd, 0xb0, 0xc3, 0x20, 0x7, "02986f92"}, 0xe60}) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/45, 0x2d, &(0x7f0000000080)=""/126, 0x2, 0x2}}, 0x48) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) (async) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x200, 0x3, 0x4, 0x100000, 0x5a8, {r4, r5/1000+10000}, {0x4, 0x2, 0xff, 0x0, 0x7, 0xff, "cf8375dc"}, 0x80000001, 0x3, {&(0x7f0000000340)=[{0xfffff79f, 0x3f, {0x100}, 0x2}, {0x2, 0xffff, {0x93}, 0x5}]}, 0x3, 0x0, r6}) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) 21:43:26 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60, 0x0, r0, {{0x3, 0x42f2, 0x7fffffff, 0xffffffff80000001, 0x2, 0x10001, 0x2, 0xffff}}}, 0x60) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000004640)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004600)={&(0x7f0000004580)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000004500)={0x10, 0x0, r0}, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000043c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000004480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB='5\a@\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf25010000000000000001410000001800170000000e000000007564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x48804) write$FUSE_ATTR(r5, &(0x7f0000000080)={0x78, 0x0, r0, {0x0, 0x5, 0x0, {0x2, 0x5, 0x6, 0x3ff, 0x0, 0xfffffffffffffff9, 0x8, 0x6eaf, 0x9, 0xa000, 0x8, r7, r1, 0x8000002, 0xfffffffa}}}, 0x78) 21:43:26 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11a, 0x0, 0x700}, 0x0) 21:43:26 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x133, 0x700000000000000}, 0x0) [ 3040.780989][T24210] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3041.301048][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3041.310118][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3041.318587][T24210] usb 3-1: Product: syz [ 3041.323555][T24210] usb 3-1: Manufacturer: syz [ 3041.328173][T24210] usb 3-1: SerialNumber: syz [ 3041.371727][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3041.950992][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3042.374505][ T3666] usb 3-1: USB disconnect, device number 89 21:43:29 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) socket(0x0, 0x300, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:43:29 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60, 0x0, r0, {{0x3, 0x42f2, 0x7fffffff, 0xffffffff80000001, 0x2, 0x10001, 0x2, 0xffff}}}, 0x60) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000004640)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004600)={&(0x7f0000004580)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000004500)={0x10, 0x0, r0}, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000043c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000004480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB='5\a@\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf25010000000000000001410000001800170000000e000000007564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x48804) write$FUSE_ATTR(r5, &(0x7f0000000080)={0x78, 0x0, r0, {0x0, 0x5, 0x0, {0x2, 0x5, 0x6, 0x3ff, 0x0, 0xfffffffffffffff9, 0x8, 0x6eaf, 0x9, 0xa000, 0x8, r7, r1, 0x8000002, 0xfffffffa}}}, 0x78) 21:43:29 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11b, 0x0, 0x700}, 0x0) 21:43:29 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:43:29 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @sdr={0x43353039}}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x248040, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x2, 'client1\x00', 0x6, "0c0f948176b402e9", "18b0cfdebe8fdd7bdf57df5f68f3b69c2fd644309cdd318e1df53b3df5b3d768", 0xf91b, 0x7}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x0, 0x3f, 0x1, 0x0, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r3, 0x8000000) memfd_create(&(0x7f0000000380)='/dev/vcsu\x00', 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0xa78800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)=@multiplanar_fd={0x8, 0x3, 0x4, 0x0, 0x3, {0x77359400}, {0x4, 0x8, 0x92, 0x8f, 0xb0, 0x9, "c2603647"}, 0x0, 0x4, {&(0x7f00000005c0)=[{0x1, 0x8, {}, 0x1}, {0x1, 0xffffffff, {r5}, 0x10001}]}, 0x0, 0x0, r0}) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={r6, r7+10000000}, 0x1, 0x1}, 0x8001) 21:43:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x134, 0x700000000000000}, 0x0) 21:43:29 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11c, 0x0, 0x700}, 0x0) 21:43:29 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x3, 0x52424752, 0x2, @discrete={0x8, 0x881}}) 21:43:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) 21:43:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x135, 0x700000000000000}, 0x0) 21:43:29 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @sdr={0x43353039}}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x248040, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000280)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x2, 'client1\x00', 0x6, "0c0f948176b402e9", "18b0cfdebe8fdd7bdf57df5f68f3b69c2fd644309cdd318e1df53b3df5b3d768", 0xf91b, 0x7}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000340)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x0, 0x3f, 0x1, 0x0, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r3, 0x8000000) (async) memfd_create(&(0x7f0000000380)='/dev/vcsu\x00', 0x5) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0xa78800) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)=@multiplanar_fd={0x8, 0x3, 0x4, 0x0, 0x3, {0x77359400}, {0x4, 0x8, 0x92, 0x8f, 0xb0, 0x9, "c2603647"}, 0x0, 0x4, {&(0x7f00000005c0)=[{0x1, 0x8, {}, 0x1}, {0x1, 0xffffffff, {r5}, 0x10001}]}, 0x0, 0x0, r0}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={r6, r7+10000000}, 0x1, 0x1}, 0x8001) 21:43:29 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x3, 0x52424752, 0x2, @discrete={0x8, 0x881}}) [ 3043.040812][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3043.047805][T24210] ath9k_htc: Failed to initialize the device [ 3043.058170][ T3666] usb 3-1: ath9k_htc: USB layer deinitialized [ 3043.420988][ T3666] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3043.940951][ T3666] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3043.950080][ T3666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3043.962636][ T3666] usb 3-1: Product: syz [ 3043.966799][ T3666] usb 3-1: Manufacturer: syz [ 3043.973757][ T3666] usb 3-1: SerialNumber: syz [ 3044.021893][ T3666] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3044.590961][ T3666] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3044.997604][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3045.006248][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3045.016883][T27825] usb 3-1: USB disconnect, device number 90 21:43:31 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) socket(0x0, 0x300, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:43:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11d, 0x0, 0x700}, 0x0) 21:43:31 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @sdr={0x43353039}}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x248040, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x2, 'client1\x00', 0x6, "0c0f948176b402e9", "18b0cfdebe8fdd7bdf57df5f68f3b69c2fd644309cdd318e1df53b3df5b3d768", 0xf91b, 0x7}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x0, 0x3f, 0x1, 0x0, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r3, 0x8000000) memfd_create(&(0x7f0000000380)='/dev/vcsu\x00', 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0xa78800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)=@multiplanar_fd={0x8, 0x3, 0x4, 0x0, 0x3, {0x77359400}, {0x4, 0x8, 0x92, 0x8f, 0xb0, 0x9, "c2603647"}, 0x0, 0x4, {&(0x7f00000005c0)=[{0x1, 0x8, {}, 0x1}, {0x1, 0xffffffff, {r5}, 0x10001}]}, 0x0, 0x0, r0}) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={r6, r7+10000000}, 0x1, 0x1}, 0x8001) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @sdr={0x43353039}}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x248040, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000280)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x2, 'client1\x00', 0x6, "0c0f948176b402e9", "18b0cfdebe8fdd7bdf57df5f68f3b69c2fd644309cdd318e1df53b3df5b3d768", 0xf91b, 0x7}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) (async) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000340)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x0, 0x3f, 0x1}) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r3, 0x8000000) (async) memfd_create(&(0x7f0000000380)='/dev/vcsu\x00', 0x5) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0xa78800) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)=@multiplanar_fd={0x8, 0x3, 0x4, 0x0, 0x3, {0x77359400}, {0x4, 0x8, 0x92, 0x8f, 0xb0, 0x9, "c2603647"}, 0x0, 0x4, {&(0x7f00000005c0)=[{0x1, 0x8, {}, 0x1}, {0x1, 0xffffffff, {r5}, 0x10001}]}, 0x0, 0x0, r0}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) clock_gettime(0x0, &(0x7f00000004c0)) (async) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={r6, r7+10000000}, 0x1, 0x1}, 0x8001) (async) 21:43:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x136, 0x700000000000000}, 0x0) 21:43:31 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x3, 0x52424752, 0x2, @discrete={0x8, 0x881}}) 21:43:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) (async) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) (async) 21:43:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x137, 0x700000000000000}, 0x0) 21:43:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11e, 0x0, 0x700}, 0x0) 21:43:31 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:43:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) 21:43:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x1, @win={{0x5, 0x3f, 0x7, 0x40}, 0x0, 0x9, &(0x7f0000000040)={{0xfffff001, 0xbc, 0x1000, 0x3c}}, 0x8, &(0x7f0000000080)="e877da8296ad5ec8a23d3cd3aea34fb72f7744c773b91c89a6", 0x3f}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000003c0)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x1000, 0x5, {}, {0x1, 0x1, 0x5, 0x3f, 0x0, 0x6, "be4602f8"}, 0x7fffffff, 0x1, {&(0x7f0000000340)=[{0x8, 0x5, {0x6}, 0xdff}, {0x1, 0x10000, {0x3ff}, 0x4}]}, 0x5, 0x0, r3}) 21:43:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11f, 0x0, 0x700}, 0x0) [ 3045.686028][ T3666] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3045.706448][ T3666] ath9k_htc: Failed to initialize the device [ 3045.724984][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3046.090957][T27825] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3046.710898][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3046.720027][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3046.728299][T27825] usb 3-1: Product: syz [ 3046.732698][T27825] usb 3-1: Manufacturer: syz [ 3046.737356][T27825] usb 3-1: SerialNumber: syz [ 3046.795675][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3047.411109][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3047.813600][T26888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3047.824664][T26888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.834774][ T3666] usb 3-1: USB disconnect, device number 91 21:43:34 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) (async) socket(0x0, 0x300, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:43:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:43:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_fd={0x40, 0x3, 0x4, 0x1, 0x7f, {0x77359400}, {0x3, 0x2, 0x4, 0x81, 0x6, 0x7c, "85c3ca2d"}, 0xd, 0x4, {&(0x7f0000000040)=[{0xe97, 0xb, {}, 0x4}, {0x4, 0x800, {r1}, 0x72}]}, 0x3ff, 0x0, r2}) 21:43:34 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x138, 0x700000000000000}, 0x0) 21:43:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x1, @win={{0x5, 0x3f, 0x7, 0x40}, 0x0, 0x9, &(0x7f0000000040)={{0xfffff001, 0xbc, 0x1000, 0x3c}}, 0x8, &(0x7f0000000080)="e877da8296ad5ec8a23d3cd3aea34fb72f7744c773b91c89a6", 0x3f}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000003c0)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x1000, 0x5, {}, {0x1, 0x1, 0x5, 0x3f, 0x0, 0x6, "be4602f8"}, 0x7fffffff, 0x1, {&(0x7f0000000340)=[{0x8, 0x5, {0x6}, 0xdff}, {0x1, 0x10000, {0x3ff}, 0x4}]}, 0x5, 0x0, r3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x1, @win={{0x5, 0x3f, 0x7, 0x40}, 0x0, 0x9, &(0x7f0000000040)={{0xfffff001, 0xbc, 0x1000, 0x3c}}, 0x8, &(0x7f0000000080)="e877da8296ad5ec8a23d3cd3aea34fb72f7744c773b91c89a6", 0x3f}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000003c0)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x1000, 0x5, {}, {0x1, 0x1, 0x5, 0x3f, 0x0, 0x6, "be4602f8"}, 0x7fffffff, 0x1, {&(0x7f0000000340)=[{0x8, 0x5, {0x6}, 0xdff}, {0x1, 0x10000, {0x3ff}, 0x4}]}, 0x5, 0x0, r3}) (async) 21:43:34 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x120, 0x0, 0x700}, 0x0) 21:43:34 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x139, 0x700000000000000}, 0x0) 21:43:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x1, @win={{0x5, 0x3f, 0x7, 0x40}, 0x0, 0x9, &(0x7f0000000040)={{0xfffff001, 0xbc, 0x1000, 0x3c}}, 0x8, &(0x7f0000000080)="e877da8296ad5ec8a23d3cd3aea34fb72f7744c773b91c89a6", 0x3f}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000003c0)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x1000, 0x5, {}, {0x1, 0x1, 0x5, 0x3f, 0x0, 0x6, "be4602f8"}, 0x7fffffff, 0x1, {&(0x7f0000000340)=[{0x8, 0x5, {0x6}, 0xdff}, {0x1, 0x10000, {0x3ff}, 0x4}]}, 0x5, 0x0, r3}) 21:43:34 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x121, 0x0, 0x700}, 0x0) 21:43:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_fd={0x40, 0x3, 0x4, 0x1, 0x7f, {0x77359400}, {0x3, 0x2, 0x4, 0x81, 0x6, 0x7c, "85c3ca2d"}, 0xd, 0x4, {&(0x7f0000000040)=[{0xe97, 0xb, {}, 0x4}, {0x4, 0x800, {r1}, 0x72}]}, 0x3ff, 0x0, r2}) 21:43:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:43:34 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13a, 0x700000000000000}, 0x0) [ 3048.481788][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3048.489462][T27825] ath9k_htc: Failed to initialize the device [ 3048.519373][ T3666] usb 3-1: ath9k_htc: USB layer deinitialized [ 3048.900857][ T3666] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3049.421131][ T3666] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3049.430286][ T3666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3049.438629][ T3666] usb 3-1: Product: syz [ 3049.443352][ T3666] usb 3-1: Manufacturer: syz [ 3049.448051][ T3666] usb 3-1: SerialNumber: syz [ 3049.502856][ T3666] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3050.070896][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3050.272627][T26922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3050.283757][T26922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3050.473929][ T3667] usb 3-1: USB disconnect, device number 92 21:43:37 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xdc, &(0x7f0000000040)=@generic={0x8, 0x2, 0xd4, "803108f8", "4313f02802342fc393144c97295597212ac7013fc5dc94a5728b2390032d98be0dc662925b1a060540baaa1b2a82f57d4b3d2d3ab0769c3c62481c3bbdb6ecaecb031e611b577bc0c5c31e523c5a7a9d601183e1f5b1d2a13523c21d6df63bd66eb12b6cf10d1f329a014beddad1df2c2e72f08abe8909a0ed91fab8260b8bd6ac7550ecd76aac72d373f21c093d65ec7c1fd5db85c39b56fd17419f717ec9ea478b47adf572051122adb481fdbe32842af2f88ca3d28b7fb8f94c0f450b5643f72338c21cc4ff56dd6bd35fc37dfe9301ae0581"}) 21:43:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x9, 0x1, 0x4, 0x70000, 0x2, {0x77359400}, {0x5, 0xc, 0x7f, 0x18, 0x2f, 0x6c, "9bbfea77"}, 0x4aa5d1e6, 0x4, {}, 0x7f}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x0, 0x1, 0xfffffffd}) 21:43:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_fd={0x40, 0x3, 0x4, 0x1, 0x7f, {0x77359400}, {0x3, 0x2, 0x4, 0x81, 0x6, 0x7c, "85c3ca2d"}, 0xd, 0x4, {&(0x7f0000000040)=[{0xe97, 0xb, {}, 0x4}, {0x4, 0x800, {r1}, 0x72}]}, 0x3ff, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_fd={0x40, 0x3, 0x4, 0x1, 0x7f, {0x77359400}, {0x3, 0x2, 0x4, 0x81, 0x6, 0x7c, "85c3ca2d"}, 0xd, 0x4, {&(0x7f0000000040)=[{0xe97, 0xb, {}, 0x4}, {0x4, 0x800, {r1}, 0x72}]}, 0x3ff, 0x0, r2}) (async) 21:43:37 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x122, 0x0, 0x700}, 0x0) 21:43:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1, 0x6, 0x758, 0x80800}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:43:37 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13b, 0x700000000000000}, 0x0) 21:43:37 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13c, 0x700000000000000}, 0x0) 21:43:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x9, 0x1, 0x4, 0x70000, 0x2, {0x77359400}, {0x5, 0xc, 0x7f, 0x18, 0x2f, 0x6c, "9bbfea77"}, 0x4aa5d1e6, 0x4, {}, 0x7f}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async, rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x0, 0x1, 0xfffffffd}) (rerun: 32) 21:43:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1, 0x6, 0x758, 0x80800}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1, 0x6, 0x758, 0x80800}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) 21:43:37 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x123, 0x0, 0x700}, 0x0) 21:43:37 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0x3ff, 0x1, 0x84000}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$rds(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000680)=""/123, 0x7b}], 0x7, 0x0, 0x0, 0x20040011}, 0x44) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000840)) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r1}, 0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x40086602, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000100)) 21:43:37 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0x3ff, 0x1, 0x84000}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$rds(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000680)=""/123, 0x7b}], 0x7, 0x0, 0x0, 0x20040011}, 0x44) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000840)) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r1}, 0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x40086602, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000100)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0x3ff, 0x1, 0x84000}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) sendmsg$rds(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000680)=""/123, 0x7b}], 0x7, 0x0, 0x0, 0x20040011}, 0x44) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000840)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r1}, 0x8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x400000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x40086602, &(0x7f0000000180)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000100)) (async) [ 3051.120948][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3051.135588][T10727] ath9k_htc: Failed to initialize the device [ 3051.157089][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3051.521563][ T3667] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3052.050878][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3052.060061][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.068188][ T3667] usb 3-1: Product: syz [ 3052.072980][ T3667] usb 3-1: Manufacturer: syz [ 3052.077643][ T3667] usb 3-1: SerialNumber: syz [ 3052.123263][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3052.690872][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3053.116555][T27825] usb 3-1: USB disconnect, device number 93 21:43:39 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xdc, &(0x7f0000000040)=@generic={0x8, 0x2, 0xd4, "803108f8", "4313f02802342fc393144c97295597212ac7013fc5dc94a5728b2390032d98be0dc662925b1a060540baaa1b2a82f57d4b3d2d3ab0769c3c62481c3bbdb6ecaecb031e611b577bc0c5c31e523c5a7a9d601183e1f5b1d2a13523c21d6df63bd66eb12b6cf10d1f329a014beddad1df2c2e72f08abe8909a0ed91fab8260b8bd6ac7550ecd76aac72d373f21c093d65ec7c1fd5db85c39b56fd17419f717ec9ea478b47adf572051122adb481fdbe32842af2f88ca3d28b7fb8f94c0f450b5643f72338c21cc4ff56dd6bd35fc37dfe9301ae0581"}) 21:43:39 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13d, 0x700000000000000}, 0x0) 21:43:39 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x124, 0x0, 0x700}, 0x0) 21:43:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1, 0x6, 0x758, 0x80800}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:43:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x9, 0x1, 0x4, 0x70000, 0x2, {0x77359400}, {0x5, 0xc, 0x7f, 0x18, 0x2f, 0x6c, "9bbfea77"}, 0x4aa5d1e6, 0x4, {}, 0x7f}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x0, 0x1, 0xfffffffd}) 21:43:39 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0x3ff, 0x1, 0x84000}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$rds(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000680)=""/123, 0x7b}], 0x7, 0x0, 0x0, 0x20040011}, 0x44) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000840)) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r1}, 0x8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x40086602, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000100)) 21:43:39 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13e, 0x700000000000000}, 0x0) 21:43:39 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) 21:43:39 executing program 1: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:43:39 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x125, 0x0, 0x700}, 0x0) 21:43:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000007c0)=@multiplanar_mmap={0xffff, 0x2, 0x4, 0x4000, 0x3, {0x77359400}, {0x4, 0x8, 0x80, 0x0, 0xff, 0xfc, "1c67cbfb"}, 0x6, 0x1, {&(0x7f0000000600)=[{0x9368, 0x0, {0x2ae}, 0x6fa96198}, {0x0, 0x3, {}, 0x2}]}, 0xffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@userptr={0x5339, 0x2, 0x4, 0xe000, 0x2000000, {0x77359400}, {0x3, 0x2, 0x40, 0x3, 0x20, 0xc0, "388e6158"}, 0x4, 0x2, {}, 0x96d, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_mmap={0x9a, 0x3, 0x4, 0x800, 0x8001, {0x0, 0x2710}, {0x5, 0x0, 0x96, 0x5, 0x0, 0x1, "c85095b8"}, 0x5c, 0x1, {&(0x7f00000000c0)=[{0xffff, 0x101, {0x20}, 0x36}, {0x6, 0x1, {0xffffffff}, 0xfffffffa}]}, 0x7f, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x1ff, 0x1, 0x4, 0x20, 0x6, {0x0, 0xea60}, {0x3, 0xc, 0x8, 0x5, 0x94, 0x3, "0377e660"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x4, 0x4, {&(0x7f00000001c0)}}, {0x8dc, 0xc54, {&(0x7f0000000200)}, 0x200}]}, 0x7, 0x0, r3}) r4 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000500)={0x253, 0x3631564e, 0x2, @discrete={0x1c0000, 0x1f}}) clock_gettime(0x0, &(0x7f0000000440)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000680)=@userptr={0x9, 0x0, 0x4, 0x0, 0xdea, {r6, r7/1000+60000}, {0x1, 0xc, 0x1, 0x3f, 0x0, 0x0, "b73b8076"}, 0x4, 0x2, {&(0x7f00000005c0)}, 0x8, 0x0, r8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000480)=@fd={0x7, 0x0, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x4, 0x2, 0x1f, 0xc, 0xb1, 0x7}, 0x9, 0x4, {}, 0x9, 0x0, r5}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/schedstat\x00', 0x0, 0x0) accept4$alg(r9, 0x0, 0x0, 0x1000) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x440401, 0x0) 21:43:39 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) (async) timer_create(0x5, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) (async) timer_getoverrun(r0) (async) [ 3053.761045][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3053.776676][ T3667] ath9k_htc: Failed to initialize the device [ 3053.798026][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3054.150871][T27825] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3054.751015][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3054.760085][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3054.768347][T27825] usb 3-1: Product: syz [ 3054.772716][T27825] usb 3-1: Manufacturer: syz [ 3054.777328][T27825] usb 3-1: SerialNumber: syz [ 3054.842474][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3055.441042][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3055.865654][ T3667] usb 3-1: USB disconnect, device number 94 21:43:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13f, 0x700000000000000}, 0x0) 21:43:42 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) (async) timer_create(0x5, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) (async) timer_getoverrun(r0) (async) 21:43:42 executing program 1: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:43:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x126, 0x0, 0x700}, 0x0) 21:43:42 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xdc, &(0x7f0000000040)=@generic={0x8, 0x2, 0xd4, "803108f8", "4313f02802342fc393144c97295597212ac7013fc5dc94a5728b2390032d98be0dc662925b1a060540baaa1b2a82f57d4b3d2d3ab0769c3c62481c3bbdb6ecaecb031e611b577bc0c5c31e523c5a7a9d601183e1f5b1d2a13523c21d6df63bd66eb12b6cf10d1f329a014beddad1df2c2e72f08abe8909a0ed91fab8260b8bd6ac7550ecd76aac72d373f21c093d65ec7c1fd5db85c39b56fd17419f717ec9ea478b47adf572051122adb481fdbe32842af2f88ca3d28b7fb8f94c0f450b5643f72338c21cc4ff56dd6bd35fc37dfe9301ae0581"}) 21:43:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000007c0)=@multiplanar_mmap={0xffff, 0x2, 0x4, 0x4000, 0x3, {0x77359400}, {0x4, 0x8, 0x80, 0x0, 0xff, 0xfc, "1c67cbfb"}, 0x6, 0x1, {&(0x7f0000000600)=[{0x9368, 0x0, {0x2ae}, 0x6fa96198}, {0x0, 0x3, {}, 0x2}]}, 0xffff}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@userptr={0x5339, 0x2, 0x4, 0xe000, 0x2000000, {0x77359400}, {0x3, 0x2, 0x40, 0x3, 0x20, 0xc0, "388e6158"}, 0x4, 0x2, {}, 0x96d, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_mmap={0x9a, 0x3, 0x4, 0x800, 0x8001, {0x0, 0x2710}, {0x5, 0x0, 0x96, 0x5, 0x0, 0x1, "c85095b8"}, 0x5c, 0x1, {&(0x7f00000000c0)=[{0xffff, 0x101, {0x20}, 0x36}, {0x6, 0x1, {0xffffffff}, 0xfffffffa}]}, 0x7f, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x1ff, 0x1, 0x4, 0x20, 0x6, {0x0, 0xea60}, {0x3, 0xc, 0x8, 0x5, 0x94, 0x3, "0377e660"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x4, 0x4, {&(0x7f00000001c0)}}, {0x8dc, 0xc54, {&(0x7f0000000200)}, 0x200}]}, 0x7, 0x0, r3}) r4 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000500)={0x253, 0x3631564e, 0x2, @discrete={0x1c0000, 0x1f}}) clock_gettime(0x0, &(0x7f0000000440)) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) (async) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000680)=@userptr={0x9, 0x0, 0x4, 0x0, 0xdea, {r6, r7/1000+60000}, {0x1, 0xc, 0x1, 0x3f, 0x0, 0x0, "b73b8076"}, 0x4, 0x2, {&(0x7f00000005c0)}, 0x8, 0x0, r8}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000480)=@fd={0x7, 0x0, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x4, 0x2, 0x1f, 0xc, 0xb1, 0x7}, 0x9, 0x4, {}, 0x9, 0x0, r5}) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/schedstat\x00', 0x0, 0x0) accept4$alg(r9, 0x0, 0x0, 0x1000) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x440401, 0x0) 21:43:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 21:43:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x140, 0x700000000000000}, 0x0) 21:43:42 executing program 1: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) 21:43:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000007c0)=@multiplanar_mmap={0xffff, 0x2, 0x4, 0x4000, 0x3, {0x77359400}, {0x4, 0x8, 0x80, 0x0, 0xff, 0xfc, "1c67cbfb"}, 0x6, 0x1, {&(0x7f0000000600)=[{0x9368, 0x0, {0x2ae}, 0x6fa96198}, {0x0, 0x3, {}, 0x2}]}, 0xffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@userptr={0x5339, 0x2, 0x4, 0xe000, 0x2000000, {0x77359400}, {0x3, 0x2, 0x40, 0x3, 0x20, 0xc0, "388e6158"}, 0x4, 0x2, {}, 0x96d, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_mmap={0x9a, 0x3, 0x4, 0x800, 0x8001, {0x0, 0x2710}, {0x5, 0x0, 0x96, 0x5, 0x0, 0x1, "c85095b8"}, 0x5c, 0x1, {&(0x7f00000000c0)=[{0xffff, 0x101, {0x20}, 0x36}, {0x6, 0x1, {0xffffffff}, 0xfffffffa}]}, 0x7f, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x1ff, 0x1, 0x4, 0x20, 0x6, {0x0, 0xea60}, {0x3, 0xc, 0x8, 0x5, 0x94, 0x3, "0377e660"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x4, 0x4, {&(0x7f00000001c0)}}, {0x8dc, 0xc54, {&(0x7f0000000200)}, 0x200}]}, 0x7, 0x0, r3}) r4 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000500)={0x253, 0x3631564e, 0x2, @discrete={0x1c0000, 0x1f}}) clock_gettime(0x0, &(0x7f0000000440)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000680)=@userptr={0x9, 0x0, 0x4, 0x0, 0xdea, {r6, r7/1000+60000}, {0x1, 0xc, 0x1, 0x3f, 0x0, 0x0, "b73b8076"}, 0x4, 0x2, {&(0x7f00000005c0)}, 0x8, 0x0, r8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000480)=@fd={0x7, 0x0, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x4, 0x2, 0x1f, 0xc, 0xb1, 0x7}, 0x9, 0x4, {}, 0x9, 0x0, r5}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/schedstat\x00', 0x0, 0x0) accept4$alg(r9, 0x0, 0x0, 0x1000) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x440401, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000007c0)=@multiplanar_mmap={0xffff, 0x2, 0x4, 0x4000, 0x3, {0x77359400}, {0x4, 0x8, 0x80, 0x0, 0xff, 0xfc, "1c67cbfb"}, 0x6, 0x1, {&(0x7f0000000600)=[{0x9368, 0x0, {0x2ae}, 0x6fa96198}, {0x0, 0x3, {}, 0x2}]}, 0xffff}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@userptr={0x5339, 0x2, 0x4, 0xe000, 0x2000000, {0x77359400}, {0x3, 0x2, 0x40, 0x3, 0x20, 0xc0, "388e6158"}, 0x4, 0x2, {}, 0x96d}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_mmap={0x9a, 0x3, 0x4, 0x800, 0x8001, {0x0, 0x2710}, {0x5, 0x0, 0x96, 0x5, 0x0, 0x1, "c85095b8"}, 0x5c, 0x1, {&(0x7f00000000c0)=[{0xffff, 0x101, {0x20}, 0x36}, {0x6, 0x1, {0xffffffff}, 0xfffffffa}]}, 0x7f, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x1ff, 0x1, 0x4, 0x20, 0x6, {0x0, 0xea60}, {0x3, 0xc, 0x8, 0x5, 0x94, 0x3, "0377e660"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x4, 0x4, {&(0x7f00000001c0)}}, {0x8dc, 0xc54, {&(0x7f0000000200)}, 0x200}]}, 0x7, 0x0, r3}) (async) memfd_secret(0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000500)={0x253, 0x3631564e, 0x2, @discrete={0x1c0000, 0x1f}}) (async) clock_gettime(0x0, &(0x7f0000000440)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000580)) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000680)=@userptr={0x9, 0x0, 0x4, 0x0, 0xdea, {r6, r7/1000+60000}, {0x1, 0xc, 0x1, 0x3f, 0x0, 0x0, "b73b8076"}, 0x4, 0x2, {&(0x7f00000005c0)}, 0x8, 0x0, r8}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000480)=@fd={0x7, 0x0, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x4, 0x2, 0x1f, 0xc, 0xb1, 0x7}, 0x9, 0x4, {}, 0x9, 0x0, r5}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/schedstat\x00', 0x0, 0x0) (async) accept4$alg(r9, 0x0, 0x0, 0x1000) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x440401, 0x0) (async) 21:43:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x127, 0x0, 0x700}, 0x0) 21:43:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x141, 0x700000000000000}, 0x0) 21:43:42 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0xe83, 0x0, 0x4, 0x100000, 0x7, {}, {0x1, 0x3, 0xad, 0x80, 0x1, 0xfd, "516ecc4b"}, 0x5, 0x4, {&(0x7f0000000040)=[{0xffff, 0x972e, {r1}}, {0x4, 0x7, {r0}, 0xffffffe1}]}, 0xa}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x81}, 'port0\x00', 0x0, 0x0, 0xffffffff, 0x8, 0x200000, 0x8000, 0x4, 0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x2, 0x2, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x6b, 0x3, 0xf8, 0x3, "5da3dcf3"}, 0x1f, 0x1, {}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) [ 3056.491057][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3056.512469][ T22] ath9k_htc: Failed to initialize the device [ 3056.541130][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3056.910930][ T3667] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 3057.440971][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3057.450065][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3057.458256][ T3667] usb 3-1: Product: syz [ 3057.462518][ T3667] usb 3-1: Manufacturer: syz [ 3057.467120][ T3667] usb 3-1: SerialNumber: syz [ 3057.521807][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3058.131011][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3058.554796][T27978] usb 3-1: USB disconnect, device number 95 21:43:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x68, r1, 0x10, 0x70bd2d, 0x25dfdc01, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x8010) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xf1, &(0x7f00000002c0)=@generic={0x1, 0x2, 0xe9, "b75d8ffe", "81e661e121ff54b1878d6f62add2a124233a09ccc1c558e8886272c60b013838e35c438e528c23716db02cc8ea9e1f34eee83aec4090b74b8ce185f017dab38e2f1318351277a2e23a655c951f7242f0d38eb4f5b134f6551488f8e0c00b73a95e13911de913e5fb414ae59ad7707f7f156a4f5ce3d2dbd911970003c539d67034cb1c64f3b6d63edbdadb03bb2ee391b1dfd0dde0608231de43edc2568ad3037e5b9152a1cedf99f787c1e2f439006c6ccd94de5fda99305707057f0bad5d59ddac109eef146d3dec66dd8273866e8ffa9f1758cf05aac7eda8fe1defa059f797c0e1e17d8898eed5"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "4628f74a", {0x3, 0x1, 0x0, 0x1, 0x6, 0x0, 0x20}}) 21:43:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 21:43:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x1ff, 0x7, 0x43d, 0x33363248, [0x9, 0x1], [0x80000001, 0x10001], 0x108}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) 21:43:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x128, 0x0, 0x700}, 0x0) 21:43:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async, rerun: 32) r1 = memfd_secret(0x80000) (rerun: 32) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0xe83, 0x0, 0x4, 0x100000, 0x7, {}, {0x1, 0x3, 0xad, 0x80, 0x1, 0xfd, "516ecc4b"}, 0x5, 0x4, {&(0x7f0000000040)=[{0xffff, 0x972e, {r1}}, {0x4, 0x7, {r0}, 0xffffffe1}]}, 0xa}) (async, rerun: 64) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) r3 = memfd_secret(0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x81}, 'port0\x00', 0x0, 0x0, 0xffffffff, 0x8, 0x200000, 0x8000, 0x4, 0x0, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x2, 0x2, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x6b, 0x3, 0xf8, 0x3, "5da3dcf3"}, 0x1f, 0x1, {}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) 21:43:45 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x142, 0x700000000000000}, 0x0) 21:43:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x1ff, 0x7, 0x43d, 0x33363248, [0x9, 0x1], [0x80000001, 0x10001], 0x108}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x1ff, 0x7, 0x43d, 0x33363248, [0x9, 0x1], [0x80000001, 0x10001], 0x108}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) (async) 21:43:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x129, 0x0, 0x700}, 0x0) 21:43:45 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x143, 0x700000000000000}, 0x0) 21:43:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) (async) 21:43:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0x7, 0x9, 0x30314442, 0x7, 0x7, 0x8, 0x5, 0x7, 0x1, 0x6, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xf0008000}) 21:43:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0xe83, 0x0, 0x4, 0x100000, 0x7, {}, {0x1, 0x3, 0xad, 0x80, 0x1, 0xfd, "516ecc4b"}, 0x5, 0x4, {&(0x7f0000000040)=[{0xffff, 0x972e, {r1}}, {0x4, 0x7, {r0}, 0xffffffe1}]}, 0xa}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x81}, 'port0\x00', 0x0, 0x0, 0xffffffff, 0x8, 0x200000, 0x8000, 0x4, 0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x2, 0x2, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x6b, 0x3, 0xf8, 0x3, "5da3dcf3"}, 0x1f, 0x1, {}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) memfd_secret(0x80000) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0xe83, 0x0, 0x4, 0x100000, 0x7, {}, {0x1, 0x3, 0xad, 0x80, 0x1, 0xfd, "516ecc4b"}, 0x5, 0x4, {&(0x7f0000000040)=[{0xffff, 0x972e, {r1}}, {0x4, 0x7, {r0}, 0xffffffe1}]}, 0xa}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) memfd_secret(0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x81}, 'port0\x00', 0x0, 0x0, 0xffffffff, 0x8, 0x200000, 0x8000, 0x4, 0x0, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x2, 0x2, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x6b, 0x3, 0xf8, 0x3, "5da3dcf3"}, 0x1f, 0x1, {}, 0x5, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) (async) [ 3059.201216][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3059.215784][ T3667] ath9k_htc: Failed to initialize the device [ 3059.230172][T27978] usb 3-1: ath9k_htc: USB layer deinitialized [ 3059.610852][T27978] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 3060.200921][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3060.210055][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3060.218316][T27978] usb 3-1: Product: syz [ 3060.222660][T27978] usb 3-1: Manufacturer: syz [ 3060.227421][T27978] usb 3-1: SerialNumber: syz [ 3060.286143][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3060.890939][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3061.514637][ T22] usb 3-1: USB disconnect, device number 96 [ 3061.920840][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3061.927802][T27978] ath9k_htc: Failed to initialize the device [ 3061.934959][ T22] usb 3-1: ath9k_htc: USB layer deinitialized 21:43:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x68, r1, 0x10, 0x70bd2d, 0x25dfdc01, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x8010) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xf1, &(0x7f00000002c0)=@generic={0x1, 0x2, 0xe9, "b75d8ffe", "81e661e121ff54b1878d6f62add2a124233a09ccc1c558e8886272c60b013838e35c438e528c23716db02cc8ea9e1f34eee83aec4090b74b8ce185f017dab38e2f1318351277a2e23a655c951f7242f0d38eb4f5b134f6551488f8e0c00b73a95e13911de913e5fb414ae59ad7707f7f156a4f5ce3d2dbd911970003c539d67034cb1c64f3b6d63edbdadb03bb2ee391b1dfd0dde0608231de43edc2568ad3037e5b9152a1cedf99f787c1e2f439006c6ccd94de5fda99305707057f0bad5d59ddac109eef146d3dec66dd8273866e8ffa9f1758cf05aac7eda8fe1defa059f797c0e1e17d8898eed5"}) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "4628f74a", {0x3, 0x1, 0x0, 0x1, 0x6, 0x0, 0x20}}) 21:43:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12a, 0x0, 0x700}, 0x0) 21:43:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x1ff, 0x7, 0x43d, 0x33363248, [0x9, 0x1], [0x80000001, 0x10001], 0x108}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x1ff, 0x7, 0x43d, 0x33363248, [0x9, 0x1], [0x80000001, 0x10001], 0x108}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000000)) (async) 21:43:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x144, 0x700000000000000}, 0x0) 21:43:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0x7, 0x9, 0x30314442, 0x7, 0x7, 0x8, 0x5, 0x7, 0x1, 0x6, 0x0, 0x5}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xf0008000}) 21:43:48 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @pix_mp={0x1, 0x7, 0x32314d54, 0x7, 0x3, [{0x8000, 0x44}, {0x20, 0x10000}, {0x4, 0xaae}, {0x7, 0x5}, {0x7790, 0x4}, {0x6, 0x4}, {0x100, 0x9}, {0x7, 0x5}], 0x2, 0x2, 0x6, 0x0, 0x2}}) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x8000, 0x1, 0xfff, 0x8}, 0xc, 0xce, &(0x7f0000000200)={{0x2, 0xff, 0x10000, 0x6}}, 0x9, &(0x7f0000000240)='g', 0x80}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x1, 0x0, 0x3, 0x9edbdcb9, [0x200, 0x34], [0x6, 0x2], 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) r2 = socket(0x23, 0x2, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000004b80)={0x18, 0x0, r4}, 0x18) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0x0, r4, {{0x8, 0x10000, 0x6, 0x9, 0x200, 0x8bc0, 0x9, 0xffff}}}, 0x60) 21:43:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x145, 0x700000000000000}, 0x0) 21:43:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:43:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12b, 0x0, 0x700}, 0x0) 21:43:48 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @pix_mp={0x1, 0x7, 0x32314d54, 0x7, 0x3, [{0x8000, 0x44}, {0x20, 0x10000}, {0x4, 0xaae}, {0x7, 0x5}, {0x7790, 0x4}, {0x6, 0x4}, {0x100, 0x9}, {0x7, 0x5}], 0x2, 0x2, 0x6, 0x0, 0x2}}) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) (async, rerun: 32) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x8000, 0x1, 0xfff, 0x8}, 0xc, 0xce, &(0x7f0000000200)={{0x2, 0xff, 0x10000, 0x6}}, 0x9, &(0x7f0000000240)='g', 0x80}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x1, 0x0, 0x3, 0x9edbdcb9, [0x200, 0x34], [0x6, 0x2], 0x1}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) (async) r2 = socket(0x23, 0x2, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000004b80)={0x18, 0x0, r4}, 0x18) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0x0, r4, {{0x8, 0x10000, 0x6, 0x9, 0x200, 0x8bc0, 0x9, 0xffff}}}, 0x60) 21:43:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x146, 0x700000000000000}, 0x0) 21:43:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0x7, 0x9, 0x30314442, 0x7, 0x7, 0x8, 0x5, 0x7, 0x1, 0x6, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xf0008000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0x7, 0x9, 0x30314442, 0x7, 0x7, 0x8, 0x5, 0x7, 0x1, 0x6, 0x0, 0x5}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xf0008000}) (async) [ 3062.450832][ T22] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 3062.991139][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3063.000216][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3063.008689][ T22] usb 3-1: Product: syz [ 3063.013180][ T22] usb 3-1: Manufacturer: syz [ 3063.017798][ T22] usb 3-1: SerialNumber: syz [ 3063.061485][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3063.681138][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3064.096970][T10727] usb 3-1: USB disconnect, device number 97 21:43:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x68, r1, 0x10, 0x70bd2d, 0x25dfdc01, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x8010) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xf1, &(0x7f00000002c0)=@generic={0x1, 0x2, 0xe9, "b75d8ffe", "81e661e121ff54b1878d6f62add2a124233a09ccc1c558e8886272c60b013838e35c438e528c23716db02cc8ea9e1f34eee83aec4090b74b8ce185f017dab38e2f1318351277a2e23a655c951f7242f0d38eb4f5b134f6551488f8e0c00b73a95e13911de913e5fb414ae59ad7707f7f156a4f5ce3d2dbd911970003c539d67034cb1c64f3b6d63edbdadb03bb2ee391b1dfd0dde0608231de43edc2568ad3037e5b9152a1cedf99f787c1e2f439006c6ccd94de5fda99305707057f0bad5d59ddac109eef146d3dec66dd8273866e8ffa9f1758cf05aac7eda8fe1defa059f797c0e1e17d8898eed5"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "4628f74a", {0x3, 0x1, 0x0, 0x1, 0x6, 0x0, 0x20}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x68, r1, 0x10, 0x70bd2d, 0x25dfdc01, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x8010) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xf1, &(0x7f00000002c0)=@generic={0x1, 0x2, 0xe9, "b75d8ffe", "81e661e121ff54b1878d6f62add2a124233a09ccc1c558e8886272c60b013838e35c438e528c23716db02cc8ea9e1f34eee83aec4090b74b8ce185f017dab38e2f1318351277a2e23a655c951f7242f0d38eb4f5b134f6551488f8e0c00b73a95e13911de913e5fb414ae59ad7707f7f156a4f5ce3d2dbd911970003c539d67034cb1c64f3b6d63edbdadb03bb2ee391b1dfd0dde0608231de43edc2568ad3037e5b9152a1cedf99f787c1e2f439006c6ccd94de5fda99305707057f0bad5d59ddac109eef146d3dec66dd8273866e8ffa9f1758cf05aac7eda8fe1defa059f797c0e1e17d8898eed5"}) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "4628f74a", {0x3, 0x1, 0x0, 0x1, 0x6, 0x0, 0x20}}) (async) 21:43:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) 21:43:50 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @pix_mp={0x1, 0x7, 0x32314d54, 0x7, 0x3, [{0x8000, 0x44}, {0x20, 0x10000}, {0x4, 0xaae}, {0x7, 0x5}, {0x7790, 0x4}, {0x6, 0x4}, {0x100, 0x9}, {0x7, 0x5}], 0x2, 0x2, 0x6, 0x0, 0x2}}) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x8000, 0x1, 0xfff, 0x8}, 0xc, 0xce, &(0x7f0000000200)={{0x2, 0xff, 0x10000, 0x6}}, 0x9, &(0x7f0000000240)='g', 0x80}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x1, 0x0, 0x3, 0x9edbdcb9, [0x200, 0x34], [0x6, 0x2], 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) r2 = socket(0x23, 0x2, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000004b80)={0x18, 0x0, r4}, 0x18) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0x0, r4, {{0x8, 0x10000, 0x6, 0x9, 0x200, 0x8bc0, 0x9, 0xffff}}}, 0x60) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @pix_mp={0x1, 0x7, 0x32314d54, 0x7, 0x3, [{0x8000, 0x44}, {0x20, 0x10000}, {0x4, 0xaae}, {0x7, 0x5}, {0x7790, 0x4}, {0x6, 0x4}, {0x100, 0x9}, {0x7, 0x5}], 0x2, 0x2, 0x6, 0x0, 0x2}}) (async) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x8000, 0x1, 0xfff, 0x8}, 0xc, 0xce, &(0x7f0000000200)={{0x2, 0xff, 0x10000, 0x6}}, 0x9, &(0x7f0000000240)='g', 0x80}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x1, 0x0, 0x3, 0x9edbdcb9, [0x200, 0x34], [0x6, 0x2], 0x1}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000002c0)) (async) socket(0x23, 0x2, 0x8) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) (async) write$FUSE_GETXATTR(r5, &(0x7f0000004b80)={0x18, 0x0, r4}, 0x18) (async) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0x0, r4, {{0x8, 0x10000, 0x6, 0x9, 0x200, 0x8bc0, 0x9, 0xffff}}}, 0x60) (async) 21:43:50 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12c, 0x0, 0x700}, 0x0) 21:43:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sliced={0x5, [0x6, 0x9, 0x6, 0x400, 0x101, 0x20, 0x2, 0x0, 0x8, 0x7, 0x9, 0x4, 0xe8a, 0x4, 0x20, 0x2, 0xfffb, 0x6, 0x4, 0xff80, 0x3, 0x40, 0x1ff, 0xfc00, 0x1f, 0x401, 0x7, 0x4, 0x4, 0xff69, 0x0, 0x1, 0x4, 0x9, 0x8000, 0x0, 0x9, 0x6, 0x800, 0x5, 0x1000, 0x7000, 0x3, 0x345, 0x81, 0x5, 0xe8da, 0x80], 0x1000}}) 21:43:50 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x147, 0x700000000000000}, 0x0) 21:43:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sliced={0x5, [0x6, 0x9, 0x6, 0x400, 0x101, 0x20, 0x2, 0x0, 0x8, 0x7, 0x9, 0x4, 0xe8a, 0x4, 0x20, 0x2, 0xfffb, 0x6, 0x4, 0xff80, 0x3, 0x40, 0x1ff, 0xfc00, 0x1f, 0x401, 0x7, 0x4, 0x4, 0xff69, 0x0, 0x1, 0x4, 0x9, 0x8000, 0x0, 0x9, 0x6, 0x800, 0x5, 0x1000, 0x7000, 0x3, 0x345, 0x81, 0x5, 0xe8da, 0x80], 0x1000}}) 21:43:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9, 0x5c8, 0x80000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @sliced={0x8, [0x8000, 0x8000, 0x8, 0xe29f, 0x5, 0xd00f, 0x4, 0x421b, 0x2, 0x22f0, 0x4, 0x200, 0xfff, 0x4, 0x65f, 0x1f, 0xff00, 0x1, 0x8, 0x9, 0x6, 0x4, 0x7, 0x6, 0x0, 0x9, 0xac9, 0x7ca, 0x101, 0x4, 0xfff, 0x400, 0x3, 0xffff, 0x40, 0x9, 0x8000, 0xa680, 0x17fa, 0x8, 0x1f, 0x3, 0x0, 0x7, 0x475, 0x3ff, 0x9, 0x3], 0x100}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0x0, 0x3}, 0x1, 0x927, 0x8001, {0x9, 0x1}, 0x8, 0x1}) r1 = getpgid(0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) getpgid(r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x3, 0xc7e6, 0x566b4ba2, 0xfffffffffffffff7, 0x1000, r1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x6, 0x1, 0x4, 0x14020, 0xa8, {0x77359400}, {0x2, 0x1, 0xc4, 0x7, 0x1f, 0x40, "26ab005b"}, 0x5, 0x2, {&(0x7f0000000180)}, 0x20}) 21:43:50 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x148, 0x700000000000000}, 0x0) 21:43:50 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12d, 0x0, 0x700}, 0x0) 21:43:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:43:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sliced={0x5, [0x6, 0x9, 0x6, 0x400, 0x101, 0x20, 0x2, 0x0, 0x8, 0x7, 0x9, 0x4, 0xe8a, 0x4, 0x20, 0x2, 0xfffb, 0x6, 0x4, 0xff80, 0x3, 0x40, 0x1ff, 0xfc00, 0x1f, 0x401, 0x7, 0x4, 0x4, 0xff69, 0x0, 0x1, 0x4, 0x9, 0x8000, 0x0, 0x9, 0x6, 0x800, 0x5, 0x1000, 0x7000, 0x3, 0x345, 0x81, 0x5, 0xe8da, 0x80], 0x1000}}) [ 3064.720886][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3064.732578][ T22] ath9k_htc: Failed to initialize the device [ 3064.776699][T10727] usb 3-1: ath9k_htc: USB layer deinitialized [ 3065.160828][T10727] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3065.680880][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3065.689985][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3065.698676][T10727] usb 3-1: Product: syz [ 3065.703447][T10727] usb 3-1: Manufacturer: syz [ 3065.708063][T10727] usb 3-1: SerialNumber: syz [ 3065.754725][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3066.320997][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:43:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9, 0x5c8, 0x80000}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @sliced={0x8, [0x8000, 0x8000, 0x8, 0xe29f, 0x5, 0xd00f, 0x4, 0x421b, 0x2, 0x22f0, 0x4, 0x200, 0xfff, 0x4, 0x65f, 0x1f, 0xff00, 0x1, 0x8, 0x9, 0x6, 0x4, 0x7, 0x6, 0x0, 0x9, 0xac9, 0x7ca, 0x101, 0x4, 0xfff, 0x400, 0x3, 0xffff, 0x40, 0x9, 0x8000, 0xa680, 0x17fa, 0x8, 0x1f, 0x3, 0x0, 0x7, 0x475, 0x3ff, 0x9, 0x3], 0x100}}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0x0, 0x3}, 0x1, 0x927, 0x8001, {0x9, 0x1}, 0x8, 0x1}) (async) r1 = getpgid(0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async) getpgid(r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x3, 0xc7e6, 0x566b4ba2, 0xfffffffffffffff7, 0x1000, r1}) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x6, 0x1, 0x4, 0x14020, 0xa8, {0x77359400}, {0x2, 0x1, 0xc4, 0x7, 0x1f, 0x40, "26ab005b"}, 0x5, 0x2, {&(0x7f0000000180)}, 0x20}) 21:43:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12e, 0x0, 0x700}, 0x0) 21:43:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x149, 0x700000000000000}, 0x0) 21:43:53 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) 21:43:53 executing program 5: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000006c0)={0x2, @raw_data="2987be9ab04ee94d6534fc2ecc01782ac474a11ae977ac575e5afccb3a510c95a5481879cb2ff401f8bc947be7248f54abc0c299ad0fc94f831e87186bd01d9c2543ad16de93e1d1b529500913964b05f0cf6e6f4e6b24c6e4376fd60dc910287bbaf55749187e28bebec15e89a9ebcbd11c21dc4c9746e7a63c646dbc04c28bd829d7c1ed3bf75b4683a1e461d59f62a0950077d486997850088753a9f4ac4e37d7215314ecd52f412b9f4c33fdfcb981679e085b63187a2d60962badca1b96f7ea051983b4aa00"}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 21:43:53 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000200ad0000cd627f69af016dff5de00d4d13d0ffbd26e63bf2805fb57689da796ad7fba1aa43bdf27949e137317f3535bf066dd5ea50a8b31d5a31f479bce401e66e32bf589e756795174565aa55391e13a7aca1a5a51ad04ce1e803437513af9d03620b527abe821679410d040012c366e89598f1175c134cd4cc07000000a5c1b62dc391e26d12b0b22b49e800000000"]) [ 3066.953226][ T3667] usb 3-1: USB disconnect, device number 98 21:43:53 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) (async) 21:43:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x12f, 0x0, 0x700}, 0x0) 21:43:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14a, 0x700000000000000}, 0x0) 21:43:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async, rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9, 0x5c8, 0x80000}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @sliced={0x8, [0x8000, 0x8000, 0x8, 0xe29f, 0x5, 0xd00f, 0x4, 0x421b, 0x2, 0x22f0, 0x4, 0x200, 0xfff, 0x4, 0x65f, 0x1f, 0xff00, 0x1, 0x8, 0x9, 0x6, 0x4, 0x7, 0x6, 0x0, 0x9, 0xac9, 0x7ca, 0x101, 0x4, 0xfff, 0x400, 0x3, 0xffff, 0x40, 0x9, 0x8000, 0xa680, 0x17fa, 0x8, 0x1f, 0x3, 0x0, 0x7, 0x475, 0x3ff, 0x9, 0x3], 0x100}}) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0x0, 0x3}, 0x1, 0x927, 0x8001, {0x9, 0x1}, 0x8, 0x1}) (async) r1 = getpgid(0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async) getpgid(r1) (async, rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x3, 0xc7e6, 0x566b4ba2, 0xfffffffffffffff7, 0x1000, r1}) (async, rerun: 64) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x6, 0x1, 0x4, 0x14020, 0xa8, {0x77359400}, {0x2, 0x1, 0xc4, 0x7, 0x1f, 0x40, "26ab005b"}, 0x5, 0x2, {&(0x7f0000000180)}, 0x20}) 21:43:53 executing program 5: r0 = memfd_secret(0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async, rerun: 32) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) (async, rerun: 64) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf251f000000000008000008af7564703a73795c3200000000d812ca5a5c2cd91fa60471b33d191455403c45a42011d614f67cf378e7b447ede8001000000000000022e7f891ae1f7563b73d32a7bd592b187bad830ad3a4c4cbd541b7de331ff1777ef6a326c95d7c82dfe66166fbdff2bcfe6ca426a58fc4f7db8344fee5b5cae0669ef1f1fd9f934dc91cb666711cdad2e01abf3d6012345fb29ccde25beef5e03432f33fcb546d357b08ce4568430138326caea8f6057c2dbfe014d79d80701c200a24a222ab2df6001493e065189d567d99cc199f6f9963c8dbe5a7a1712f6e0dccde76c1685a2a6a248023a4c94064e4cf673ea1f1e709e967"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000006c0)={0x2, @raw_data="2987be9ab04ee94d6534fc2ecc01782ac474a11ae977ac575e5afccb3a510c95a5481879cb2ff401f8bc947be7248f54abc0c299ad0fc94f831e87186bd01d9c2543ad16de93e1d1b529500913964b05f0cf6e6f4e6b24c6e4376fd60dc910287bbaf55749187e28bebec15e89a9ebcbd11c21dc4c9746e7a63c646dbc04c28bd829d7c1ed3bf75b4683a1e461d59f62a0950077d486997850088753a9f4ac4e37d7215314ecd52f412b9f4c33fdfcb981679e085b63187a2d60962badca1b96f7ea051983b4aa00"}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 21:43:53 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0)) 21:43:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x130, 0x0, 0x700}, 0x0) 21:43:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14b, 0x700000000000000}, 0x0) 21:43:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)=@overlay={0x81, 0xc08a204139c4f17d, 0x4, 0x20, 0xffffffe1, {0x77359400}, {0x4, 0x8, 0x5, 0xa3, 0x9, 0x40, "63faa6ea"}, 0xe98, 0x3, {}, 0x3}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xfffffff9, 0x0, 0x1, 0x0, 0x3}) 21:43:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x131, 0x0, 0x700}, 0x0) 21:43:53 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf251f000000000008000008af7564703a73795c3200000000d812ca5a5c2cd91fa60471b33d191455403c45a42011d614f67cf378e7b447ede8001000000000000022e7f891ae1f7563b73d32a7bd592b187bad830ad3a4c4cbd541b7de331ff1777ef6a326c95d7c82dfe66166fbdff2bcfe6ca426a58fc4f7db8344fee5b5cae0669ef1f1fd9f934dc91cb666711cdad2e01abf3d6012345fb29ccde25beef5e03432f33fcb546d357b08ce4568430138326caea8f6057c2dbfe014d79d80701c200a24a222ab2df6001493e065189d567d99cc199f6f9963c8dbe5a7a1712f6e0dccde76c1685a2a6a248023a4c94064e4cf673ea1f1e709e967"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000006c0)={0x2, @raw_data="2987be9ab04ee94d6534fc2ecc01782ac474a11ae977ac575e5afccb3a510c95a5481879cb2ff401f8bc947be7248f54abc0c299ad0fc94f831e87186bd01d9c2543ad16de93e1d1b529500913964b05f0cf6e6f4e6b24c6e4376fd60dc910287bbaf55749187e28bebec15e89a9ebcbd11c21dc4c9746e7a63c646dbc04c28bd829d7c1ed3bf75b4683a1e461d59f62a0950077d486997850088753a9f4ac4e37d7215314ecd52f412b9f4c33fdfcb981679e085b63187a2d60962badca1b96f7ea051983b4aa00"}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) [ 3067.360841][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3067.367784][T10727] ath9k_htc: Failed to initialize the device [ 3067.375491][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3067.730800][ T3667] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 3068.291027][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3068.300156][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3068.308749][ T3667] usb 3-1: Product: syz [ 3068.313285][ T3667] usb 3-1: Manufacturer: syz [ 3068.317936][ T3667] usb 3-1: SerialNumber: syz [ 3068.361736][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3068.961007][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3069.367280][T24210] usb 3-1: USB disconnect, device number 99 21:43:56 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000200ad0000cd627f69af016dff5de00d4d13d0ffbd26e63bf2805fb57689da796ad7fba1aa43bdf27949e137317f3535bf066dd5ea50a8b31d5a31f479bce401e66e32bf589e756795174565aa55391e13a7aca1a5a51ad04ce1e803437513af9d03620b527abe821679410d040012c366e89598f1175c134cd4cc07000000a5c1b62dc391e26d12b0b22b49e800000000"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000200ad0000cd627f69af016dff5de00d4d13d0ffbd26e63bf2805fb57689da796ad7fba1aa43bdf27949e137317f3535bf066dd5ea50a8b31d5a31f479bce401e66e32bf589e756795174565aa55391e13a7aca1a5a51ad04ce1e803437513af9d03620b527abe821679410d040012c366e89598f1175c134cd4cc07000000a5c1b62dc391e26d12b0b22b49e800000000"]) (async) 21:43:56 executing program 5: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async, rerun: 64) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) (async) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000006c0)={0x2, @raw_data="2987be9ab04ee94d6534fc2ecc01782ac474a11ae977ac575e5afccb3a510c95a5481879cb2ff401f8bc947be7248f54abc0c299ad0fc94f831e87186bd01d9c2543ad16de93e1d1b529500913964b05f0cf6e6f4e6b24c6e4376fd60dc910287bbaf55749187e28bebec15e89a9ebcbd11c21dc4c9746e7a63c646dbc04c28bd829d7c1ed3bf75b4683a1e461d59f62a0950077d486997850088753a9f4ac4e37d7215314ecd52f412b9f4c33fdfcb981679e085b63187a2d60962badca1b96f7ea051983b4aa00"}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 21:43:56 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x132, 0x0, 0x700}, 0x0) 21:43:56 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14c, 0x700000000000000}, 0x0) 21:43:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)=@overlay={0x81, 0xc08a204139c4f17d, 0x4, 0x20, 0xffffffe1, {0x77359400}, {0x4, 0x8, 0x5, 0xa3, 0x9, 0x40, "63faa6ea"}, 0xe98, 0x3, {}, 0x3}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xfffffff9, 0x0, 0x1, 0x0, 0x3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)=@overlay={0x81, 0xc08a204139c4f17d, 0x4, 0x20, 0xffffffe1, {0x77359400}, {0x4, 0x8, 0x5, 0xa3, 0x9, 0x40, "63faa6ea"}, 0xe98, 0x3, {}, 0x3}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xfffffff9, 0x0, 0x1, 0x0, 0x3}) (async) 21:43:56 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000006c0)={0x2, @raw_data="2987be9ab04ee94d6534fc2ecc01782ac474a11ae977ac575e5afccb3a510c95a5481879cb2ff401f8bc947be7248f54abc0c299ad0fc94f831e87186bd01d9c2543ad16de93e1d1b529500913964b05f0cf6e6f4e6b24c6e4376fd60dc910287bbaf55749187e28bebec15e89a9ebcbd11c21dc4c9746e7a63c646dbc04c28bd829d7c1ed3bf75b4683a1e461d59f62a0950077d486997850088753a9f4ac4e37d7215314ecd52f412b9f4c33fdfcb981679e085b63187a2d60962badca1b96f7ea051983b4aa00"}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 21:43:56 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14d, 0x700000000000000}, 0x0) 21:43:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)=@overlay={0x81, 0xc08a204139c4f17d, 0x4, 0x20, 0xffffffe1, {0x77359400}, {0x4, 0x8, 0x5, 0xa3, 0x9, 0x40, "63faa6ea"}, 0xe98, 0x3, {}, 0x3}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xfffffff9, 0x0, 0x1, 0x0, 0x3}) 21:43:56 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x133, 0x0, 0x700}, 0x0) 21:43:56 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000006c0)={0x2, @raw_data="2987be9ab04ee94d6534fc2ecc01782ac474a11ae977ac575e5afccb3a510c95a5481879cb2ff401f8bc947be7248f54abc0c299ad0fc94f831e87186bd01d9c2543ad16de93e1d1b529500913964b05f0cf6e6f4e6b24c6e4376fd60dc910287bbaf55749187e28bebec15e89a9ebcbd11c21dc4c9746e7a63c646dbc04c28bd829d7c1ed3bf75b4683a1e461d59f62a0950077d486997850088753a9f4ac4e37d7215314ecd52f412b9f4c33fdfcb981679e085b63187a2d60962badca1b96f7ea051983b4aa00"}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 21:43:56 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) [ 3070.000977][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3070.010973][ T3667] ath9k_htc: Failed to initialize the device [ 3070.017461][T24210] usb 3-1: ath9k_htc: USB layer deinitialized 21:43:56 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14e, 0x700000000000000}, 0x0) [ 3070.390844][T24210] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 3070.920928][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3070.930009][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3070.938146][T24210] usb 3-1: Product: syz [ 3070.942439][T24210] usb 3-1: Manufacturer: syz [ 3070.947059][T24210] usb 3-1: SerialNumber: syz [ 3070.992229][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3071.561010][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3071.964195][T27214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3071.973000][T27214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3072.169848][ T22] usb 3-1: USB disconnect, device number 100 21:43:58 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000200ad0000cd627f69af016dff5de00d4d13d0ffbd26e63bf2805fb57689da796ad7fba1aa43bdf27949e137317f3535bf066dd5ea50a8b31d5a31f479bce401e66e32bf589e756795174565aa55391e13a7aca1a5a51ad04ce1e803437513af9d03620b527abe821679410d040012c366e89598f1175c134cd4cc07000000a5c1b62dc391e26d12b0b22b49e800000000"]) 21:43:58 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x134, 0x0, 0x700}, 0x0) 21:43:58 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getpgid(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000100)) 21:43:58 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000006c0)={0x2, @raw_data="2987be9ab04ee94d6534fc2ecc01782ac474a11ae977ac575e5afccb3a510c95a5481879cb2ff401f8bc947be7248f54abc0c299ad0fc94f831e87186bd01d9c2543ad16de93e1d1b529500913964b05f0cf6e6f4e6b24c6e4376fd60dc910287bbaf55749187e28bebec15e89a9ebcbd11c21dc4c9746e7a63c646dbc04c28bd829d7c1ed3bf75b4683a1e461d59f62a0950077d486997850088753a9f4ac4e37d7215314ecd52f412b9f4c33fdfcb981679e085b63187a2d60962badca1b96f7ea051983b4aa00"}) 21:43:58 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) read$FUSE(r1, 0xfffffffffffffffd, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) (async) 21:43:58 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14f, 0x700000000000000}, 0x0) [ 3072.641508][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3072.648515][T10727] ath9k_htc: Failed to initialize the device [ 3072.659621][ T22] usb 3-1: ath9k_htc: USB layer deinitialized 21:43:58 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x135, 0x0, 0x700}, 0x0) 21:43:58 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x150, 0x700000000000000}, 0x0) 21:43:58 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getpgid(0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000100)) 21:43:58 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) 21:43:58 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) 21:43:58 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x151, 0x700000000000000}, 0x0) [ 3073.080823][ T22] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3073.611079][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3073.620171][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3073.628515][ T22] usb 3-1: Product: syz [ 3073.632972][ T22] usb 3-1: Manufacturer: syz [ 3073.637576][ T22] usb 3-1: SerialNumber: syz [ 3073.692757][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3074.315000][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3074.717911][T24210] usb 3-1: USB disconnect, device number 101 21:44:01 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:01 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x136, 0x0, 0x700}, 0x0) 21:44:01 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) 21:44:01 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x152, 0x700000000000000}, 0x0) 21:44:01 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:01 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 64) getpgid(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000100)) 21:44:01 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x137, 0x0, 0x700}, 0x0) 21:44:01 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x153, 0x700000000000000}, 0x0) 21:44:01 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:01 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) 21:44:01 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x154, 0x700000000000000}, 0x0) 21:44:01 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x138, 0x0, 0x700}, 0x0) [ 3075.370983][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3075.377985][T27978] ath9k_htc: Failed to initialize the device [ 3075.407507][T24210] usb 3-1: ath9k_htc: USB layer deinitialized [ 3075.780828][T24210] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3076.300941][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3076.310074][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3076.318218][T24210] usb 3-1: Product: syz [ 3076.322573][T24210] usb 3-1: Manufacturer: syz [ 3076.327230][T24210] usb 3-1: SerialNumber: syz [ 3076.382113][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3076.950989][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3077.359287][T27978] usb 3-1: USB disconnect, device number 102 21:44:04 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) (async) 21:44:04 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:04 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) 21:44:04 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x155, 0x700000000000000}, 0x0) 21:44:04 executing program 1: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000000c0)) 21:44:04 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x139, 0x0, 0x700}, 0x0) 21:44:04 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13a, 0x0, 0x700}, 0x0) 21:44:04 executing program 1: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000000c0)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000000c0)) (async) 21:44:04 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:04 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) 21:44:04 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x156, 0x700000000000000}, 0x0) 21:44:04 executing program 0: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) [ 3078.000976][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3078.008002][T24210] ath9k_htc: Failed to initialize the device [ 3078.032911][T27978] usb 3-1: ath9k_htc: USB layer deinitialized [ 3078.420937][T27978] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3078.990983][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3079.000055][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3079.009171][T27978] usb 3-1: Product: syz [ 3079.013674][T27978] usb 3-1: Manufacturer: syz [ 3079.018288][T27978] usb 3-1: SerialNumber: syz [ 3079.061403][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3079.680973][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3080.086396][T27301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3080.095748][T27301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3080.290334][T24210] usb 3-1: USB disconnect, device number 103 [ 3080.720900][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3080.727914][T27978] ath9k_htc: Failed to initialize the device [ 3080.736548][T24210] usb 3-1: ath9k_htc: USB layer deinitialized 21:44:06 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:06 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13b, 0x0, 0x700}, 0x0) 21:44:06 executing program 1: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000000c0)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000000c0)) (async) 21:44:06 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x157, 0x700000000000000}, 0x0) 21:44:06 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:06 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) 21:44:07 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) 21:44:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13c, 0x0, 0x700}, 0x0) 21:44:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x158, 0x700000000000000}, 0x0) 21:44:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x1ff, 0x1, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x1, "0fc7ddf7"}, 0x800, 0x4, {}, 0x8, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = memfd_secret(0x80000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x3, {0xa, 0x4e23, 0x6, @private2, 0xffffffff}}}, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x4, 0x9, 0x1, 'queue1\x00', 0x9}) 21:44:07 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x159, 0x700000000000000}, 0x0) [ 3081.260850][T24210] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3081.601745][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.608058][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.791041][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3081.804368][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3081.812482][T24210] usb 3-1: Product: syz [ 3081.816707][T24210] usb 3-1: Manufacturer: syz [ 3081.825490][T24210] usb 3-1: SerialNumber: syz [ 3081.873031][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3082.440989][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3082.855328][ T3667] usb 3-1: USB disconnect, device number 104 21:44:09 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffef6, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x45, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:44:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x1ff, 0x1, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x1, "0fc7ddf7"}, 0x800, 0x4, {}, 0x8, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = memfd_secret(0x80000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x3, {0xa, 0x4e23, 0x6, @private2, 0xffffffff}}}, 0x38) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x4, 0x9, 0x1, 'queue1\x00', 0x9}) 21:44:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0x95}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:09 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13d, 0x0, 0x700}, 0x0) 21:44:09 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15a, 0x700000000000000}, 0x0) 21:44:09 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:09 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13e, 0x0, 0x700}, 0x0) 21:44:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0x95}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0x95}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) 21:44:09 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15b, 0x700000000000000}, 0x0) 21:44:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x1ff, 0x1, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x1, "0fc7ddf7"}, 0x800, 0x4, {}, 0x8, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r3 = memfd_secret(0x80000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x3, {0xa, 0x4e23, 0x6, @private2, 0xffffffff}}}, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x4, 0x9, 0x1, 'queue1\x00', 0x9}) 21:44:09 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0x95}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) [ 3083.521226][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3083.534010][T24210] ath9k_htc: Failed to initialize the device [ 3083.546008][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3083.900853][ T3667] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3084.181144][ T3667] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3084.301048][ T3667] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3084.309052][ T3667] usb 3-1: can't read configurations, error -22 [ 3084.460869][ T3667] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3084.760968][ T3667] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3084.891163][ T3667] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3084.899147][ T3667] usb 3-1: can't read configurations, error -22 [ 3084.906450][ T3667] usb usb3-port1: attempt power cycle [ 3085.340822][ T3667] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3085.474041][ T3667] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3085.600909][ T3667] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3085.608860][ T3667] usb 3-1: can't read configurations, error -22 [ 3085.760914][ T3667] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3085.890969][ T3667] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3086.010889][ T3667] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3086.018858][ T3667] usb 3-1: can't read configurations, error -22 [ 3086.025635][ T3667] usb usb3-port1: unable to enumerate USB device 21:44:12 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffef6, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x45, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:44:12 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15c, 0x700000000000000}, 0x0) 21:44:12 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:12 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140)={0x0, 0x1, {0x0, 0x1, 0xffff, 0x2, 0x80000000}, 0x5be6aed2}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000000c0)) 21:44:12 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13f, 0x0, 0x700}, 0x0) 21:44:12 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000012, 0xffffffffffffffff, 0x10000000) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) 21:44:12 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15d, 0x700000000000000}, 0x0) 21:44:12 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000012, 0xffffffffffffffff, 0x10000000) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) 21:44:12 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x140, 0x0, 0x700}, 0x0) 21:44:12 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:12 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r2 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140)={0x0, 0x1, {0x0, 0x1, 0xffff, 0x2, 0x80000000}, 0x5be6aed2}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000000c0)) 21:44:12 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000012, 0xffffffffffffffff, 0x10000000) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) [ 3086.922755][T27825] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 3087.220938][T27825] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3087.361030][T27825] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3087.368979][T27825] usb 3-1: can't read configurations, error -22 [ 3087.520865][T27825] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3087.831095][T27825] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3087.951419][T27825] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3087.959362][T27825] usb 3-1: can't read configurations, error -22 [ 3087.966023][T27825] usb usb3-port1: attempt power cycle [ 3088.380803][T27825] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3088.511360][T27825] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3088.641137][T27825] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3088.649082][T27825] usb 3-1: can't read configurations, error -22 [ 3088.801106][T27825] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3088.971058][T27825] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3089.090959][T27825] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3089.098915][T27825] usb 3-1: can't read configurations, error -22 [ 3089.105802][T27825] usb usb3-port1: unable to enumerate USB device 21:44:15 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffef6, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x45, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:44:15 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:15 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x141, 0x0, 0x700}, 0x0) 21:44:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15e, 0x700000000000000}, 0x0) 21:44:15 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140)={0x0, 0x1, {0x0, 0x1, 0xffff, 0x2, 0x80000000}, 0x5be6aed2}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f00000000c0)) 21:44:15 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:15 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x142, 0x0, 0x700}, 0x0) 21:44:15 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15f, 0x700000000000000}, 0x0) 21:44:15 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:15 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) connect$pptp(0xffffffffffffffff, 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) 21:44:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xfff, 0x0, 0x4, 0x0, 0x40}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x280521) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x381142) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x400000000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:44:15 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) (async, rerun: 32) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) [ 3089.980861][T27978] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3090.321449][T27978] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3090.480975][T27978] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3090.488921][T27978] usb 3-1: can't read configurations, error -22 [ 3090.640913][T27978] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3090.951023][T27978] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3091.080944][T27978] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3091.089356][T27978] usb 3-1: can't read configurations, error -22 [ 3091.096735][T27978] usb usb3-port1: attempt power cycle [ 3091.530853][T27978] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3091.680972][T27978] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3091.851118][T27978] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3091.859121][T27978] usb 3-1: can't read configurations, error -22 [ 3092.020941][T27978] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3092.152334][T27978] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 3092.301007][T27978] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 3092.309055][T27978] usb 3-1: can't read configurations, error -22 [ 3092.317169][T27978] usb usb3-port1: unable to enumerate USB device 21:44:18 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="090cf8000000000080fb58f6f2f8f3da695253261f4e83e00b76666c5356ceaf26c7a54f3859610700000000000000e333a3e050fb7b93336242ad23"]) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) 21:44:18 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x143, 0x0, 0x700}, 0x0) 21:44:18 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x160, 0x700000000000000}, 0x0) 21:44:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xfff, 0x0, 0x4, 0x0, 0x40}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x280521) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x381142) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x400000000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:44:18 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:18 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x85}}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x40086602, &(0x7f00000002c0)) 21:44:18 executing program 0: memfd_secret(0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:18 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x161, 0x700000000000000}, 0x0) 21:44:18 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x144, 0x0, 0x700}, 0x0) 21:44:18 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x85}}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x40086602, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x85}}, 0x18) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x40086602, &(0x7f00000002c0)) (async) 21:44:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xfff, 0x0, 0x4, 0x0, 0x40}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x280521) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x381142) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x400000000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xfff, 0x0, 0x4, 0x0, 0x40}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x280521) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x381142) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x400000000) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (async) 21:44:18 executing program 0: memfd_secret(0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) [ 3093.000933][ T3667] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3093.531130][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3093.540204][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.549269][ T3667] usb 3-1: Product: syz [ 3093.553726][ T3667] usb 3-1: Manufacturer: syz [ 3093.558337][ T3667] usb 3-1: SerialNumber: syz [ 3093.601693][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3094.170848][T28216] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3094.593777][ T9283] usb 3-1: USB disconnect, device number 117 21:44:21 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="090cf8000000000080fb58f6f2f8f3da695253261f4e83e00b76666c5356ceaf26c7a54f3859610700000000000000e333a3e050fb7b93336242ad23"]) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)) (async) socket$key(0xf, 0x3, 0x2) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a4000, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) 21:44:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x145, 0x0, 0x700}, 0x0) 21:44:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x162, 0x700000000000000}, 0x0) 21:44:21 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x85}}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x40086602, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x85}}, 0x18) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x40086602, &(0x7f00000002c0)) (async) 21:44:21 executing program 1: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'wlan1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) 21:44:21 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:21 executing program 1: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'wlan1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x0, 0x8}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) (rerun: 32) 21:44:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x163, 0x700000000000000}, 0x0) 21:44:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x146, 0x0, 0x700}, 0x0) 21:44:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:21 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, 0x0, 0x40, 0x102) [ 3095.201113][T28216] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3095.215275][T28216] ath9k_htc: Failed to initialize the device 21:44:21 executing program 1: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'wlan1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) [ 3095.248716][ T9283] usb 3-1: ath9k_htc: USB layer deinitialized [ 3095.640808][ T9283] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3096.170904][ T9283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3096.179984][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3096.188601][ T9283] usb 3-1: Product: syz [ 3096.192996][ T9283] usb 3-1: Manufacturer: syz [ 3096.197588][ T9283] usb 3-1: SerialNumber: syz [ 3096.242172][ T9283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3096.860878][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:44:23 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="090cf8000000000080fb58f6f2f8f3da695253261f4e83e00b76666c5356ceaf26c7a54f3859610700000000000000e333a3e050fb7b93336242ad23"]) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a4000, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) 21:44:23 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x164, 0x700000000000000}, 0x0) 21:44:23 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, 0x0, 0x40, 0x102) 21:44:23 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x147, 0x0, 0x700}, 0x0) 21:44:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abd7000fcdbdf2501000000000000000c4100000014001462726f61646361737c2d6c696e6b0000"], 0x30}}, 0x8890) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) 21:44:23 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x165, 0x700000000000000}, 0x0) [ 3097.070004][ T9283] usb 3-1: USB disconnect, device number 118 21:44:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:23 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x148, 0x0, 0x700}, 0x0) 21:44:23 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, 0x0, 0x40, 0x102) 21:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abd7000fcdbdf2501000000000000000c4100000014001462726f61646361737c2d6c696e6b0000"], 0x30}}, 0x8890) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abd7000fcdbdf2501000000000000000c4100000014001462726f61646361737c2d6c696e6b0000"], 0x30}}, 0x8890) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) (async) 21:44:23 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x166, 0x700000000000000}, 0x0) [ 3097.920780][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3097.927786][T27825] ath9k_htc: Failed to initialize the device [ 3097.934248][ T9283] usb 3-1: ath9k_htc: USB layer deinitialized [ 3098.300825][ T9283] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3098.860871][ T9283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3098.870610][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.879097][ T9283] usb 3-1: Product: syz [ 3098.884161][ T9283] usb 3-1: Manufacturer: syz [ 3098.888772][ T9283] usb 3-1: SerialNumber: syz [ 3098.942017][ T9283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3099.570922][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3099.978890][T27825] usb 3-1: USB disconnect, device number 119 21:44:26 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x102, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x10000, 0x1, 0x4, 0x4, 0xffffffff, {r2, r3/1000+60000}, {0x3, 0x8, 0x20, 0x4, 0x4, 0x2, "a0573356"}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000100ba76ada5be783b75a3cf3812d1cb9680a4201f7d4e6cac2d99b2fc23a817fa90e93d4c428f721ae8d1275d6fa1e1e604292b4753fd81800000000000000"]) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) socket(0x11, 0x80000, 0xfffffffc) 21:44:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:26 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x149, 0x0, 0x700}, 0x0) 21:44:26 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x102) 21:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abd7000fcdbdf2501000000000000000c4100000014001462726f61646361737c2d6c696e6b0000"], 0x30}}, 0x8890) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) 21:44:26 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x167, 0x700000000000000}, 0x0) 21:44:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:26 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x102) 21:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="61786b6e36f5", 0x6) r2 = memfd_create(&(0x7f0000000200)='/dev/vim2m\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={r2, 0x0, 0x10000, 0xfffffffffffff000}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x4000, {{}, {}, {0x8, 0x2, 0xff}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000012}, 0x4000000) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x400448c9, &(0x7f00000002c0)) 21:44:26 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14a, 0x0, 0x700}, 0x0) 21:44:26 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x168, 0x700000000000000}, 0x0) 21:44:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) [ 3100.641062][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3100.648074][ T9283] ath9k_htc: Failed to initialize the device [ 3100.675380][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3101.040806][T27825] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3101.581012][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3101.590077][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3101.598850][T27825] usb 3-1: Product: syz [ 3101.603471][T27825] usb 3-1: Manufacturer: syz [ 3101.608079][T27825] usb 3-1: SerialNumber: syz [ 3101.661667][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3102.250832][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3102.671131][ T22] usb 3-1: USB disconnect, device number 120 21:44:29 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x102, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x10000, 0x1, 0x4, 0x4, 0xffffffff, {r2, r3/1000+60000}, {0x3, 0x8, 0x20, 0x4, 0x4, 0x2, "a0573356"}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000100ba76ada5be783b75a3cf3812d1cb9680a4201f7d4e6cac2d99b2fc23a817fa90e93d4c428f721ae8d1275d6fa1e1e604292b4753fd81800000000000000"]) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) socket(0x11, 0x80000, 0xfffffffc) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x102, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x10000, 0x1, 0x4, 0x4, 0xffffffff, {r2, r3/1000+60000}, {0x3, 0x8, 0x20, 0x4, 0x4, 0x2, "a0573356"}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000100ba76ada5be783b75a3cf3812d1cb9680a4201f7d4e6cac2d99b2fc23a817fa90e93d4c428f721ae8d1275d6fa1e1e604292b4753fd81800000000000000"]) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) (async) socket(0x11, 0x80000, 0xfffffffc) (async) 21:44:29 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14b, 0x0, 0x700}, 0x0) 21:44:29 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x102) 21:44:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x169, 0x700000000000000}, 0x0) 21:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="61786b6e36f5", 0x6) r2 = memfd_create(&(0x7f0000000200)='/dev/vim2m\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={r2, 0x0, 0x10000, 0xfffffffffffff000}) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x4000, {{}, {}, {0x8, 0x2, 0xff}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000012}, 0x4000000) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x400448c9, &(0x7f00000002c0)) 21:44:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:29 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14c, 0x0, 0x700}, 0x0) 21:44:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:29 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) 21:44:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16a, 0x700000000000000}, 0x0) 21:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="61786b6e36f5", 0x6) (async) r2 = memfd_create(&(0x7f0000000200)='/dev/vim2m\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={r2, 0x0, 0x10000, 0xfffffffffffff000}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x4000, {{}, {}, {0x8, 0x2, 0xff}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000012}, 0x4000000) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x400448c9, &(0x7f00000002c0)) 21:44:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16b, 0x700000000000000}, 0x0) [ 3103.281121][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3103.288125][T27825] ath9k_htc: Failed to initialize the device [ 3103.306729][ T22] usb 3-1: ath9k_htc: USB layer deinitialized [ 3103.660801][ T22] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3104.190975][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3104.201714][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.209777][ T22] usb 3-1: Product: syz [ 3104.214509][ T22] usb 3-1: Manufacturer: syz [ 3104.219270][ T22] usb 3-1: SerialNumber: syz [ 3104.261419][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3104.850923][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:44:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:44:31 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x102, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x10000, 0x1, 0x4, 0x4, 0xffffffff, {r2, r3/1000+60000}, {0x3, 0x8, 0x20, 0x4, 0x4, 0x2, "a0573356"}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000100ba76ada5be783b75a3cf3812d1cb9680a4201f7d4e6cac2d99b2fc23a817fa90e93d4c428f721ae8d1275d6fa1e1e604292b4753fd81800000000000000"]) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) (async, rerun: 64) socket(0x11, 0x80000, 0xfffffffc) (rerun: 64) 21:44:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14d, 0x0, 0x700}, 0x0) 21:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abd7000fcdbdf2501000000000000000c4100000014001462726f61646361737c2d6c696e6b0000"], 0x30}}, 0x8890) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x400448c9, &(0x7f00000002c0)) 21:44:31 executing program 1: socketpair(0x0, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x2400c895) socket$alg(0x26, 0x5, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) 21:44:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16c, 0x700000000000000}, 0x0) [ 3105.254507][T27590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3105.264696][T27590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3105.279990][T27825] usb 3-1: USB disconnect, device number 121 21:44:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14e, 0x0, 0x700}, 0x0) 21:44:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16d, 0x700000000000000}, 0x0) 21:44:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000080)) 21:44:31 executing program 0: memfd_secret(0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:31 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:44:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16e, 0x700000000000000}, 0x0) 21:44:31 executing program 1: socketpair(0x0, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x2400c895) socket$alg(0x26, 0x5, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) socketpair(0x0, 0x1, 0x4, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x2400c895) (async) socket$alg(0x26, 0x5, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) (async) 21:44:31 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x143, 0x0, 0x700}, 0x0) 21:44:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x14f, 0x0, 0x700}, 0x0) 21:44:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16f, 0x700000000000000}, 0x0) 21:44:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000080)) 21:44:31 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:31 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x150, 0x0, 0x700}, 0x0) 21:44:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f0000000080)) (rerun: 32) 21:44:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x170, 0x700000000000000}, 0x0) 21:44:31 executing program 1: socketpair(0x0, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x2400c895) socket$alg(0x26, 0x5, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x400448c9, &(0x7f00000002c0)) [ 3105.920909][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3105.927870][ T22] ath9k_htc: Failed to initialize the device [ 3105.934368][T27825] usb 3-1: ath9k_htc: USB layer deinitialized [ 3106.300803][T27825] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3106.895148][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3106.904283][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.913224][T27825] usb 3-1: Product: syz [ 3106.917422][T27825] usb 3-1: Manufacturer: syz [ 3106.922162][T27825] usb 3-1: SerialNumber: syz [ 3106.971676][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3107.590902][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3107.856520][T27680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3107.873167][T27680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3107.901909][T27645] could not allocate digest TFM handle hmac(sha256-neon) [ 3107.913203][T28216] usb 3-1: USB disconnect, device number 122 21:44:34 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:44:34 executing program 0: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) 21:44:34 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x151, 0x0, 0x700}, 0x0) 21:44:34 executing program 5: r0 = memfd_secret(0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x800, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@userptr={0x5, 0x2, 0x4, 0x2, 0x7ff, {0x77359400}, {0x3, 0xc, 0x29, 0x8, 0x6, 0x1, "d2419393"}, 0x2, 0x2, {}, 0x4}) 21:44:34 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x171, 0x700000000000000}, 0x0) 21:44:34 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15b, 0x700000000000000}, 0x0) 21:44:34 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x172, 0x700000000000000}, 0x0) 21:44:34 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x152, 0x0, 0x700}, 0x0) 21:44:34 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:44:34 executing program 5: r0 = memfd_secret(0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x800, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@userptr={0x5, 0x2, 0x4, 0x2, 0x7ff, {0x77359400}, {0x3, 0xc, 0x29, 0x8, 0x6, 0x1, "d2419393"}, 0x2, 0x2, {}, 0x4}) memfd_secret(0x0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) (async) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x800, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@userptr={0x5, 0x2, 0x4, 0x2, 0x7ff, {0x77359400}, {0x3, 0xc, 0x29, 0x8, 0x6, 0x1, "d2419393"}, 0x2, 0x2, {}, 0x4}) (async) 21:44:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0x95}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) [ 3108.502090][T27694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3108.511112][T27694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 21:44:34 executing program 5: r0 = memfd_secret(0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x800, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@userptr={0x5, 0x2, 0x4, 0x2, 0x7ff, {0x77359400}, {0x3, 0xc, 0x29, 0x8, 0x6, 0x1, "d2419393"}, 0x2, 0x2, {}, 0x4}) [ 3108.640833][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3108.647911][T27825] ath9k_htc: Failed to initialize the device [ 3108.656262][T28216] usb 3-1: ath9k_htc: USB layer deinitialized [ 3108.726467][T27695] could not allocate digest TFM handle hmac(sha256-neon) [ 3108.850803][ T3667] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3109.052156][T28216] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3109.380943][ T3667] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3109.390103][ T3667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3109.398392][ T3667] usb 1-1: Product: syz [ 3109.402782][ T3667] usb 1-1: Manufacturer: syz [ 3109.407526][ T3667] usb 1-1: SerialNumber: syz [ 3109.451803][ T3667] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3109.571017][T28216] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3109.580096][T28216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3109.588427][T28216] usb 3-1: Product: syz [ 3109.592691][T28216] usb 3-1: Manufacturer: syz [ 3109.597292][T28216] usb 3-1: SerialNumber: syz [ 3109.641792][T28216] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3110.020811][T10727] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3110.211000][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3110.300438][T27725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3110.309900][T27725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3110.356814][T27708] could not allocate digest TFM handle hmac(sha256-neon) [ 3110.367572][T27825] usb 1-1: USB disconnect, device number 117 [ 3110.417993][ T22] usb 3-1: USB disconnect, device number 123 21:44:37 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) 21:44:37 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x153, 0x0, 0x700}, 0x0) 21:44:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x1ff, 0x1, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x1, "0fc7ddf7"}, 0x800, 0x4, {}, 0x8, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = memfd_secret(0x80000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x3, {0xa, 0x4e23, 0x6, @private2, 0xffffffff}}}, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x4, 0x9, 0x1, 'queue1\x00', 0x9}) 21:44:37 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x173, 0x700000000000000}, 0x0) 21:44:37 executing program 5: syz_usbip_server_init(0x1) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4]}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0xfffff801, 0x5, 0x1, 'queue0\x00', 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x2, 0x4, 0x0, 0x5, {r1, r2/1000+10000}, {0x4, 0x1, 0x5, 0xfd, 0x7, 0x8, "5f9d1e77"}, 0x0, 0x1, {&(0x7f0000000040)=[{0x7, 0x8, {0x2}, 0x3f}, {0x8d0b, 0xa5, {}, 0x1}]}, 0x401}) 21:44:37 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:44:37 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x154, 0x0, 0x700}, 0x0) 21:44:37 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x174, 0x700000000000000}, 0x0) 21:44:37 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) [ 3110.963232][T27732] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 3110.969799][T27732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) 21:44:37 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x155, 0x0, 0x700}, 0x0) 21:44:37 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x175, 0x700000000000000}, 0x0) [ 3111.010366][T27732] vhci_hcd vhci_hcd.0: Device attached [ 3111.032634][T27735] vhci_hcd: connection closed [ 3111.032887][ T7604] vhci_hcd: stop threads [ 3111.043154][T10727] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3111.052463][T10727] ath9k_htc: Failed to initialize the device 21:44:37 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x156, 0x0, 0x700}, 0x0) [ 3111.063711][ T7604] vhci_hcd: release socket [ 3111.068828][T27825] usb 1-1: ath9k_htc: USB layer deinitialized [ 3111.070426][ T7604] vhci_hcd: disconnect device [ 3111.280851][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3111.288037][ T3667] ath9k_htc: Failed to initialize the device [ 3111.294744][ T22] usb 3-1: ath9k_htc: USB layer deinitialized [ 3111.330824][ T3666] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3111.480952][T27825] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 3111.700900][ T22] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3111.850904][ T3666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3111.860100][ T3666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3111.873239][ T3666] usb 2-1: Product: syz [ 3111.877856][ T3666] usb 2-1: Manufacturer: syz [ 3111.882711][ T3666] usb 2-1: SerialNumber: syz [ 3111.922543][ T3666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3112.050903][T27825] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3112.060018][T27825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3112.068308][T27825] usb 1-1: Product: syz [ 3112.073072][T27825] usb 1-1: Manufacturer: syz [ 3112.077773][T27825] usb 1-1: SerialNumber: syz [ 3112.154765][T27825] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3112.260981][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3112.270050][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3112.278413][ T22] usb 3-1: Product: syz [ 3112.282880][ T22] usb 3-1: Manufacturer: syz [ 3112.289009][ T22] usb 3-1: SerialNumber: syz [ 3112.342138][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3112.490905][T27749] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3112.840909][T27825] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3112.914985][ T3667] usb 2-1: USB disconnect, device number 95 [ 3113.011097][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3113.123584][T27760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3113.134447][T27760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3113.177727][T27741] could not allocate digest TFM handle hmac(sha256-neon) [ 3113.187035][T27978] usb 1-1: USB disconnect, device number 118 [ 3113.263245][T27767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3113.273149][T27767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3113.283628][T27767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3113.292613][T27738] could not allocate digest TFM handle hmac(sha256-neon) [ 3113.300417][T27767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 21:44:39 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x101}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x8, 0x9c2a, 0x5}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0002040080d09ddcdf46e52a1adf94d166c53108f8"]) 21:44:39 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x176, 0x700000000000000}, 0x0) 21:44:39 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x157, 0x0, 0x700}, 0x0) 21:44:39 executing program 5: syz_usbip_server_init(0x1) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4]}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0xfffff801, 0x5, 0x1, 'queue0\x00', 0x1}) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x2, 0x4, 0x0, 0x5, {r1, r2/1000+10000}, {0x4, 0x1, 0x5, 0xfd, 0x7, 0x8, "5f9d1e77"}, 0x0, 0x1, {&(0x7f0000000040)=[{0x7, 0x8, {0x2}, 0x3f}, {0x8d0b, 0xa5, {}, 0x1}]}, 0x401}) [ 3113.316380][T24210] usb 3-1: USB disconnect, device number 124 21:44:39 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x177, 0x700000000000000}, 0x0) [ 3113.358330][T27776] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 3113.364888][T27776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3113.377389][T27776] vhci_hcd vhci_hcd.0: Device attached [ 3113.391042][T27778] vhci_hcd: connection closed [ 3113.391466][T16845] vhci_hcd: stop threads [ 3113.400415][T16845] vhci_hcd: release socket [ 3113.408236][T16845] vhci_hcd: disconnect device [ 3113.520974][T27749] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3113.528120][T27749] ath9k_htc: Failed to initialize the device [ 3113.534975][ T3667] usb 2-1: ath9k_htc: USB layer deinitialized 21:44:39 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:44:39 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x158, 0x0, 0x700}, 0x0) 21:44:39 executing program 5: syz_usbip_server_init(0x1) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4]}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0xfffff801, 0x5, 0x1, 'queue0\x00', 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x2, 0x4, 0x0, 0x5, {r1, r2/1000+10000}, {0x4, 0x1, 0x5, 0xfd, 0x7, 0x8, "5f9d1e77"}, 0x0, 0x1, {&(0x7f0000000040)=[{0x7, 0x8, {0x2}, 0x3f}, {0x8d0b, 0xa5, {}, 0x1}]}, 0x401}) syz_usbip_server_init(0x1) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4]}, 0x80) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0xfffff801, 0x5, 0x1, 'queue0\x00', 0x1}) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x2, 0x4, 0x0, 0x5, {r1, r2/1000+10000}, {0x4, 0x1, 0x5, 0xfd, 0x7, 0x8, "5f9d1e77"}, 0x0, 0x1, {&(0x7f0000000040)=[{0x7, 0x8, {0x2}, 0x3f}, {0x8d0b, 0xa5, {}, 0x1}]}, 0x401}) (async) 21:44:39 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:39 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x178, 0x700000000000000}, 0x0) 21:44:39 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x179, 0x700000000000000}, 0x0) 21:44:39 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x159, 0x0, 0x700}, 0x0) [ 3113.729837][T27795] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 3113.736402][T27795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3113.773990][T27795] vhci_hcd vhci_hcd.0: Device attached [ 3113.795735][T27797] vhci_hcd: connection closed [ 3113.795965][T16845] vhci_hcd: stop threads [ 3113.813966][T16845] vhci_hcd: release socket [ 3113.818725][T16845] vhci_hcd: disconnect device [ 3113.920948][T27825] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3113.929437][T27825] ath9k_htc: Failed to initialize the device [ 3113.936167][T27978] usb 1-1: ath9k_htc: USB layer deinitialized [ 3114.080991][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3114.088003][ T9283] ath9k_htc: Failed to initialize the device [ 3114.090886][ T3667] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 3114.101734][T24210] usb 3-1: ath9k_htc: USB layer deinitialized [ 3114.320983][T27978] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3114.460916][T24210] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3114.631005][ T3667] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3114.640670][ T3667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3114.648797][ T3667] usb 2-1: Product: syz [ 3114.653130][ T3667] usb 2-1: Manufacturer: syz [ 3114.657743][ T3667] usb 2-1: SerialNumber: syz [ 3114.712622][ T3667] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3114.881156][T27978] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3114.890258][T27978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3114.898961][T27978] usb 1-1: Product: syz [ 3114.903512][T27978] usb 1-1: Manufacturer: syz [ 3114.908138][T27978] usb 1-1: SerialNumber: syz [ 3114.962754][T27978] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3114.981320][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3114.990400][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3114.998649][T24210] usb 3-1: Product: syz [ 3115.003503][T24210] usb 3-1: Manufacturer: syz [ 3115.008136][T24210] usb 3-1: SerialNumber: syz [ 3115.051609][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3115.281144][ T3667] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3115.620850][T27978] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3115.620982][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3115.701792][ T9283] usb 2-1: USB disconnect, device number 96 [ 3115.896453][T27816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3115.910174][T27816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3115.953701][T27800] could not allocate digest TFM handle hmac(sha256-neon) [ 3115.965307][T27825] usb 1-1: USB disconnect, device number 119 [ 3116.037896][T27979] usb 3-1: USB disconnect, device number 125 [ 3116.320844][ T3667] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3116.327907][ T3667] ath9k_htc: Failed to initialize the device [ 3116.334447][ T9283] usb 2-1: ath9k_htc: USB layer deinitialized 21:44:42 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x101}) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x8, 0x9c2a, 0x5}) (async, rerun: 64) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0002040080d09ddcdf46e52a1adf94d166c53108f8"]) 21:44:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17a, 0x700000000000000}, 0x0) 21:44:42 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x151, 0x700000000000000}, 0x0) 21:44:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15a, 0x0, 0x700}, 0x0) 21:44:42 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:42 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:42 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x101}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x8, 0x9c2a, 0x5}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0002040080d09ddcdf46e52a1adf94d166c53108f8"]) 21:44:42 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x101}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x8, 0x9c2a, 0x5}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0002040080d09ddcdf46e52a1adf94d166c53108f8"]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x101}) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x8, 0x9c2a, 0x5}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0002040080d09ddcdf46e52a1adf94d166c53108f8"]) (async) 21:44:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17b, 0x700000000000000}, 0x0) 21:44:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15b, 0x0, 0x700}, 0x0) 21:44:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15c, 0x0, 0x700}, 0x0) 21:44:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17c, 0x700000000000000}, 0x0) [ 3116.644003][T27978] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3116.657685][T27978] ath9k_htc: Failed to initialize the device [ 3116.665094][T27825] usb 1-1: ath9k_htc: USB layer deinitialized 21:44:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15d, 0x0, 0x700}, 0x0) 21:44:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15e, 0x0, 0x700}, 0x0) 21:44:42 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17e, 0x700000000000000}, 0x0) [ 3116.721039][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3116.728824][T24210] ath9k_htc: Failed to initialize the device [ 3116.743044][T27979] usb 3-1: ath9k_htc: USB layer deinitialized [ 3116.862025][T27785] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 3116.921105][ T9283] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 3117.080974][T27825] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 3117.131163][T27979] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3117.451058][T27785] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3117.460465][T27785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.468752][T27785] usb 2-1: Product: syz [ 3117.473364][T27785] usb 2-1: Manufacturer: syz [ 3117.478084][T27785] usb 2-1: SerialNumber: syz [ 3117.522147][T27785] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3117.541207][ T9283] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3117.557092][ T9283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.565709][ T9283] usb 6-1: Product: syz [ 3117.569890][ T9283] usb 6-1: Manufacturer: syz [ 3117.574839][ T9283] usb 6-1: SerialNumber: syz [ 3117.622539][ T9283] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3117.660999][T27825] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3117.670644][T27825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.679078][T27825] usb 1-1: Product: syz [ 3117.683903][T27825] usb 1-1: Manufacturer: syz [ 3117.688592][T27825] usb 1-1: SerialNumber: syz [ 3117.700959][T27979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3117.710020][T27979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.719101][T27979] usb 3-1: Product: syz [ 3117.723562][T27979] usb 3-1: Manufacturer: syz [ 3117.728178][T27979] usb 3-1: SerialNumber: syz [ 3117.733795][T27825] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3117.802023][T27979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3118.211139][T27785] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3118.291157][ T9283] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3118.411762][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3118.481118][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3118.643804][T27978] usb 2-1: USB disconnect, device number 97 [ 3118.719230][T24210] usb 6-1: USB disconnect, device number 67 [ 3118.741497][T27829] could not allocate digest TFM handle hmac(sha256-neon) [ 3118.750280][T27843] usb 1-1: USB disconnect, device number 120 [ 3118.895040][T27749] usb 3-1: USB disconnect, device number 126 21:44:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x15f, 0x0, 0x700}, 0x0) 21:44:45 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:45 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:45 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="02420f3e38d55a175a683f10ce00008031bc62"]) 21:44:45 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17f, 0x700000000000000}, 0x0) 21:44:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x160, 0x0, 0x700}, 0x0) 21:44:45 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:45 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x180, 0x700000000000000}, 0x0) 21:44:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x161, 0x0, 0x700}, 0x0) 21:44:45 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) [ 3119.285740][T27785] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3119.292992][T27785] ath9k_htc: Failed to initialize the device [ 3119.308462][T27978] usb 2-1: ath9k_htc: USB layer deinitialized 21:44:45 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x181, 0x700000000000000}, 0x0) 21:44:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x162, 0x0, 0x700}, 0x0) 21:44:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x163, 0x0, 0x700}, 0x0) [ 3119.361384][ T9283] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3119.379124][ T9283] ath9k_htc: Failed to initialize the device [ 3119.393170][T24210] usb 6-1: ath9k_htc: USB layer deinitialized [ 3119.451204][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3119.459925][ T22] ath9k_htc: Failed to initialize the device [ 3119.466325][T27843] usb 1-1: ath9k_htc: USB layer deinitialized [ 3119.521046][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3119.528059][T27825] ath9k_htc: Failed to initialize the device [ 3119.543300][T27749] usb 3-1: ath9k_htc: USB layer deinitialized [ 3119.860843][T27843] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 3119.900868][T27749] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3120.421178][T27749] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3120.430312][T27749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3120.438447][T27749] usb 3-1: Product: syz [ 3120.442756][T27749] usb 3-1: Manufacturer: syz [ 3120.447882][T27749] usb 3-1: SerialNumber: syz [ 3120.461091][T27843] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3120.470198][T27843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3120.479303][T27843] usb 1-1: Product: syz [ 3120.484056][T27843] usb 1-1: Manufacturer: syz [ 3120.488811][T27843] usb 1-1: SerialNumber: syz [ 3120.501656][T27749] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3120.531644][T27843] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3121.090851][T27749] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3121.202815][T27825] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3121.501477][ T22] usb 3-1: USB disconnect, device number 127 [ 3121.515701][T27881] could not allocate digest TFM handle hmac(sha256-neon) [ 3121.527692][T27843] usb 1-1: USB disconnect, device number 121 21:44:48 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x182, 0x700000000000000}, 0x0) 21:44:48 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x164, 0x0, 0x700}, 0x0) 21:44:48 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:48 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="02420f3e38d55a175a683f10ce00008031bc62"]) 21:44:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x165, 0x0, 0x700}, 0x0) 21:44:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x183, 0x700000000000000}, 0x0) 21:44:48 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x166, 0x0, 0x700}, 0x0) 21:44:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x184, 0x700000000000000}, 0x0) 21:44:48 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) [ 3122.160875][T27749] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3122.187784][T27749] ath9k_htc: Failed to initialize the device [ 3122.203661][ T22] usb 3-1: ath9k_htc: USB layer deinitialized [ 3122.242734][T27825] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3122.249742][T27825] ath9k_htc: Failed to initialize the device [ 3122.263158][T27843] usb 1-1: ath9k_htc: USB layer deinitialized 21:44:48 executing program 0: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:48 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x185, 0x700000000000000}, 0x0) 21:44:48 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:48 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x167, 0x0, 0x700}, 0x0) [ 3122.330127][T27913] could not allocate digest TFM handle hmac(sha256-neon) 21:44:48 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) [ 3122.610933][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3123.170949][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3123.180449][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.189234][ T22] usb 3-1: Product: syz [ 3123.194311][ T22] usb 3-1: Manufacturer: syz [ 3123.198922][ T22] usb 3-1: SerialNumber: syz [ 3123.251807][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3123.890880][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3124.298663][T27843] usb 3-1: USB disconnect, device number 2 21:44:50 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="02420f3e38d55a175a683f10ce00008031bc62"]) 21:44:50 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x168, 0x0, 0x700}, 0x0) 21:44:50 executing program 0: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:50 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x186, 0x700000000000000}, 0x0) 21:44:50 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:50 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:51 executing program 0: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x169, 0x0, 0x700}, 0x0) 21:44:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x187, 0x700000000000000}, 0x0) 21:44:51 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:51 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16a, 0x0, 0x700}, 0x0) [ 3124.970906][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3124.980634][ T22] ath9k_htc: Failed to initialize the device [ 3125.004178][T27843] usb 3-1: ath9k_htc: USB layer deinitialized [ 3125.115113][T27962] could not allocate digest TFM handle hmac(sha256-neon) [ 3125.390808][T27843] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3125.911312][T27843] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3125.920366][T27843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.929365][T27843] usb 3-1: Product: syz [ 3125.933869][T27843] usb 3-1: Manufacturer: syz [ 3125.938494][T27843] usb 3-1: SerialNumber: syz [ 3125.981741][T27843] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3126.590932][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3126.997038][T10727] usb 3-1: USB disconnect, device number 3 21:44:53 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="82c48b077c6af035420988beb0eab96e29371de30a4eb0733c7531f9933cc54c2e5e59d81a81d7f968"]) 21:44:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x188, 0x700000000000000}, 0x0) 21:44:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16b, 0x0, 0x700}, 0x0) 21:44:53 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:53 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) 21:44:53 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x189, 0x700000000000000}, 0x0) 21:44:53 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) 21:44:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16c, 0x0, 0x700}, 0x0) 21:44:53 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) 21:44:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18a, 0x700000000000000}, 0x0) 21:44:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16d, 0x0, 0x700}, 0x0) [ 3127.680922][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3127.689201][ T9283] ath9k_htc: Failed to initialize the device [ 3127.705794][T10727] usb 3-1: ath9k_htc: USB layer deinitialized [ 3128.060828][T10727] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3128.580945][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3128.589999][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.598097][T10727] usb 3-1: Product: syz [ 3128.602395][T10727] usb 3-1: Manufacturer: syz [ 3128.607010][T10727] usb 3-1: SerialNumber: syz [ 3128.652551][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3129.220881][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3129.631513][T27843] usb 3-1: USB disconnect, device number 4 21:44:56 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="82c48b077c6af035420988beb0eab96e29371de30a4eb0733c7531f9933cc54c2e5e59d81a81d7f968"]) 21:44:56 executing program 5: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:56 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18b, 0x700000000000000}, 0x0) 21:44:56 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16e, 0x0, 0x700}, 0x0) 21:44:56 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:56 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:56 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:56 executing program 5: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:56 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18c, 0x700000000000000}, 0x0) 21:44:56 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x16f, 0x0, 0x700}, 0x0) 21:44:56 executing program 5: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:56 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18d, 0x700000000000000}, 0x0) [ 3130.249265][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3130.257805][T10727] ath9k_htc: Failed to initialize the device [ 3130.273476][T27843] usb 3-1: ath9k_htc: USB layer deinitialized [ 3130.664438][T27843] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3131.201005][T27843] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3131.210121][T27843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3131.218769][T27843] usb 3-1: Product: syz [ 3131.223233][T27843] usb 3-1: Manufacturer: syz [ 3131.229064][T27843] usb 3-1: SerialNumber: syz [ 3131.281663][T27843] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3131.910925][T27843] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3132.319319][T10727] usb 3-1: USB disconnect, device number 5 21:44:58 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="82c48b077c6af035420988beb0eab96e29371de30a4eb0733c7531f9933cc54c2e5e59d81a81d7f968"]) 21:44:58 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:44:58 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x170, 0x0, 0x700}, 0x0) 21:44:58 executing program 5: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:58 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18e, 0x700000000000000}, 0x0) 21:44:58 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:44:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18f, 0x700000000000000}, 0x0) 21:44:59 executing program 5: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) 21:44:59 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}}) 21:44:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x171, 0x0, 0x700}, 0x0) 21:44:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:44:59 executing program 5: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x700000000000000}, 0x0) [ 3132.961490][T27843] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3132.981513][T27843] ath9k_htc: Failed to initialize the device [ 3132.992170][T10727] usb 3-1: ath9k_htc: USB layer deinitialized [ 3133.100872][ T9283] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3133.110995][T28045] could not allocate digest TFM handle hmac(sha256-neon) [ 3133.380882][T10727] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3133.702246][ T9283] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3133.711361][ T9283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.719372][ T9283] usb 2-1: Product: syz [ 3133.723978][ T9283] usb 2-1: Manufacturer: syz [ 3133.728575][ T9283] usb 2-1: SerialNumber: syz [ 3133.791638][ T9283] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3133.901262][T10727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3133.910339][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.918857][T10727] usb 3-1: Product: syz [ 3133.923819][T10727] usb 3-1: Manufacturer: syz [ 3133.928448][T10727] usb 3-1: SerialNumber: syz [ 3133.982137][T10727] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3134.460928][ T9283] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3134.550910][T10727] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3134.665315][T24210] usb 2-1: USB disconnect, device number 98 [ 3134.955935][ T22] usb 3-1: USB disconnect, device number 6 21:45:01 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:45:01 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x172, 0x0, 0x700}, 0x0) 21:45:01 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x191, 0x700000000000000}, 0x0) 21:45:01 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:01 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:01 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:45:01 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:01 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x173, 0x0, 0x700}, 0x0) 21:45:01 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:01 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x192, 0x700000000000000}, 0x0) 21:45:01 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:01 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x174, 0x0, 0x700}, 0x0) [ 3135.521161][ T9283] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3135.550871][ T9283] ath9k_htc: Failed to initialize the device [ 3135.558413][T24210] usb 2-1: ath9k_htc: USB layer deinitialized [ 3135.600830][T10727] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3135.609059][T10727] ath9k_htc: Failed to initialize the device [ 3135.627384][ T22] usb 3-1: ath9k_htc: USB layer deinitialized [ 3135.940839][T24210] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3136.020782][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3136.480936][T24210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3136.490006][T24210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.498169][T24210] usb 2-1: Product: syz [ 3136.502492][T24210] usb 2-1: Manufacturer: syz [ 3136.507090][T24210] usb 2-1: SerialNumber: syz [ 3136.555541][T24210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3136.590886][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3136.600066][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.608326][ T22] usb 3-1: Product: syz [ 3136.612777][ T22] usb 3-1: Manufacturer: syz [ 3136.617392][ T22] usb 3-1: SerialNumber: syz [ 3136.661623][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3137.130887][T24210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3137.240976][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3137.340024][T27825] usb 2-1: USB disconnect, device number 99 [ 3137.456399][T28068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3137.466019][T28068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3137.683586][ T3667] usb 3-1: USB disconnect, device number 7 21:45:04 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:45:04 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x193, 0x700000000000000}, 0x0) 21:45:04 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:04 executing program 0: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:04 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x175, 0x0, 0x700}, 0x0) 21:45:04 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) [ 3138.160899][T24210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3138.167852][T24210] ath9k_htc: Failed to initialize the device [ 3138.174868][T27825] usb 2-1: ath9k_htc: USB layer deinitialized 21:45:04 executing program 0: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:04 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x194, 0x700000000000000}, 0x0) 21:45:04 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x176, 0x0, 0x700}, 0x0) 21:45:04 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:04 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:04 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x177, 0x0, 0x700}, 0x0) [ 3138.320822][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3138.329264][ T9283] ath9k_htc: Failed to initialize the device [ 3138.343718][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3138.580806][T27825] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3138.740868][ T3667] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3139.110807][T27825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3139.120421][T27825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3139.128719][T27825] usb 2-1: Product: syz [ 3139.133276][T27825] usb 2-1: Manufacturer: syz [ 3139.138019][T27825] usb 2-1: SerialNumber: syz [ 3139.181624][T27825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3139.330885][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3139.339960][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3139.348044][ T3667] usb 3-1: Product: syz [ 3139.352309][ T3667] usb 3-1: Manufacturer: syz [ 3139.356922][ T3667] usb 3-1: SerialNumber: syz [ 3139.401911][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3139.750942][T27825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3139.956349][T24210] usb 2-1: USB disconnect, device number 100 [ 3139.990920][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3140.192910][T28091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3140.202152][T28091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3140.403824][T27843] usb 3-1: USB disconnect, device number 8 [ 3140.810943][T27825] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3140.817905][T27825] ath9k_htc: Failed to initialize the device [ 3140.828900][T24210] usb 2-1: ath9k_htc: USB layer deinitialized 21:45:07 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (rerun: 64) 21:45:07 executing program 0: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x195, 0x700000000000000}, 0x0) 21:45:07 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x178, 0x0, 0x700}, 0x0) 21:45:07 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) 21:45:07 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:07 executing program 0: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x179, 0x0, 0x700}, 0x0) 21:45:07 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x196, 0x700000000000000}, 0x0) 21:45:07 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:07 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17a, 0x0, 0x700}, 0x0) [ 3141.040824][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3141.048278][ T3667] ath9k_htc: Failed to initialize the device [ 3141.064571][T27843] usb 3-1: ath9k_htc: USB layer deinitialized [ 3141.330940][T24210] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3141.500793][T27843] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3141.900905][T24210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3141.910069][T24210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.918364][T24210] usb 2-1: Product: syz [ 3141.922803][T24210] usb 2-1: Manufacturer: syz [ 3141.927489][T24210] usb 2-1: SerialNumber: syz [ 3141.971719][T24210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3142.070924][T27843] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3142.079989][T27843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3142.089196][T27843] usb 3-1: Product: syz [ 3142.093441][T27843] usb 3-1: Manufacturer: syz [ 3142.098219][T27843] usb 3-1: SerialNumber: syz [ 3142.142084][T27843] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3142.540877][T24210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3142.752642][ T22] usb 2-1: USB disconnect, device number 101 [ 3142.780872][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3142.985582][T28116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3142.995040][T28116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3143.007295][T28116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3143.015968][T28116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3143.027133][T28116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3143.035979][T28116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3143.047815][T28116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3143.057032][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.057079][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.071854][T28116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3143.083760][T28116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3143.093306][T28116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3143.600907][T24210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3143.607900][T24210] ath9k_htc: Failed to initialize the device [ 3143.614379][ T22] usb 2-1: ath9k_htc: USB layer deinitialized [ 3143.841015][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3143.848818][T27825] ath9k_htc: Failed to initialize the device 21:45:10 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:10 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) syz_usbip_server_init(0x1) 21:45:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x197, 0x700000000000000}, 0x0) 21:45:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17b, 0x0, 0x700}, 0x0) 21:45:10 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) 21:45:10 executing program 0: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) [ 3144.346253][T27843] usb 3-1: USB disconnect, device number 9 21:45:10 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17c, 0x0, 0x700}, 0x0) 21:45:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x198, 0x700000000000000}, 0x0) [ 3144.394614][T27843] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:10 executing program 0: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x199, 0x700000000000000}, 0x0) 21:45:10 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17d, 0x0, 0x700}, 0x0) [ 3144.680786][ T22] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3144.782852][T27843] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3145.260902][ T22] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3145.270090][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.278171][ T22] usb 2-1: Product: syz [ 3145.282841][ T22] usb 2-1: Manufacturer: syz [ 3145.287460][ T22] usb 2-1: SerialNumber: syz [ 3145.331552][ T22] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3145.345494][T27843] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3145.356303][T27843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.374615][T27843] usb 3-1: Product: syz [ 3145.378802][T27843] usb 3-1: Manufacturer: syz [ 3145.385097][T27843] usb 3-1: SerialNumber: syz [ 3145.431617][T27843] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3145.940947][ T22] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3146.001097][T27785] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3146.153890][T27843] usb 2-1: USB disconnect, device number 102 [ 3146.416853][T28144] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 3146.423468][T28144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3146.433046][T28144] vhci_hcd vhci_hcd.0: Device attached [ 3146.440516][ T3667] usb 3-1: USB disconnect, device number 10 [ 3146.442097][T28161] vhci_hcd: connection closed [ 3146.448862][ T7608] vhci_hcd: stop threads [ 3146.460816][ T7608] vhci_hcd: release socket [ 3146.465330][ T7608] vhci_hcd: disconnect device 21:45:13 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) syz_usbip_server_init(0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) (async) syz_usbip_server_init(0x1) (async) 21:45:13 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:13 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19a, 0x700000000000000}, 0x0) 21:45:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17e, 0x0, 0x700}, 0x0) 21:45:13 executing program 0: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:13 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) 21:45:13 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:13 executing program 0: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x17f, 0x0, 0x700}, 0x0) [ 3146.960980][ T22] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3146.986331][ T22] ath9k_htc: Failed to initialize the device [ 3146.993234][T27843] usb 2-1: ath9k_htc: USB layer deinitialized 21:45:13 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19b, 0x700000000000000}, 0x0) 21:45:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x180, 0x0, 0x700}, 0x0) 21:45:13 executing program 0: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) [ 3147.280882][T27785] usb 3-1: Service connection timeout for: 256 [ 3147.287090][T27785] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3147.296383][T27785] ath9k_htc: Failed to initialize the device [ 3147.302936][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3147.390832][T27843] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3147.670840][ T3667] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 3147.920860][T27843] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3147.930020][T27843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3147.938847][T27843] usb 2-1: Product: syz [ 3147.943339][T27843] usb 2-1: Manufacturer: syz [ 3147.947959][T27843] usb 2-1: SerialNumber: syz [ 3147.991591][T27843] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3148.210884][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3148.220102][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.228878][ T3667] usb 3-1: Product: syz [ 3148.233391][ T3667] usb 3-1: Manufacturer: syz [ 3148.238034][ T3667] usb 3-1: SerialNumber: syz [ 3148.291777][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3148.630988][T27843] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3148.835497][T27785] usb 2-1: USB disconnect, device number 103 [ 3148.860881][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3149.263673][T28174] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 3149.270209][T28174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3149.278294][T28174] vhci_hcd vhci_hcd.0: Device attached [ 3149.286549][T28174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3149.289606][T28192] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 3149.300546][T28174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3149.301402][T28192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3149.316955][T28192] vhci_hcd vhci_hcd.0: Device attached [ 3149.488321][T28189] vhci_hcd: connection closed [ 3149.490157][T28193] vhci_hcd: connection closed [ 3149.490585][ T22] usb 3-1: USB disconnect, device number 11 [ 3149.507950][T16853] vhci_hcd: stop threads [ 3149.512283][T16853] vhci_hcd: release socket [ 3149.516751][T16853] vhci_hcd: disconnect device [ 3149.522102][T16853] vhci_hcd: stop threads [ 3149.526359][T16853] vhci_hcd: release socket [ 3149.531289][T16853] vhci_hcd: disconnect device [ 3149.550801][T27749] usb 13-1: new low-speed USB device number 7 using vhci_hcd [ 3149.558852][T27749] usb 13-1: enqueue for inactive port 0 [ 3149.641123][T27749] vhci_hcd: vhci_device speed not set [ 3149.680805][T27843] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3149.687765][T27843] ath9k_htc: Failed to initialize the device [ 3149.694127][T27785] usb 2-1: ath9k_htc: USB layer deinitialized 21:45:16 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) syz_usbip_server_init(0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) (async) syz_usbip_server_init(0x1) (async) 21:45:16 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19c, 0x700000000000000}, 0x0) 21:45:16 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x181, 0x0, 0x700}, 0x0) 21:45:16 executing program 0: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:16 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:16 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) 21:45:16 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x182, 0x0, 0x700}, 0x0) 21:45:16 executing program 0: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:16 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19d, 0x700000000000000}, 0x0) 21:45:16 executing program 0: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x700000000000000}, 0x0) 21:45:16 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x183, 0x0, 0x700}, 0x0) 21:45:16 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) [ 3150.170997][ T3667] usb 3-1: Service connection timeout for: 256 [ 3150.179630][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3150.200130][ T3667] ath9k_htc: Failed to initialize the device [ 3150.216333][ T22] usb 3-1: ath9k_htc: USB layer deinitialized [ 3150.290792][T27785] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3150.571036][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3150.810952][T27785] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3150.820015][T27785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3150.834087][T27785] usb 2-1: Product: syz [ 3150.838260][T27785] usb 2-1: Manufacturer: syz [ 3150.844112][T27785] usb 2-1: SerialNumber: syz [ 3150.882386][T27785] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3151.100897][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3151.110107][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.120486][ T22] usb 3-1: Product: syz [ 3151.124857][ T22] usb 3-1: Manufacturer: syz [ 3151.129534][ T22] usb 3-1: SerialNumber: syz [ 3151.181811][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3151.460909][T27785] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3151.750849][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3151.869518][T27825] usb 2-1: USB disconnect, device number 104 [ 3152.155909][T28207] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 3152.162446][T28207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3152.170515][T28207] vhci_hcd vhci_hcd.0: Device attached [ 3152.178808][T28207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3152.181960][T28226] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 3152.193665][T28226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3152.201961][T28226] vhci_hcd vhci_hcd.0: Device attached [ 3152.209655][T28207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3152.381627][T28223] vhci_hcd: connection closed [ 3152.382281][T27843] usb 3-1: USB disconnect, device number 12 [ 3152.384057][T28227] vhci_hcd: connection closed [ 3152.395613][T16845] vhci_hcd: stop threads [ 3152.404660][T16845] vhci_hcd: release socket [ 3152.409138][T16845] vhci_hcd: disconnect device [ 3152.415061][T16845] vhci_hcd: stop threads [ 3152.419323][T16845] vhci_hcd: release socket [ 3152.424042][T16845] vhci_hcd: disconnect device [ 3152.432933][T27978] usb 13-1: new low-speed USB device number 8 using vhci_hcd [ 3152.441069][T27978] usb 13-1: enqueue for inactive port 0 [ 3152.480981][T27785] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3152.491756][T27785] ath9k_htc: Failed to initialize the device [ 3152.497918][T27825] usb 2-1: ath9k_htc: USB layer deinitialized [ 3152.520878][T27978] vhci_hcd: vhci_device speed not set 21:45:19 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b9d09fac", {0x3, 0x107, 0x0, 0x39, 0x100, 0x2, 0x9}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:19 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19e, 0x700000000000000}, 0x0) 21:45:19 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x184, 0x0, 0x700}, 0x0) 21:45:19 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:19 executing program 5: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:19 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) syz_usbip_server_init(0x1) 21:45:19 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x185, 0x0, 0x700}, 0x0) 21:45:19 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:19 executing program 5: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:19 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19f, 0x700000000000000}, 0x0) 21:45:19 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:19 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x186, 0x0, 0x700}, 0x0) [ 3153.040788][ T22] usb 3-1: Service connection timeout for: 256 [ 3153.047307][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3153.066688][ T22] ath9k_htc: Failed to initialize the device [ 3153.078234][T27843] usb 3-1: ath9k_htc: USB layer deinitialized [ 3153.170877][ T3667] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3153.470801][T27843] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3153.690852][ T3667] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3153.700002][ T3667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3153.713020][ T3667] usb 2-1: Product: syz [ 3153.717186][ T3667] usb 2-1: Manufacturer: syz [ 3153.724136][ T3667] usb 2-1: SerialNumber: syz [ 3153.771678][ T3667] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3154.013863][T27843] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3154.022992][T27843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.031671][T27843] usb 3-1: Product: syz [ 3154.035859][T27843] usb 3-1: Manufacturer: syz [ 3154.040455][T27843] usb 3-1: SerialNumber: syz [ 3154.091646][T27843] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3154.340879][ T3667] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3154.740957][T27843] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3154.758195][T28233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 3154.764734][T28233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3154.773161][T28233] vhci_hcd vhci_hcd.0: Device attached [ 3154.786931][ T3666] usb 2-1: USB disconnect, device number 105 [ 3154.791583][T28253] vhci_hcd: connection closed [ 3154.793390][ T7608] vhci_hcd: stop threads [ 3154.806513][ T7608] vhci_hcd: release socket [ 3154.811378][ T7608] vhci_hcd: disconnect device [ 3155.155155][T28241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3155.163862][T28241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3155.176709][T27978] usb 3-1: USB disconnect, device number 13 [ 3155.600797][ T3667] usb 2-1: Service connection timeout for: 256 [ 3155.607233][ T3667] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3155.615704][ T3667] ath9k_htc: Failed to initialize the device [ 3155.621904][ T3666] usb 2-1: ath9k_htc: USB layer deinitialized 21:45:21 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b9d09fac", {0x3, 0x107, 0x0, 0x39, 0x100, 0x2, 0x9}}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a0, 0x700000000000000}, 0x0) 21:45:21 executing program 5: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:21 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x190, 0x700000000000000}, 0x0) 21:45:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x187, 0x0, 0x700}, 0x0) 21:45:21 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) syz_usbip_server_init(0x1) 21:45:21 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x190, 0x700000000000000}, 0x0) 21:45:21 executing program 5: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x188, 0x0, 0x700}, 0x0) 21:45:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a1, 0x700000000000000}, 0x0) 21:45:21 executing program 5: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x189, 0x0, 0x700}, 0x0) [ 3155.760843][T27843] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3155.773839][T27843] ath9k_htc: Failed to initialize the device [ 3155.781736][T27978] usb 3-1: ath9k_htc: USB layer deinitialized [ 3156.080832][ T3666] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3156.196484][T27978] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3156.600971][ T3666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3156.610017][ T3666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3156.624233][ T3666] usb 2-1: Product: syz [ 3156.628426][ T3666] usb 2-1: Manufacturer: syz [ 3156.633123][ T3666] usb 2-1: SerialNumber: syz [ 3156.671547][ T3666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3156.810846][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3156.819927][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3156.830215][T27978] usb 3-1: Product: syz [ 3156.834657][T27978] usb 3-1: Manufacturer: syz [ 3156.839260][T27978] usb 3-1: SerialNumber: syz [ 3156.894735][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3157.240978][ T3666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3157.540836][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3157.665783][T28264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 3157.672329][T28264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3157.680356][T28264] vhci_hcd vhci_hcd.0: Device attached [ 3157.694359][T27843] usb 2-1: USB disconnect, device number 106 [ 3157.708942][T28280] vhci_hcd: connection closed [ 3157.709340][T16853] vhci_hcd: stop threads [ 3157.721553][T16853] vhci_hcd: release socket [ 3157.725987][T16853] vhci_hcd: disconnect device [ 3157.742810][T28282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3157.753552][T28282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3157.942795][T24210] usb 3-1: USB disconnect, device number 14 21:45:24 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b9d09fac", {0x3, 0x107, 0x0, 0x39, 0x100, 0x2, 0x9}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b9d09fac", {0x3, 0x107, 0x0, 0x39, 0x100, 0x2, 0x9}}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) 21:45:24 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a2, 0x700000000000000}, 0x0) 21:45:24 executing program 5: socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17d, 0x700000000000000}, 0x0) 21:45:24 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x190, 0x700000000000000}, 0x0) 21:45:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18a, 0x0, 0x700}, 0x0) 21:45:24 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) syz_usbip_server_init(0x1) 21:45:24 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18b, 0x0, 0x700}, 0x0) 21:45:24 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a3, 0x700000000000000}, 0x0) [ 3158.490749][ T3666] usb 2-1: Service connection timeout for: 256 [ 3158.501007][ T3666] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 21:45:24 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a0, 0x700000000000000}, 0x0) 21:45:24 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) [ 3158.548681][ T3666] ath9k_htc: Failed to initialize the device [ 3158.561098][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3158.579709][T27843] usb 2-1: ath9k_htc: USB layer deinitialized 21:45:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18c, 0x0, 0x700}, 0x0) [ 3158.593670][T27978] ath9k_htc: Failed to initialize the device [ 3158.615364][T24210] usb 3-1: ath9k_htc: USB layer deinitialized [ 3158.950861][T27843] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3159.000829][T24210] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3159.500884][T27843] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3159.509955][T27843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3159.518229][T27843] usb 2-1: Product: syz [ 3159.522842][T27843] usb 2-1: Manufacturer: syz [ 3159.527465][T27843] usb 2-1: SerialNumber: syz [ 3159.530970][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3159.541369][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3159.549363][T24210] usb 3-1: Product: syz [ 3159.553674][T24210] usb 3-1: Manufacturer: syz [ 3159.558290][T24210] usb 3-1: SerialNumber: syz [ 3159.572309][T27843] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3159.612401][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3160.180847][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3160.240983][T27843] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3160.582746][T28294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.591508][T28294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.602864][T28294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.613349][T28309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.619208][T28294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.624791][T28309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.675169][T28293] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 3160.681797][T28293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3160.689912][T28293] vhci_hcd vhci_hcd.0: Device attached [ 3160.704477][T27749] usb 2-1: USB disconnect, device number 107 [ 3160.709212][T28310] vhci_hcd: connection closed [ 3160.711409][T16845] vhci_hcd: stop threads [ 3160.721102][T16845] vhci_hcd: release socket [ 3160.725637][T16845] vhci_hcd: disconnect device [ 3160.808191][T27978] usb 3-1: USB disconnect, device number 15 [ 3161.200770][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3161.207767][T24210] ath9k_htc: Failed to initialize the device [ 3161.215338][T27978] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:27 executing program 2: bpf$MAP_CREATE(0x6, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e", {0x3, 0x102, 0x0, 0x1f, 0x8000, 0x7, 0x7f}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0], 0x0, 0x8, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001840)={&(0x7f0000001080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r2, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001880), 0x0, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x53}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1c, '\x00', r1, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xd, 0x20, 0x1}, 0x10, r3}, 0x80) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:45:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a4, 0x700000000000000}, 0x0) 21:45:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b9d09fac", {0x3, 0x107, 0x0, 0x39, 0x100, 0x2, 0x9}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:27 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:45:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18d, 0x0, 0x700}, 0x0) 21:45:27 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a5, 0x700000000000000}, 0x0) 21:45:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18e, 0x0, 0x700}, 0x0) 21:45:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:45:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a6, 0x700000000000000}, 0x0) 21:45:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18f, 0x0, 0x700}, 0x0) 21:45:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a7, 0x700000000000000}, 0x0) [ 3161.521123][T27843] usb 2-1: Service connection timeout for: 256 [ 3161.527818][T27843] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3161.537329][T27843] ath9k_htc: Failed to initialize the device [ 3161.545080][T27749] usb 2-1: ath9k_htc: USB layer deinitialized [ 3161.610822][T27785] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 3161.680980][ T3666] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 3161.780807][T27978] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3161.900867][T27749] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3162.181032][T27785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3162.190210][T27785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.200921][ T3666] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3162.203569][T27785] usb 1-1: Product: syz [ 3162.210450][ T3666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.214413][T27785] usb 1-1: Manufacturer: syz [ 3162.227163][ T3666] usb 6-1: Product: syz [ 3162.230630][T27785] usb 1-1: SerialNumber: syz [ 3162.232009][ T3666] usb 6-1: Manufacturer: syz [ 3162.241642][ T3666] usb 6-1: SerialNumber: syz [ 3162.291768][T27785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3162.291768][ T3666] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3162.361023][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3162.370097][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.378444][T27978] usb 3-1: Product: syz [ 3162.382793][T27978] usb 3-1: Manufacturer: syz [ 3162.387407][T27978] usb 3-1: SerialNumber: syz [ 3162.421185][T27749] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3162.430249][T27749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.438849][T27749] usb 2-1: Product: syz [ 3162.441717][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3162.443379][T27749] usb 2-1: Manufacturer: syz [ 3162.456184][T27749] usb 2-1: SerialNumber: syz [ 3162.511567][T27749] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3162.870822][ T3666] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3162.961031][T27785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3163.080906][T27749] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3163.096635][T28326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.105402][T28326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3163.113828][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3163.327487][T10727] usb 6-1: USB disconnect, device number 68 [ 3163.377046][T28319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.388853][T28319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3163.400470][ T3667] usb 1-1: USB disconnect, device number 122 [ 3163.486783][T24210] usb 2-1: USB disconnect, device number 108 [ 3163.520494][T28323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.529492][T28323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3163.539171][T28323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.547809][T28323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3163.557220][T28338] usb 3-1: USB disconnect, device number 16 [ 3163.920809][ T3666] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3163.927945][ T3666] ath9k_htc: Failed to initialize the device [ 3163.934719][T10727] usb 6-1: ath9k_htc: USB layer deinitialized [ 3164.011028][T27785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3164.018628][T27785] ath9k_htc: Failed to initialize the device [ 3164.025362][ T3667] usb 1-1: ath9k_htc: USB layer deinitialized 21:45:30 executing program 2: bpf$MAP_CREATE(0x6, 0x0, 0x0) (async) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e", {0x3, 0x102, 0x0, 0x1f, 0x8000, 0x7, 0x7f}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0], 0x0, 0x8, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001840)={&(0x7f0000001080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r2, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001880), 0x0, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x53}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1c, '\x00', r1, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xd, 0x20, 0x1}, 0x10, r3}, 0x80) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:45:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x190, 0x0, 0x700}, 0x0) 21:45:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a8, 0x700000000000000}, 0x0) 21:45:30 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x18b, 0x700000000000000}, 0x0) 21:45:30 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:45:30 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a9, 0x700000000000000}, 0x0) 21:45:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x191, 0x0, 0x700}, 0x0) 21:45:30 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x192, 0x0, 0x700}, 0x0) 21:45:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1aa, 0x700000000000000}, 0x0) 21:45:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x193, 0x0, 0x700}, 0x0) [ 3164.173553][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3164.180567][T27825] ath9k_htc: Failed to initialize the device [ 3164.190445][T28338] usb 3-1: ath9k_htc: USB layer deinitialized [ 3164.320846][T27749] usb 2-1: Service connection timeout for: 256 [ 3164.327044][T27749] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3164.335489][T27749] ath9k_htc: Failed to initialize the device [ 3164.341927][T24210] usb 2-1: ath9k_htc: USB layer deinitialized [ 3164.440860][T10727] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 3164.530814][ T3667] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 3164.560973][T28338] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 3164.700871][T24210] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3164.960998][T10727] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3164.970416][T10727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.978894][T10727] usb 6-1: Product: syz [ 3164.983556][T10727] usb 6-1: Manufacturer: syz [ 3164.988223][T10727] usb 6-1: SerialNumber: syz [ 3165.041893][T10727] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3165.051140][ T3667] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3165.060208][ T3667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3165.071250][ T3667] usb 1-1: Product: syz [ 3165.075448][ T3667] usb 1-1: Manufacturer: syz [ 3165.080049][ T3667] usb 1-1: SerialNumber: syz [ 3165.084967][T28338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3165.095645][T28338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3165.104101][T28338] usb 3-1: Product: syz [ 3165.108256][T28338] usb 3-1: Manufacturer: syz [ 3165.114687][T28338] usb 3-1: SerialNumber: syz [ 3165.131523][ T3667] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3165.161915][T28338] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3165.220932][T24210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3165.230601][T24210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3165.239149][T24210] usb 2-1: Product: syz [ 3165.243586][T24210] usb 2-1: Manufacturer: syz [ 3165.248204][T24210] usb 2-1: SerialNumber: syz [ 3165.291820][T24210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3165.691121][T10727] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3165.700932][ T3667] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3165.740894][T28338] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3165.870968][ T3666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3165.916712][T27749] usb 6-1: USB disconnect, device number 69 [ 3166.079935][T27825] usb 2-1: USB disconnect, device number 109 [ 3166.145685][T28352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3166.154810][T24210] usb 1-1: USB disconnect, device number 123 [ 3166.155509][T28352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3166.170185][T28352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3166.179015][T28352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3166.188839][T28216] usb 3-1: USB disconnect, device number 17 21:45:32 executing program 2: bpf$MAP_CREATE(0x6, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e", {0x3, 0x102, 0x0, 0x1f, 0x8000, 0x7, 0x7f}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0], 0x0, 0x8, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001840)={&(0x7f0000001080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r2, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001880), 0x0, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xb, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x53}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1c, '\x00', r1, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xd, 0x20, 0x1}, 0x10, r3}, 0x80) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:45:32 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x194, 0x0, 0x700}, 0x0) 21:45:32 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ab, 0x700000000000000}, 0x0) 21:45:32 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:45:32 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:32 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:32 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ac, 0x700000000000000}, 0x0) 21:45:32 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x195, 0x0, 0x700}, 0x0) [ 3166.720923][T10727] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3166.727921][T10727] ath9k_htc: Failed to initialize the device [ 3166.747318][T27749] usb 6-1: ath9k_htc: USB layer deinitialized 21:45:33 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x196, 0x0, 0x700}, 0x0) 21:45:33 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ad, 0x700000000000000}, 0x0) [ 3166.800762][T28338] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3166.810200][T28338] ath9k_htc: Failed to initialize the device [ 3166.821387][T28216] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:33 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x197, 0x0, 0x700}, 0x0) 21:45:33 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ae, 0x700000000000000}, 0x0) [ 3166.960939][ T3667] usb 1-1: Service connection timeout for: 256 [ 3166.967659][ T3666] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3166.982175][ T3667] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3166.990475][ T3666] ath9k_htc: Failed to initialize the device [ 3166.997542][ T3667] ath9k_htc: Failed to initialize the device [ 3166.997617][T27825] usb 2-1: ath9k_htc: USB layer deinitialized [ 3167.011146][T24210] usb 1-1: ath9k_htc: USB layer deinitialized [ 3167.042037][T28372] could not allocate digest TFM handle hmac(sha256-neon) [ 3167.182258][T28216] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3167.380856][T27825] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3167.380989][T24210] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3167.700827][T28216] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3167.709873][T28216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.723237][T28216] usb 3-1: Product: syz [ 3167.727400][T28216] usb 3-1: Manufacturer: syz [ 3167.734442][T28216] usb 3-1: SerialNumber: syz [ 3167.781602][T28216] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3167.920896][T24210] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3167.930260][T24210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.938529][T24210] usb 1-1: Product: syz [ 3167.942932][T24210] usb 1-1: Manufacturer: syz [ 3167.947636][T24210] usb 1-1: SerialNumber: syz [ 3167.981031][T27825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3167.990874][T27825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.998895][T27825] usb 2-1: Product: syz [ 3168.001753][T24210] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3168.003603][T27825] usb 2-1: Manufacturer: syz [ 3168.020563][T27825] usb 2-1: SerialNumber: syz [ 3168.073163][T27825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3168.350848][T28216] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3168.581133][T24210] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3168.710928][T27825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3168.755891][T28381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3168.774861][T28381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3168.803026][T28381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3168.827964][T28381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3168.842300][T27978] usb 3-1: USB disconnect, device number 18 [ 3168.917679][ T3667] usb 2-1: USB disconnect, device number 110 [ 3169.046357][T27785] usb 1-1: USB disconnect, device number 124 21:45:35 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000803108f8"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x198, 0x0, 0x700}, 0x0) 21:45:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1af, 0x700000000000000}, 0x0) 21:45:35 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f00000002c0)={&(0x7f0000000240)={'hmac(sha256-neon)\x00'}, &(0x7f0000000280)="52c2b28745ccfd87fefce1ee5eaa2ac34d549ad6d5efeeb73a425838181b15a6d90a61e46a1eb254ca1f3965b0035fbe9373d6", 0x33}) 21:45:35 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3169.442546][T28216] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3169.449544][T28216] ath9k_htc: Failed to initialize the device [ 3169.456084][T27978] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:35 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x199, 0x0, 0x700}, 0x0) 21:45:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b0, 0x700000000000000}, 0x0) 21:45:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b1, 0x700000000000000}, 0x0) 21:45:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19a, 0x0, 0x700}, 0x0) 21:45:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b2, 0x700000000000000}, 0x0) 21:45:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19b, 0x0, 0x700}, 0x0) [ 3169.650816][ T22] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 3169.761723][T27825] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3169.768725][T27825] ath9k_htc: Failed to initialize the device [ 3169.775614][ T3667] usb 2-1: ath9k_htc: USB layer deinitialized [ 3169.860852][T27978] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3169.921080][T24210] usb 1-1: Service connection timeout for: 256 [ 3169.927287][T24210] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3169.936376][T24210] ath9k_htc: Failed to initialize the device [ 3169.942724][T27785] usb 1-1: ath9k_htc: USB layer deinitialized [ 3170.130927][ T3667] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3170.220999][ T22] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3170.230069][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.238857][ T22] usb 6-1: Product: syz [ 3170.245347][ T22] usb 6-1: Manufacturer: syz [ 3170.250259][ T22] usb 6-1: SerialNumber: syz [ 3170.302801][ T22] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3170.340800][T27785] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 3170.480954][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3170.490059][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.498508][T27978] usb 3-1: Product: syz [ 3170.502987][T27978] usb 3-1: Manufacturer: syz [ 3170.507592][T27978] usb 3-1: SerialNumber: syz [ 3170.561907][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3170.650967][ T3667] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3170.660534][ T3667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.669173][ T3667] usb 2-1: Product: syz [ 3170.674004][ T3667] usb 2-1: Manufacturer: syz [ 3170.678624][ T3667] usb 2-1: SerialNumber: syz [ 3170.721570][ T3667] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3170.921048][T27785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3170.930422][T27785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.938630][T27785] usb 1-1: Product: syz [ 3170.943178][T27785] usb 1-1: Manufacturer: syz [ 3170.947885][T27785] usb 1-1: SerialNumber: syz [ 3170.971337][ T22] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3170.993499][T27785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3171.251016][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3171.300972][ T3667] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3171.312823][T28403] could not allocate digest TFM handle hmac(sha256-neon) [ 3171.322937][T24210] usb 6-1: USB disconnect, device number 70 [ 3171.506322][T27785] usb 2-1: USB disconnect, device number 111 [ 3171.657794][T28407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3171.660913][T27825] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3171.666438][T28407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3171.688433][T27862] usb 3-1: USB disconnect, device number 19 [ 3172.000978][ T22] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3172.008049][ T22] ath9k_htc: Failed to initialize the device [ 3172.026001][T24210] usb 6-1: ath9k_htc: USB layer deinitialized [ 3172.099058][ T9283] usb 1-1: USB disconnect, device number 125 21:45:38 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000803108f8"]) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b3, 0x700000000000000}, 0x0) 21:45:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19c, 0x0, 0x700}, 0x0) 21:45:38 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x101}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x8, 0x9c2a, 0x5}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0002040080d09ddcdf46e52a1adf94d166c53108f8"]) 21:45:38 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) [ 3172.320873][ T3667] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3172.327941][ T3667] ath9k_htc: Failed to initialize the device [ 3172.330973][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3172.341195][T27785] usb 2-1: ath9k_htc: USB layer deinitialized [ 3172.348956][T27978] ath9k_htc: Failed to initialize the device [ 3172.356825][T27862] usb 3-1: ath9k_htc: USB layer deinitialized [ 3172.520833][T24210] usb 6-1: new high-speed USB device number 71 using dummy_hcd 21:45:38 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b4, 0x700000000000000}, 0x0) 21:45:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19d, 0x0, 0x700}, 0x0) 21:45:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b5, 0x700000000000000}, 0x0) 21:45:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19e, 0x0, 0x700}, 0x0) 21:45:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b6, 0x700000000000000}, 0x0) 21:45:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x19f, 0x0, 0x700}, 0x0) [ 3172.762259][T27862] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3172.970899][T27825] usb 1-1: Service connection timeout for: 256 [ 3172.977253][T27825] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3172.985876][T27825] ath9k_htc: Failed to initialize the device [ 3172.992555][ T9283] usb 1-1: ath9k_htc: USB layer deinitialized [ 3173.041035][T24210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3173.050335][T24210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3173.058721][T24210] usb 6-1: Product: syz [ 3173.063173][T24210] usb 6-1: Manufacturer: syz [ 3173.067990][T24210] usb 6-1: SerialNumber: syz [ 3173.111849][T24210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3173.301148][T27862] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3173.310233][T27862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3173.319030][T27862] usb 3-1: Product: syz [ 3173.323619][T27862] usb 3-1: Manufacturer: syz [ 3173.328241][T27862] usb 3-1: SerialNumber: syz [ 3173.371682][T27862] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3173.390822][ T9283] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 3173.680991][T24210] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3173.981194][ T9283] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3173.990492][ T9283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3174.003454][ T9283] usb 1-1: Product: syz [ 3174.007824][ T9283] usb 1-1: Manufacturer: syz [ 3174.012809][ T9283] usb 1-1: SerialNumber: syz [ 3174.052314][T28438] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3174.071677][ T9283] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3174.106080][ T3667] usb 6-1: USB disconnect, device number 71 [ 3174.256333][T28455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3174.265109][T28455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3174.454892][T27825] usb 3-1: USB disconnect, device number 20 [ 3174.720811][T24210] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3174.720875][T27862] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3174.727964][T24210] ath9k_htc: Failed to initialize the device [ 3174.743706][ T3667] usb 6-1: ath9k_htc: USB layer deinitialized 21:45:41 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b7, 0x700000000000000}, 0x0) 21:45:41 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:41 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000803108f8"]) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:41 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x159, 0x0, 0x700}, 0x0) 21:45:41 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a0, 0x0, 0x700}, 0x0) [ 3174.929923][T10727] usb 1-1: USB disconnect, device number 126 [ 3175.121817][T28438] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3175.128836][T28438] ath9k_htc: Failed to initialize the device [ 3175.135333][T27825] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:41 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:41 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a1, 0x0, 0x700}, 0x0) 21:45:41 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b8, 0x700000000000000}, 0x0) 21:45:41 executing program 5: r0 = memfd_secret(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x40086602, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x448383, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x102) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="92721ef6bbef8d029af0e802c0f6c35138981c337f45608ce67bd74107000000000000005cba23c57e80691c440bd46e627c3536039773b415cd427e648e7807b55d4c82c263548ccef4dfa60035f8a62de13fe193d6f6b3ef6c7dd9887285b15342c02e7857875dfe691d0d71a2feb4ea54f3d9b939964f17e7483a5230f1ba241addabeaf4f434b7c06973888975596a3ce680fda1e857d896a72cb79fc36d3da45f8a0f21a79ab0daaacced3c2ab3429b3010019e666d819c41437dfa0e954342508816466da5d64f76ef2f35508289a20c720f6ff7f7f1c4b6b43bafdcf087b15c3c5bdf3a94b100"/246, @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf251f000000000008000008af7564703a73795c3200000000d812ca5a5c2cd91fa60471b33d191455403c45a42011d614f67cf378e7b447ede8001000000000000022e7f891ae1f7563b73d32a7bd592b187bad830ad3a4c4cbd541b7de331ff1777ef6a326c95d7c82dfe66166fbdff2bcfe6ca426a58fc4f7db8344fee5b5cae0669ef1f1fd9f934dc91cb666711cdad2e01abf3d6012345fb29ccde25beef5e03432f33fcb546d357b08ce4568430138326caea8f6057c2dbfe014d79d80701c200a24a222ab2df6001493e065189d567d99cc199f6f9963c8dbe5a7a1712f6e0dccde76c1685a2a6a248023a4c94064e4cf673ea1f1e709e967"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@userptr={0x3e, 0x2, 0x4, 0x800, 0x7, {0x77359400}, {0x2, 0x0, 0x9, 0x2, 0x4, 0x0, "65721140"}, 0x2, 0x2, {&(0x7f0000000040)}, 0xfff, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x1c, 0x81}, {0x0, 0x3}, 0x8001, 0x1, 0x20}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x31303553, 0x6, 0x0, [{0x5, 0x2}, {0xfffc, 0x7}, {0xb5, 0x10001}, {0x3e, 0x8}, {0x9, 0x5}, {0x2, 0x5}, {0x400, 0x5}, {0xfffffffc, 0x100000}], 0x81, 0x5, 0x8, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) 21:45:41 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:41 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b9, 0x700000000000000}, 0x0) 21:45:41 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) 21:45:41 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a2, 0x0, 0x700}, 0x0) [ 3175.510790][T27825] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3175.770880][T27862] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3175.778783][T27862] ath9k_htc: Failed to initialize the device [ 3175.785500][T10727] usb 1-1: ath9k_htc: USB layer deinitialized [ 3176.091034][T27825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3176.100172][T27825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3176.113364][T27825] usb 3-1: Product: syz [ 3176.117530][T27825] usb 3-1: Manufacturer: syz [ 3176.124140][T27825] usb 3-1: SerialNumber: syz [ 3176.140802][T10727] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3176.171906][T27825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3176.680893][T10727] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3176.690285][T10727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3176.701066][T10727] usb 1-1: Product: syz [ 3176.705342][T10727] usb 1-1: Manufacturer: syz [ 3176.709996][T10727] usb 1-1: SerialNumber: syz [ 3176.762202][T10727] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3176.781019][T27825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3176.982186][T28482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3176.990744][T28482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3177.186473][ T9283] usb 3-1: USB disconnect, device number 21 [ 3177.390885][T24210] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3177.598051][ T3667] usb 1-1: USB disconnect, device number 127 21:45:43 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="00020000803108f84496c358c41027eb1aa3c4eac5470aa74f226ea01e39db60aa9982172e5b02a164e23b74ee65a518a5cd03b3042c53718e98d37ba964b4bfaa4da406c072c0102aab5e8a28aeeecf8a586b43e6461f1e1cc5dd7232998c3bdc830b2b9d79c397ef2780a11ab4da5270e75038fb3681664f7104173585518636e68d740f323eb96e79f1127386c86f9cef6263384c7373186605a7a22b03a77b9e063591288eff744de0df84edd84eca2da42a1249123e0888a5b866994c40f0d772de1d508f00d5e3aea2ce0617ed5dbcb2d363e7fb2910f269862b3e59b2a42397e14cccf124a2c0c574fbd9b1d7bca3f825a442a9dbe8dd378afa0508ac125fa80d83466b1de5e6ffea1495cf466bf2600da58750bf186bab8bc8b378025bfa15ab887d86cc0faa97e0f154eadf48e113ce1f4dd69e9cc3a2ea335371b3e3f0fa36ca73efa707f626e8bc99c20ddc1c889e1613f383cf0146dd169999f584b992bd42f4acf0598604f8500557e7aa747434af54bedf2846d591f99731a167b2721089d848181ffb1d1eada3417b363a9e51bdbe63eedfafa1891d0916538293121cccf9738e370f079ce21fe9c506a64139271ef0c7d500bc9965fc0c4ed2d489479a6e4461f37bc1759d1f4dfa4361b077fbd4ab23992e8e6094257c3404ea95009718acc496d5364c255677"]) 21:45:43 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a3, 0x0, 0x700}, 0x0) 21:45:43 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) 21:45:43 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ba, 0x700000000000000}, 0x0) [ 3177.850763][T27825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3177.857811][T27825] ath9k_htc: Failed to initialize the device [ 3177.865731][ T9283] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:44 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:44 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x40086602, &(0x7f00000002c0)) 21:45:44 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:44 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a4, 0x0, 0x700}, 0x0) 21:45:44 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bb, 0x700000000000000}, 0x0) 21:45:44 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bc, 0x700000000000000}, 0x0) 21:45:44 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a5, 0x0, 0x700}, 0x0) 21:45:44 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) [ 3178.251184][ T9283] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3178.480774][T24210] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3178.487878][T24210] ath9k_htc: Failed to initialize the device [ 3178.494679][ T3667] usb 1-1: ath9k_htc: USB layer deinitialized [ 3178.810956][ T9283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3178.820032][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3178.828321][ T9283] usb 3-1: Product: syz [ 3178.833282][ T9283] usb 3-1: Manufacturer: syz [ 3178.837905][ T9283] usb 3-1: SerialNumber: syz [ 3178.850988][ T3667] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3178.882459][ T9283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3179.371088][ T3667] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3179.380138][ T3667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3179.388685][ T3667] usb 1-1: Product: syz [ 3179.393226][ T3667] usb 1-1: Manufacturer: syz [ 3179.397830][ T3667] usb 1-1: SerialNumber: syz [ 3179.441676][ T3667] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3179.511664][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3179.917760][T24210] usb 3-1: USB disconnect, device number 22 [ 3180.010947][ T3667] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3180.218727][T28216] usb 1-1: USB disconnect, device number 2 21:45:46 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="00020000803108f84496c358c41027eb1aa3c4eac5470aa74f226ea01e39db60aa9982172e5b02a164e23b74ee65a518a5cd03b3042c53718e98d37ba964b4bfaa4da406c072c0102aab5e8a28aeeecf8a586b43e6461f1e1cc5dd7232998c3bdc830b2b9d79c397ef2780a11ab4da5270e75038fb3681664f7104173585518636e68d740f323eb96e79f1127386c86f9cef6263384c7373186605a7a22b03a77b9e063591288eff744de0df84edd84eca2da42a1249123e0888a5b866994c40f0d772de1d508f00d5e3aea2ce0617ed5dbcb2d363e7fb2910f269862b3e59b2a42397e14cccf124a2c0c574fbd9b1d7bca3f825a442a9dbe8dd378afa0508ac125fa80d83466b1de5e6ffea1495cf466bf2600da58750bf186bab8bc8b378025bfa15ab887d86cc0faa97e0f154eadf48e113ce1f4dd69e9cc3a2ea335371b3e3f0fa36ca73efa707f626e8bc99c20ddc1c889e1613f383cf0146dd169999f584b992bd42f4acf0598604f8500557e7aa747434af54bedf2846d591f99731a167b2721089d848181ffb1d1eada3417b363a9e51bdbe63eedfafa1891d0916538293121cccf9738e370f079ce21fe9c506a64139271ef0c7d500bc9965fc0c4ed2d489479a6e4461f37bc1759d1f4dfa4361b077fbd4ab23992e8e6094257c3404ea95009718acc496d5364c255677"]) (async) 21:45:46 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a6, 0x0, 0x700}, 0x0) 21:45:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bd, 0x700000000000000}, 0x0) 21:45:46 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, 0xfffffffffffffffd, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0xffffffc0, 0x8, 0x4000}) [ 3180.560851][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3180.567862][ T9283] ath9k_htc: Failed to initialize the device [ 3180.582487][T24210] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:46 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a7, 0x0, 0x700}, 0x0) 21:45:46 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:46 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r0, 0xfffffffffffffffd, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:45:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1be, 0x700000000000000}, 0x0) 21:45:46 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bf, 0x700000000000000}, 0x0) 21:45:46 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a8, 0x0, 0x700}, 0x0) 21:45:46 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r0, 0xfffffffffffffffd, 0x0) [ 3180.940837][T24210] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3181.040815][ T3667] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3181.047763][ T3667] ath9k_htc: Failed to initialize the device [ 3181.055509][T28216] usb 1-1: ath9k_htc: USB layer deinitialized [ 3181.460856][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3181.470043][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3181.478227][T24210] usb 3-1: Product: syz [ 3181.482541][T24210] usb 3-1: Manufacturer: syz [ 3181.487242][T24210] usb 3-1: SerialNumber: syz [ 3181.533967][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3182.110920][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3182.513485][T28514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3182.523759][T28514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3182.715985][ T3667] usb 3-1: USB disconnect, device number 23 21:45:49 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) 21:45:49 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c0, 0x700000000000000}, 0x0) 21:45:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1a9, 0x0, 0x700}, 0x0) 21:45:49 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 21:45:49 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:49 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) [ 3183.200831][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3183.207789][T24210] ath9k_htc: Failed to initialize the device [ 3183.214365][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized 21:45:49 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c1, 0x700000000000000}, 0x0) 21:45:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1aa, 0x0, 0x700}, 0x0) 21:45:49 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 21:45:49 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c2, 0x700000000000000}, 0x0) 21:45:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ab, 0x0, 0x700}, 0x0) 21:45:49 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) [ 3183.670768][ T3667] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3184.201007][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3184.210080][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3184.218233][ T3667] usb 3-1: Product: syz [ 3184.222493][ T3667] usb 3-1: Manufacturer: syz [ 3184.227106][ T3667] usb 3-1: SerialNumber: syz [ 3184.276613][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3184.850957][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3185.257519][T27862] usb 3-1: USB disconnect, device number 24 21:45:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ac, 0x0, 0x700}, 0x0) 21:45:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c3, 0x700000000000000}, 0x0) 21:45:51 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r0, 0xfffffffffffffffd, 0x0) 21:45:51 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:51 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="539ceb4aeaff0000"]) 21:45:51 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ad, 0x0, 0x700}, 0x0) 21:45:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r0, 0xfffffffffffffffd, 0x0) 21:45:52 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c4, 0x700000000000000}, 0x0) 21:45:52 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ae, 0x0, 0x700}, 0x0) 21:45:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0xfffffffffffffffd, 0x0) 21:45:52 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c5, 0x700000000000000}, 0x0) 21:45:52 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1af, 0x0, 0x700}, 0x0) 21:45:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0xfffffffffffffffd, 0x0) 21:45:52 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c6, 0x700000000000000}, 0x0) [ 3185.921086][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3185.928138][ T3667] ath9k_htc: Failed to initialize the device [ 3185.935330][T27862] usb 3-1: ath9k_htc: USB layer deinitialized [ 3186.040945][T24210] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3186.300766][T27862] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3186.580985][T24210] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3186.590144][T24210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3186.603351][T24210] usb 2-1: Product: syz [ 3186.607520][T24210] usb 2-1: Manufacturer: syz [ 3186.613910][T24210] usb 2-1: SerialNumber: syz [ 3186.662032][T24210] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3186.850904][T27862] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3186.859974][T27862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3186.868488][T27862] usb 3-1: Product: syz [ 3186.873047][T27862] usb 3-1: Manufacturer: syz [ 3186.877675][T27862] usb 3-1: SerialNumber: syz [ 3186.932421][T27862] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3187.230812][ T3666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3187.435407][ T9283] usb 2-1: USB disconnect, device number 112 [ 3187.610956][T27862] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3187.815497][T28569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3187.824962][T28569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3187.837777][ T3667] usb 3-1: USB disconnect, device number 25 21:45:54 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:54 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="539ceb4aeaff0000"]) 21:45:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b0, 0x0, 0x700}, 0x0) 21:45:54 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c7, 0x700000000000000}, 0x0) 21:45:54 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0xfffffffffffffffd, 0x0) 21:45:54 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) [ 3188.320878][ T3666] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3188.327887][ T3666] ath9k_htc: Failed to initialize the device [ 3188.334951][ T9283] usb 2-1: ath9k_htc: USB layer deinitialized 21:45:54 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c8, 0x700000000000000}, 0x0) 21:45:54 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 21:45:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b1, 0x0, 0x700}, 0x0) 21:45:54 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c9, 0x700000000000000}, 0x0) 21:45:54 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 21:45:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b2, 0x0, 0x700}, 0x0) [ 3188.416768][T28598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3188.439552][T28598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3188.650853][T27862] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3188.658020][T27862] ath9k_htc: Failed to initialize the device [ 3188.664750][ T3667] usb 3-1: ath9k_htc: USB layer deinitialized [ 3188.760789][ T9283] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3189.030828][ T3667] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3189.310976][ T9283] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3189.320057][ T9283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3189.328336][ T9283] usb 2-1: Product: syz [ 3189.332745][ T9283] usb 2-1: Manufacturer: syz [ 3189.337359][ T9283] usb 2-1: SerialNumber: syz [ 3189.392036][ T9283] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3189.560931][ T3667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3189.570106][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3189.578307][ T3667] usb 3-1: Product: syz [ 3189.582702][ T3667] usb 3-1: Manufacturer: syz [ 3189.587478][ T3667] usb 3-1: SerialNumber: syz [ 3189.631436][ T3667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3190.000955][T28438] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3190.200859][ T3667] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3190.220355][T27825] usb 2-1: USB disconnect, device number 113 [ 3190.405516][ T9283] usb 3-1: USB disconnect, device number 26 21:45:56 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b3, 0x0, 0x700}, 0x0) 21:45:57 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="539ceb4aeaff0000"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="539ceb4aeaff0000"]) (async) 21:45:57 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 21:45:57 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ca, 0x700000000000000}, 0x0) 21:45:57 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:57 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c2, 0x700000000000000}, 0x0) 21:45:57 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cb, 0x700000000000000}, 0x0) 21:45:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b4, 0x0, 0x700}, 0x0) 21:45:57 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b5, 0x0, 0x700}, 0x0) 21:45:57 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:45:57 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cc, 0x700000000000000}, 0x0) [ 3191.050716][T28438] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3191.061321][T28438] ath9k_htc: Failed to initialize the device [ 3191.073420][T27825] usb 2-1: ath9k_htc: USB layer deinitialized [ 3191.280811][ T3667] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3191.287848][ T3667] ath9k_htc: Failed to initialize the device [ 3191.294419][ T9283] usb 3-1: ath9k_htc: USB layer deinitialized [ 3191.320776][ T3666] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 3191.453304][T27825] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3191.671986][ T9283] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3191.840934][ T3666] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3191.851384][ T3666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3191.859401][ T3666] usb 6-1: Product: syz [ 3191.863616][ T3666] usb 6-1: Manufacturer: syz [ 3191.868222][ T3666] usb 6-1: SerialNumber: syz [ 3191.927644][ T3666] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3192.090942][T27825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3192.100074][T27825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3192.108674][T27825] usb 2-1: Product: syz [ 3192.113498][T27825] usb 2-1: Manufacturer: syz [ 3192.118161][T27825] usb 2-1: SerialNumber: syz [ 3192.161723][T27825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3192.290963][ T9283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3192.300195][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3192.308369][ T9283] usb 3-1: Product: syz [ 3192.312833][ T9283] usb 3-1: Manufacturer: syz [ 3192.317624][ T9283] usb 3-1: SerialNumber: syz [ 3192.363844][ T9283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3192.490961][ T3666] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3192.710506][T28438] usb 6-1: USB disconnect, device number 72 [ 3192.771491][T27825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3192.950936][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3192.977147][ T9283] usb 2-1: USB disconnect, device number 114 [ 3193.154561][T28623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3193.163692][T28623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3193.175366][T28623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3193.185350][T28623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3193.204031][T24210] usb 3-1: USB disconnect, device number 27 21:45:59 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 21:45:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cd, 0x700000000000000}, 0x0) 21:45:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b6, 0x0, 0x700}, 0x0) 21:45:59 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:45:59 executing program 2: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:45:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) 21:45:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ce, 0x700000000000000}, 0x0) 21:45:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b7, 0x0, 0x700}, 0x0) 21:45:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cf, 0x700000000000000}, 0x0) 21:45:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b8, 0x0, 0x700}, 0x0) [ 3193.520942][ T3666] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3193.530538][ T3666] ath9k_htc: Failed to initialize the device [ 3193.548094][T28438] usb 6-1: ath9k_htc: USB layer deinitialized 21:45:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d0, 0x700000000000000}, 0x0) 21:45:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1b9, 0x0, 0x700}, 0x0) [ 3193.842919][T27825] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3193.849925][T27825] ath9k_htc: Failed to initialize the device [ 3193.856484][ T9283] usb 2-1: ath9k_htc: USB layer deinitialized [ 3193.961813][T28438] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 3194.000910][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3194.007911][T27978] ath9k_htc: Failed to initialize the device [ 3194.018375][T24210] usb 3-1: ath9k_htc: USB layer deinitialized [ 3194.250829][ T9283] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3194.540877][T28438] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3194.550043][T28438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3194.558189][T28438] usb 6-1: Product: syz [ 3194.562792][T28438] usb 6-1: Manufacturer: syz [ 3194.567533][T28438] usb 6-1: SerialNumber: syz [ 3194.611518][T28438] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3194.801017][ T9283] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3194.810084][ T9283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3194.818749][ T9283] usb 2-1: Product: syz [ 3194.823524][ T9283] usb 2-1: Manufacturer: syz [ 3194.828131][ T9283] usb 2-1: SerialNumber: syz [ 3194.873235][ T9283] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3195.260981][T28438] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3195.572863][ T9283] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3195.696823][T27979] usb 6-1: USB disconnect, device number 73 [ 3195.979000][T27825] usb 2-1: USB disconnect, device number 115 [ 3196.320904][T28438] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3196.328024][T28438] ath9k_htc: Failed to initialize the device [ 3196.334369][T27979] usb 6-1: ath9k_htc: USB layer deinitialized 21:46:02 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 21:46:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d1, 0x700000000000000}, 0x0) 21:46:02 executing program 2: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:46:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ba, 0x0, 0x700}, 0x0) 21:46:02 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:46:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) 21:46:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d2, 0x700000000000000}, 0x0) 21:46:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bb, 0x0, 0x700}, 0x0) 21:46:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bc, 0x0, 0x700}, 0x0) 21:46:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d3, 0x700000000000000}, 0x0) 21:46:02 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bd, 0x0, 0x700}, 0x0) 21:46:02 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d4, 0x700000000000000}, 0x0) [ 3196.641110][ T9283] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3196.648127][ T9283] ath9k_htc: Failed to initialize the device [ 3196.663401][T27825] usb 2-1: ath9k_htc: USB layer deinitialized [ 3196.770823][T27862] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3196.910908][T27979] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 3197.040970][T27825] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3197.301216][T27862] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3197.310294][T27862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3197.318810][T27862] usb 1-1: Product: syz [ 3197.323850][T27862] usb 1-1: Manufacturer: syz [ 3197.328473][T27862] usb 1-1: SerialNumber: syz [ 3197.381962][T27862] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3197.441817][T27979] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3197.451251][T27979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3197.459346][T27979] usb 6-1: Product: syz [ 3197.465743][T27979] usb 6-1: Manufacturer: syz [ 3197.470346][T27979] usb 6-1: SerialNumber: syz [ 3197.521966][T27979] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3197.581084][T27825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3197.592478][T27825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3197.600471][T27825] usb 2-1: Product: syz [ 3197.608749][T27825] usb 2-1: Manufacturer: syz [ 3197.613669][T27825] usb 2-1: SerialNumber: syz [ 3197.652288][T27825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3198.041186][T27862] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3198.161035][T27785] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3198.248766][ T3667] usb 1-1: USB disconnect, device number 3 [ 3198.321009][T27979] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3198.584877][ T9283] usb 6-1: USB disconnect, device number 74 [ 3198.739985][T28438] usb 2-1: USB disconnect, device number 116 [ 3199.120850][T27862] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3199.127973][T27862] ath9k_htc: Failed to initialize the device [ 3199.135294][ T3667] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:05 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 21:46:05 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1be, 0x0, 0x700}, 0x0) 21:46:05 executing program 2: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) 21:46:05 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d5, 0x700000000000000}, 0x0) 21:46:05 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:46:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0xe83, 0x0, 0x4, 0x100000, 0x7, {}, {0x1, 0x3, 0xad, 0x80, 0x1, 0xfd, "516ecc4b"}, 0x5, 0x4, {&(0x7f0000000040)=[{0xffff, 0x972e, {r1}}, {0x4, 0x7, {r0}, 0xffffffe1}]}, 0xa}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x81}, 'port0\x00', 0x0, 0x0, 0xffffffff, 0x8, 0x200000, 0x8000, 0x4, 0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x2, 0x2, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x6b, 0x3, 0xf8, 0x3, "5da3dcf3"}, 0x1f, 0x1, {}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) [ 3199.210824][T27785] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3199.217983][T27785] ath9k_htc: Failed to initialize the device [ 3199.225105][ T9283] usb 6-1: ath9k_htc: USB layer deinitialized 21:46:05 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1bf, 0x0, 0x700}, 0x0) 21:46:05 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d6, 0x700000000000000}, 0x0) 21:46:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0xe83, 0x0, 0x4, 0x100000, 0x7, {}, {0x1, 0x3, 0xad, 0x80, 0x1, 0xfd, "516ecc4b"}, 0x5, 0x4, {&(0x7f0000000040)=[{0xffff, 0x972e, {r1}}, {0x4, 0x7, {r0}, 0xffffffe1}]}, 0xa}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x81}, 'port0\x00', 0x0, 0x0, 0xffffffff, 0x8, 0x200000, 0x8000, 0x4, 0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x2, 0x2, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x6b, 0x3, 0xf8, 0x3, "5da3dcf3"}, 0x1f, 0x1, {}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f0000000140)) 21:46:05 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c0, 0x0, 0x700}, 0x0) 21:46:05 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d7, 0x700000000000000}, 0x0) 21:46:05 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x11e, 0x0, 0x700}, 0x0) [ 3199.370905][T27979] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3199.380170][T27979] ath9k_htc: Failed to initialize the device [ 3199.399254][T28438] usb 2-1: ath9k_htc: USB layer deinitialized [ 3199.640750][ T3667] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3199.761159][T28438] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3200.180981][ T3667] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3200.190049][ T3667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3200.198607][ T3667] usb 1-1: Product: syz [ 3200.203109][ T3667] usb 1-1: Manufacturer: syz [ 3200.207727][ T3667] usb 1-1: SerialNumber: syz [ 3200.251649][ T3667] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3200.280867][T28438] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3200.290006][T28438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3200.298344][T28438] usb 2-1: Product: syz [ 3200.302927][T28438] usb 2-1: Manufacturer: syz [ 3200.307683][T28438] usb 2-1: SerialNumber: syz [ 3200.351453][T28438] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3200.840839][ T3667] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3200.970940][T28438] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3201.046547][T27979] usb 1-1: USB disconnect, device number 4 [ 3201.385900][T27862] usb 2-1: USB disconnect, device number 117 21:46:08 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x0, 0x6, 0x0, 0x43}}) 21:46:08 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d8, 0x700000000000000}, 0x0) 21:46:08 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x130, 0x700000000000000}, 0x0) 21:46:08 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = getpgrp(0x0) write$damon_target_ids(r0, &(0x7f0000000000)={@void, [{' ', r1}]}, 0x15) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x108, &(0x7f0000000040)=@generic={0x0, 0x2, 0x100, "803108f8", "2e0dc3265212b826148d98c5e5eae18197e3284cdf860697a1d1ce23ed9597e1e791905be3acdee6bc30c42f36f61ad2d04f9e82a846bfbc733628bd85e16e37d13e9df44746ab5e1381ef6bb483507cbadad662456a6fdb282db8dd2b78998d0a4ff4010e6cefff49361215ed4db0bcb00b246b657298c86c33cb1576b9bf9175a70a216f1e723a716d9ff56ca981f1ab4401c777ef1f93bb5232a4e38d032de8523f62be5830dcd3f15b4beec16c5acf53f99b1214870ab04e2f25db345c6ecc79dd1571f3753aa018208ce0ae1717686b7fb5b69b736f26307e0565049301e540c60774064d78abea296529048a5c978254d2e8623c010e4dce205f23232f"}) 21:46:08 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c1, 0x0, 0x700}, 0x0) 21:46:08 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x1ff, 0x6, 0x0, 0x43}}) 21:46:08 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c2, 0x0, 0x700}, 0x0) 21:46:08 executing program 5: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001140), 0x121800, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1164, &(0x7f0000001840)={[{0x11, 0x4e00, "55d4714c6930f8ef56553859870b44b37d"}, {0xc7, 0x4e00, "3e892744b5cc208b661da327737e05db74498e2a43aca57d12ff0295535adf6e24d382c16f664c164b1dd0accf3fdd475e2c4724b008fd6749865339dcd369487669e062a371337fc3c3c5e59d72cdd58c7b1f654e13ff6975c47cf35636b9f88c9a7a45456edc347fe1ff4c2d97602ba090de27a1a64cc98ed5ea4e2f2346e1d7725d32ef865fc54fcb9c5200caaab5b0d96f1863452454b6d5d6971dc4263f759fa68d5916e652b979f74c0dceff63a5388ffe86dce8069957ffd1e631261df64be611fd8c19"}, {0x1000, 0x4e00, "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"}, {0x78, 0x4e00, "0b9c9a2d5765164637587f934fc74c405d73861c3cac5eeb91c1f9415124de0ee347540e3c0f4f5baf43a80f58ac7b994d3acb45c77afc65c73f9a67e24b6110325358fc5733f5c140e71ce4c86b488e700eb08c0f11f0cfcc5cf305eb987fd6ba3f060944a6f4ebc2a8bb89d8c2c2f4872333b3732c8012"}]}) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000001800)=@conn_svc_rsp={0x0, 0x0, 0xa, "c262cb3e"}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10cc, &(0x7f0000000040)={[{0x1d, 0x4e00, "7e18b4b43ca08232a0ea01b53ec067146a69aff56a90045a8882542aa7"}, {0x2f, 0x4e00, "2cd9cabbda5ce7d3a95acbeae0e70eb11bbb35d2ad06e475a1250c111531c955170c2c562a61c2fb67d5d1aa644fe1"}, {0x6b, 0x4e00, "df1edf6f0adbb5a2cb50be90b39a72482d44245574401c517efa7573ba3a1baf12a90d5a7179fc7e20ea773837cc94228d41e7aee9f1e9bf27ca10011a0dc504a0d388a846fb67b69490cc1d7591601e1f85ef39bba1a8c01f71e4c05f4b882c2f440bb9fc5a062fc27f99"}, {0x1000, 0x4e00, "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"}]}) 21:46:08 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d9, 0x700000000000000}, 0x0) [ 3201.920810][ T3667] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3201.937574][ T3667] ath9k_htc: Failed to initialize the device [ 3201.957398][T27979] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:08 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c3, 0x0, 0x700}, 0x0) 21:46:08 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1da, 0x700000000000000}, 0x0) 21:46:08 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c4, 0x0, 0x700}, 0x0) [ 3202.003913][T28438] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3202.018985][T28438] ath9k_htc: Failed to initialize the device [ 3202.035713][T27862] usb 2-1: ath9k_htc: USB layer deinitialized [ 3202.201757][T27785] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3202.300999][ T3666] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 3202.350758][T27979] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3202.410932][T27862] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3202.771034][T27785] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3202.780214][T27785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3202.788356][T27785] usb 3-1: Product: syz [ 3202.796987][T27785] usb 3-1: Manufacturer: syz [ 3202.801722][T27785] usb 3-1: SerialNumber: syz [ 3202.820871][ T3666] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3202.830066][ T3666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3202.838952][ T3666] usb 6-1: Product: syz [ 3202.843352][ T3666] usb 6-1: Manufacturer: syz [ 3202.848064][ T3666] usb 6-1: SerialNumber: syz [ 3202.851773][T27785] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3202.901596][ T3666] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3202.921112][T27979] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3202.930897][T27979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3202.939041][T27979] usb 1-1: Product: syz [ 3202.948037][T27979] usb 1-1: Manufacturer: syz [ 3202.952928][T27979] usb 1-1: SerialNumber: syz [ 3202.981054][T27862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3202.990107][T27862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3202.999279][T27979] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3203.012962][T27862] usb 2-1: Product: syz [ 3203.017156][T27862] usb 2-1: Manufacturer: syz [ 3203.022862][T27862] usb 2-1: SerialNumber: syz [ 3203.071924][T27862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3203.452861][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3203.490841][ T3666] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3203.641036][T27979] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3203.710996][T27978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3203.849637][ T3667] usb 1-1: USB disconnect, device number 5 [ 3203.866445][T28438] usb 3-1: USB disconnect, device number 28 [ 3203.934845][T28728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3203.944554][T28728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3203.956501][T28728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3203.968054][T28728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3203.979106][T28216] usb 6-1: USB disconnect, device number 75 [ 3204.118640][T27862] usb 2-1: USB disconnect, device number 118 [ 3204.480940][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3204.486352][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.494239][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.496017][ T9283] ath9k_htc: Failed to initialize the device [ 3204.506879][T28438] usb 3-1: ath9k_htc: USB layer deinitialized [ 3204.567039][ T3666] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3204.574274][ T3666] ath9k_htc: Failed to initialize the device [ 3204.580421][T28216] usb 6-1: ath9k_htc: USB layer deinitialized 21:46:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c5, 0x0, 0x700}, 0x0) 21:46:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1db, 0x700000000000000}, 0x0) 21:46:10 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 21:46:10 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) r1 = getpgrp(0x0) write$damon_target_ids(r0, &(0x7f0000000000)={@void, [{' ', r1}]}, 0x15) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x108, &(0x7f0000000040)=@generic={0x0, 0x2, 0x100, "803108f8", "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"}) 21:46:10 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x0, 0x0, 0x0, 0x43}}) 21:46:10 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x400448c9, &(0x7f0000000000)) 21:46:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1dc, 0x700000000000000}, 0x0) 21:46:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c6, 0x0, 0x700}, 0x0) 21:46:10 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000340)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @win={{0x5, 0xffff9977, 0x9, 0xfe84}, 0x2, 0xfffffffe, &(0x7f00000000c0)={{0x80000000, 0x7ff, 0x40, 0x206b786b}, &(0x7f0000000080)={{0x80000001, 0x1f, 0x0, 0x1}}}, 0x8, &(0x7f0000000100)="658a8af3feb0ad09d9b883dc289a61cf4ffdde7ca79daebb4465a0291eec008ff9a11b31d6d0850e75534c43c89583c8dae0a7180b3c251a6a15f513e4bc385c9456c26c4145e932d4c7c67fc9f5f2fd2d7341ce0f03"}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) 21:46:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@overlay={0x8, 0x2, 0x4, 0x800, 0x6, {0x77359400}, {0x2, 0x0, 0x1, 0x1, 0x20, 0xc2, "85677cc4"}, 0x1ff, 0x3, {}, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$khugepaged_scan(r4, &(0x7f0000000200), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x40, 0x1, 0x4, 0x4, 0xc7, {}, {0x2, 0x8, 0x1f, 0x4, 0x6, 0x5, "7e4d59ba"}, 0x8bb, 0x3, {&(0x7f0000000040)=[{0x1, 0x3f, {0xbf}, 0x3}, {0x4, 0x4, {0x6}, 0x1}]}, 0x10001, 0x0, r3}) 21:46:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1dd, 0x700000000000000}, 0x0) 21:46:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c7, 0x0, 0x700}, 0x0) [ 3204.721392][T27979] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3204.728590][T27979] ath9k_htc: Failed to initialize the device [ 3204.739053][ T3667] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:10 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1de, 0x700000000000000}, 0x0) 21:46:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c8, 0x0, 0x700}, 0x0) [ 3204.960903][T27978] usb 2-1: Service connection timeout for: 256 [ 3204.967315][T27978] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3204.976121][T27978] ath9k_htc: Failed to initialize the device [ 3204.982524][T27862] usb 2-1: ath9k_htc: USB layer deinitialized [ 3205.040927][T28438] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3205.110965][ T3667] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3205.350944][T27862] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 3205.630948][T28438] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3205.631510][ T3667] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3205.644563][T28438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3205.649383][ T3667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3205.665080][T28438] usb 3-1: Product: syz [ 3205.665268][ T3667] usb 1-1: Product: syz [ 3205.669460][T28438] usb 3-1: Manufacturer: syz [ 3205.680303][T28438] usb 3-1: SerialNumber: syz [ 3205.682522][ T3667] usb 1-1: Manufacturer: syz [ 3205.689530][ T3667] usb 1-1: SerialNumber: syz [ 3205.731999][T28438] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3205.742157][ T3667] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3205.900932][T27862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3205.910016][T27862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3205.918499][T27862] usb 2-1: Product: syz [ 3205.923338][T27862] usb 2-1: Manufacturer: syz [ 3205.927961][T27862] usb 2-1: SerialNumber: syz [ 3205.973951][T27862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3206.330936][ T3667] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3206.401087][T28438] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3206.642914][T27862] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3206.739988][ T3666] usb 1-1: USB disconnect, device number 6 [ 3206.822884][T27978] usb 3-1: USB disconnect, device number 29 [ 3207.059943][T10727] usb 2-1: USB disconnect, device number 119 21:46:13 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 21:46:13 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) (async) r1 = getpgrp(0x0) write$damon_target_ids(r0, &(0x7f0000000000)={@void, [{' ', r1}]}, 0x15) (async, rerun: 32) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x108, &(0x7f0000000040)=@generic={0x0, 0x2, 0x100, "803108f8", "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"}) [ 3207.360924][ T3667] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3207.367908][ T3667] ath9k_htc: Failed to initialize the device [ 3207.374511][ T3666] usb 1-1: ath9k_htc: USB layer deinitialized [ 3207.450812][T28438] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3207.457883][T28438] ath9k_htc: Failed to initialize the device [ 3207.464552][T27978] usb 3-1: ath9k_htc: USB layer deinitialized 21:46:13 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:13 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1df, 0x700000000000000}, 0x0) 21:46:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c9, 0x0, 0x700}, 0x0) 21:46:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@overlay={0x8, 0x2, 0x4, 0x800, 0x6, {0x77359400}, {0x2, 0x0, 0x1, 0x1, 0x20, 0xc2, "85677cc4"}, 0x1ff, 0x3, {}, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$khugepaged_scan(r4, &(0x7f0000000200), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x40, 0x1, 0x4, 0x4, 0xc7, {}, {0x2, 0x8, 0x1f, 0x4, 0x6, 0x5, "7e4d59ba"}, 0x8bb, 0x3, {&(0x7f0000000040)=[{0x1, 0x3f, {0xbf}, 0x3}, {0x4, 0x4, {0x6}, 0x1}]}, 0x10001, 0x0, r3}) 21:46:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ca, 0x0, 0x700}, 0x0) 21:46:13 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x0, 0x0, 0x0, 0x43}}) 21:46:13 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e0, 0x700000000000000}, 0x0) 21:46:13 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e1, 0x700000000000000}, 0x0) 21:46:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cb, 0x0, 0x700}, 0x0) 21:46:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cc, 0x0, 0x700}, 0x0) [ 3207.731041][ T3666] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 3207.851343][T27978] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3207.910781][T24210] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 3207.921038][T27862] usb 2-1: Service connection timeout for: 256 [ 3207.928913][T27862] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3207.937282][T27862] ath9k_htc: Failed to initialize the device [ 3207.943931][T10727] usb 2-1: ath9k_htc: USB layer deinitialized [ 3208.250897][ T3666] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3208.260061][ T3666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.273624][ T3666] usb 1-1: Product: syz [ 3208.277795][ T3666] usb 1-1: Manufacturer: syz [ 3208.284171][ T3666] usb 1-1: SerialNumber: syz [ 3208.300850][T10727] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 3208.331666][ T3666] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3208.411093][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3208.420231][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.428635][T27978] usb 3-1: Product: syz [ 3208.431026][T24210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3208.433213][T27978] usb 3-1: Manufacturer: syz [ 3208.448412][T27978] usb 3-1: SerialNumber: syz [ 3208.449330][T24210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.461478][T24210] usb 6-1: Product: syz [ 3208.465751][T24210] usb 6-1: Manufacturer: syz [ 3208.470371][T24210] usb 6-1: SerialNumber: syz [ 3208.511655][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3208.521848][T24210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3208.821151][T10727] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3208.830234][T10727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.839421][T10727] usb 2-1: Product: syz [ 3208.844430][T10727] usb 2-1: Manufacturer: syz [ 3208.849474][T10727] usb 2-1: SerialNumber: syz [ 3208.901980][T10727] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3208.921064][ T3666] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3209.100918][T28338] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3209.191019][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3209.326325][ T22] usb 1-1: USB disconnect, device number 7 [ 3209.391526][T28767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3209.400181][T28767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3209.409783][T28767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3209.418464][T28767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3209.430863][T28767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3209.440640][T28767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3209.450589][T28767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3209.459321][T28767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3209.468785][T28767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3209.479515][T28767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3209.490840][T10727] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3209.523953][T24210] usb 6-1: USB disconnect, device number 76 [ 3209.717400][T28438] usb 3-1: USB disconnect, device number 30 21:46:16 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) [ 3209.898132][T28216] usb 2-1: USB disconnect, device number 120 [ 3210.000818][ T3666] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3210.007857][ T3666] ath9k_htc: Failed to initialize the device [ 3210.019280][ T22] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:16 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e2, 0x700000000000000}, 0x0) [ 3210.240794][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3210.247799][T27978] ath9k_htc: Failed to initialize the device [ 3210.254962][T28438] usb 3-1: ath9k_htc: USB layer deinitialized 21:46:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 21:46:16 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcbc}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000800608f8"]) 21:46:16 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cd, 0x0, 0x700}, 0x0) 21:46:16 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e3, 0x700000000000000}, 0x0) [ 3210.400784][T28338] usb 6-1: Service connection timeout for: 256 [ 3210.401387][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3210.406971][T28338] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 21:46:16 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:16 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e4, 0x700000000000000}, 0x0) 21:46:16 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ce, 0x0, 0x700}, 0x0) [ 3210.455357][T28338] ath9k_htc: Failed to initialize the device [ 3210.465931][T24210] usb 6-1: ath9k_htc: USB layer deinitialized 21:46:16 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e5, 0x700000000000000}, 0x0) 21:46:16 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1cf, 0x0, 0x700}, 0x0) 21:46:16 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e6, 0x700000000000000}, 0x0) [ 3210.720973][T10727] usb 2-1: Service connection timeout for: 256 [ 3210.727190][T10727] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3210.735595][T10727] ath9k_htc: Failed to initialize the device [ 3210.742269][T28216] usb 2-1: ath9k_htc: USB layer deinitialized [ 3210.851142][T24210] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 3210.851536][T28438] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3210.962256][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3210.971426][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3210.979426][ T22] usb 1-1: Product: syz [ 3210.983680][ T22] usb 1-1: Manufacturer: syz [ 3210.988296][ T22] usb 1-1: SerialNumber: syz [ 3211.041408][ T22] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3211.105978][T28216] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 3211.240875][T28438] usb 3-1: config index 0 descriptor too short (expected 64700, got 72) [ 3211.400839][T28438] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3211.410520][T28438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.419296][T28438] usb 3-1: Product: syz [ 3211.423715][T28438] usb 3-1: Manufacturer: syz [ 3211.428441][T28438] usb 3-1: SerialNumber: syz [ 3211.441251][T24210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3211.450427][T24210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.459101][T24210] usb 6-1: Product: syz [ 3211.464086][T24210] usb 6-1: Manufacturer: syz [ 3211.468716][T24210] usb 6-1: SerialNumber: syz [ 3211.471876][T28438] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3211.523016][T24210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3211.610994][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3211.691036][T28216] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3211.700169][T28216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.708537][T28216] usb 2-1: Product: syz [ 3211.713266][T28216] usb 2-1: Manufacturer: syz [ 3211.718801][T28216] usb 2-1: SerialNumber: syz [ 3211.764446][T28216] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3212.022979][T10727] usb 1-1: USB disconnect, device number 8 [ 3212.043045][T27862] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3212.151058][T24210] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3212.370876][T28216] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3212.448206][T28338] usb 3-1: USB disconnect, device number 31 21:46:18 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d0, 0x0, 0x700}, 0x0) 21:46:18 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x0, 0x6, 0x0, 0x43}}) [ 3212.572355][T28438] usb 6-1: USB disconnect, device number 77 [ 3212.640844][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3212.647880][ T22] ath9k_htc: Failed to initialize the device [ 3212.654329][T10727] usb 1-1: ath9k_htc: USB layer deinitialized [ 3212.809146][T27978] usb 2-1: USB disconnect, device number 121 [ 3213.010801][T10727] usb 1-1: new high-speed USB device number 9 using dummy_hcd 21:46:19 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e7, 0x700000000000000}, 0x0) 21:46:19 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d1, 0x0, 0x700}, 0x0) 21:46:19 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcbc}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000800608f8"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcbc}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000800608f8"]) (async) 21:46:19 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcbc}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000800608f8"]) [ 3213.134079][T27862] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3213.141180][T27862] ath9k_htc: Failed to initialize the device [ 3213.147434][T28338] usb 3-1: ath9k_htc: USB layer deinitialized [ 3213.200823][T24210] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3213.207805][T24210] ath9k_htc: Failed to initialize the device [ 3213.214903][T28438] usb 6-1: ath9k_htc: USB layer deinitialized 21:46:19 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:19 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d2, 0x0, 0x700}, 0x0) 21:46:19 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e8, 0x700000000000000}, 0x0) 21:46:19 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d3, 0x0, 0x700}, 0x0) 21:46:19 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e9, 0x700000000000000}, 0x0) 21:46:19 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ea, 0x700000000000000}, 0x0) 21:46:19 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d4, 0x0, 0x700}, 0x0) [ 3213.510860][T28338] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3213.541029][T10727] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3213.550129][T10727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3213.560093][T10727] usb 1-1: Product: syz [ 3213.564786][T10727] usb 1-1: Manufacturer: syz [ 3213.569377][T10727] usb 1-1: SerialNumber: syz [ 3213.600925][T28438] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 3213.611954][T10727] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3213.680886][T28216] usb 2-1: Service connection timeout for: 256 [ 3213.687201][T28216] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3213.695529][T28216] ath9k_htc: Failed to initialize the device [ 3213.701939][T27978] usb 2-1: ath9k_htc: USB layer deinitialized [ 3213.871460][T28338] usb 3-1: config index 0 descriptor too short (expected 64700, got 72) [ 3213.990891][T28438] usb 6-1: config index 0 descriptor too short (expected 64700, got 72) [ 3214.030893][T28338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3214.040156][T28338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.048576][T28338] usb 3-1: Product: syz [ 3214.053066][T28338] usb 3-1: Manufacturer: syz [ 3214.057774][T28338] usb 3-1: SerialNumber: syz [ 3214.072339][T27978] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 3214.101838][T28338] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3214.150985][T28438] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3214.165196][T28438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.174348][T28438] usb 6-1: Product: syz [ 3214.178529][T28438] usb 6-1: Manufacturer: syz [ 3214.180962][T10727] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3214.183273][T28438] usb 6-1: SerialNumber: syz [ 3214.232232][T28438] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3214.606090][T28438] usb 1-1: USB disconnect, device number 9 [ 3214.661200][T27978] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3214.670339][T27978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.670872][T28338] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3214.678942][T27978] usb 2-1: Product: syz [ 3214.693274][T27978] usb 2-1: Manufacturer: syz [ 3214.697976][T27978] usb 2-1: SerialNumber: syz [ 3214.743067][T27978] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3214.860925][T27862] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:46:21 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x0, 0x0, 0x0, 0x43}}) 21:46:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1eb, 0x700000000000000}, 0x0) 21:46:21 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d5, 0x0, 0x700}, 0x0) [ 3215.080025][T28821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3215.089037][T28821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3215.281810][ T22] usb 6-1: USB disconnect, device number 78 [ 3215.289411][ T9283] usb 3-1: USB disconnect, device number 32 [ 3215.370866][T27978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3215.440852][T10727] usb 1-1: Service connection timeout for: 256 [ 3215.447231][T10727] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3215.456570][T10727] ath9k_htc: Failed to initialize the device [ 3215.462923][T28438] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:21 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcbc}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000800608f8"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcbc}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000800608f8"]) (async) 21:46:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ec, 0x700000000000000}, 0x0) [ 3215.760781][T28338] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3215.767963][T28338] ath9k_htc: Failed to initialize the device [ 3215.774611][ T9283] usb 3-1: ath9k_htc: USB layer deinitialized [ 3215.795023][T27825] usb 2-1: USB disconnect, device number 122 [ 3215.860835][T28438] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3215.920829][T27862] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3215.927835][T27862] ath9k_htc: Failed to initialize the device [ 3215.935654][ T22] usb 6-1: ath9k_htc: USB layer deinitialized [ 3216.225580][ T9283] usb 3-1: new high-speed USB device number 33 using dummy_hcd 21:46:22 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 21:46:22 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d6, 0x0, 0x700}, 0x0) 21:46:22 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:22 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ed, 0x700000000000000}, 0x0) 21:46:22 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d7, 0x0, 0x700}, 0x0) 21:46:22 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ee, 0x700000000000000}, 0x0) 21:46:22 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d8, 0x0, 0x700}, 0x0) [ 3216.462688][T28438] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3216.472090][T28438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3216.480086][T28438] usb 1-1: Product: syz [ 3216.484424][T28438] usb 1-1: Manufacturer: syz [ 3216.489040][T28438] usb 1-1: SerialNumber: syz [ 3216.541737][T28438] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3216.610810][T24210] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 3216.620864][ T9283] usb 3-1: config index 0 descriptor too short (expected 64700, got 72) [ 3216.640925][T27978] usb 2-1: Service connection timeout for: 256 [ 3216.647123][T27978] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3216.655470][T27978] ath9k_htc: Failed to initialize the device [ 3216.661578][T27825] usb 2-1: ath9k_htc: USB layer deinitialized [ 3216.810886][ T9283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3216.820977][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3216.829008][ T9283] usb 3-1: Product: syz [ 3216.833708][ T9283] usb 3-1: Manufacturer: syz [ 3216.838803][ T9283] usb 3-1: SerialNumber: syz [ 3216.881882][ T9283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3217.050949][T27825] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3217.130957][T24210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3217.140041][T24210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.148899][T24210] usb 6-1: Product: syz [ 3217.153149][T24210] usb 6-1: Manufacturer: syz [ 3217.157749][T24210] usb 6-1: SerialNumber: syz [ 3217.202374][T24210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3217.211598][T27979] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3217.530970][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3217.611081][T27825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3217.620168][T27825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.629307][T28338] usb 1-1: USB disconnect, device number 10 [ 3217.633197][T27825] usb 2-1: Product: syz [ 3217.639726][T27825] usb 2-1: Manufacturer: syz [ 3217.648528][T27825] usb 2-1: SerialNumber: syz [ 3217.704597][T27825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3217.770824][T24210] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3217.932817][T28849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3217.942282][T28849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 21:46:24 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ef, 0x700000000000000}, 0x0) 21:46:24 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1d9, 0x0, 0x700}, 0x0) [ 3218.133497][T27978] usb 3-1: USB disconnect, device number 33 [ 3218.201745][T10727] usb 6-1: USB disconnect, device number 79 [ 3218.370905][T27825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3218.481853][T27979] usb 1-1: Service connection timeout for: 256 [ 3218.488165][T27979] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3218.497248][T27979] ath9k_htc: Failed to initialize the device [ 3218.503627][T28338] usb 1-1: ath9k_htc: USB layer deinitialized [ 3218.570894][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3218.590915][ T22] ath9k_htc: Failed to initialize the device [ 3218.597227][T27978] usb 3-1: ath9k_htc: USB layer deinitialized 21:46:24 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x4000, 0x42, {0x0, 0x2710}, {0x1, 0x0, 0x8, 0x1, 0x1, 0x3, "0b0f054b"}, 0x3a09e624, 0x2, {&(0x7f0000000140)=[{0x3, 0x3, {&(0x7f0000000040)}, 0x8}, {0x101, 0x3f, {&(0x7f0000000080)}, 0x80000000}]}, 0x6}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@mmap={0x7, 0x1, 0x4, 0x2000, 0x5, {0x0, 0x2710}, {0x4, 0x7, 0xe, 0x4, 0x7, 0x3f, "da22aad9"}, 0x1, 0x1, {}, 0x1}) r1 = syz_usb_connect_ath9k(0x3, 0xd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfcfc}}]}}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0x1, 0x3, 0x5ea}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x80000001, 0x2, 0x4, 0x4, 0xc075, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x7f, 0x6, 0x64, "3ca5441c"}, 0x0, 0x2, {&(0x7f0000000440)=[{0x798, 0x9, {&(0x7f00000003c0)}, 0x2}, {0xff, 0x8, {&(0x7f0000000400)}, 0xd9d5}]}, 0xff, 0x0, r0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x1000000, 0xfffff000}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:46:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1da, 0x0, 0x700}, 0x0) 21:46:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4", {0x1, 0x0, 0x0, 0x0, 0x43}}) 21:46:24 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f0, 0x700000000000000}, 0x0) [ 3218.800780][T24210] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3218.807729][T24210] ath9k_htc: Failed to initialize the device [ 3218.820375][T10727] usb 6-1: ath9k_htc: USB layer deinitialized [ 3218.830901][ T3666] usb 2-1: USB disconnect, device number 123 [ 3218.881039][T28338] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3219.190790][T10727] usb 6-1: new high-speed USB device number 80 using dummy_hcd 21:46:25 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1db, 0x0, 0x700}, 0x0) 21:46:25 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f1, 0x700000000000000}, 0x0) 21:46:25 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:46:25 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x4000, 0x42, {0x0, 0x2710}, {0x1, 0x0, 0x8, 0x1, 0x1, 0x3, "0b0f054b"}, 0x3a09e624, 0x2, {&(0x7f0000000140)=[{0x3, 0x3, {&(0x7f0000000040)}, 0x8}, {0x101, 0x3f, {&(0x7f0000000080)}, 0x80000000}]}, 0x6}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@mmap={0x7, 0x1, 0x4, 0x2000, 0x5, {0x0, 0x2710}, {0x4, 0x7, 0xe, 0x4, 0x7, 0x3f, "da22aad9"}, 0x1, 0x1, {}, 0x1}) (async) r1 = syz_usb_connect_ath9k(0x3, 0xd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfcfc}}]}}, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0x1, 0x3, 0x5ea}) (async, rerun: 64) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x80000001, 0x2, 0x4, 0x4, 0xc075, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x7f, 0x6, 0x64, "3ca5441c"}, 0x0, 0x2, {&(0x7f0000000440)=[{0x798, 0x9, {&(0x7f00000003c0)}, 0x2}, {0xff, 0x8, {&(0x7f0000000400)}, 0xd9d5}]}, 0xff, 0x0, r0}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x1000000, 0xfffff000}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (rerun: 64) 21:46:25 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x4000, 0x42, {0x0, 0x2710}, {0x1, 0x0, 0x8, 0x1, 0x1, 0x3, "0b0f054b"}, 0x3a09e624, 0x2, {&(0x7f0000000140)=[{0x3, 0x3, {&(0x7f0000000040)}, 0x8}, {0x101, 0x3f, {&(0x7f0000000080)}, 0x80000000}]}, 0x6}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@mmap={0x7, 0x1, 0x4, 0x2000, 0x5, {0x0, 0x2710}, {0x4, 0x7, 0xe, 0x4, 0x7, 0x3f, "da22aad9"}, 0x1, 0x1, {}, 0x1}) r1 = syz_usb_connect_ath9k(0x3, 0xd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfcfc}}]}}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0x1, 0x3, 0x5ea}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x80000001, 0x2, 0x4, 0x4, 0xc075, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x7f, 0x6, 0x64, "3ca5441c"}, 0x0, 0x2, {&(0x7f0000000440)=[{0x798, 0x9, {&(0x7f00000003c0)}, 0x2}, {0xff, 0x8, {&(0x7f0000000400)}, 0xd9d5}]}, 0xff, 0x0, r0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x1000000, 0xfffff000}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x4000, 0x42, {0x0, 0x2710}, {0x1, 0x0, 0x8, 0x1, 0x1, 0x3, "0b0f054b"}, 0x3a09e624, 0x2, {&(0x7f0000000140)=[{0x3, 0x3, {&(0x7f0000000040)}, 0x8}, {0x101, 0x3f, {&(0x7f0000000080)}, 0x80000000}]}, 0x6}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@mmap={0x7, 0x1, 0x4, 0x2000, 0x5, {0x0, 0x2710}, {0x4, 0x7, 0xe, 0x4, 0x7, 0x3f, "da22aad9"}, 0x1, 0x1, {}, 0x1}) (async) syz_usb_connect_ath9k(0x3, 0xd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfcfc}}]}}, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0x1, 0x3, 0x5ea}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x80000001, 0x2, 0x4, 0x4, 0xc075, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x7f, 0x6, 0x64, "3ca5441c"}, 0x0, 0x2, {&(0x7f0000000440)=[{0x798, 0x9, {&(0x7f00000003c0)}, 0x2}, {0xff, 0x8, {&(0x7f0000000400)}, 0xd9d5}]}, 0xff, 0x0, r0}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x1000000, 0xfffff000}) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (async) 21:46:25 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1dc, 0x0, 0x700}, 0x0) [ 3219.401318][T28338] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3219.410608][T28338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3219.422059][T28338] usb 1-1: Product: syz [ 3219.428780][T28338] usb 1-1: Manufacturer: syz [ 3219.433875][T28338] usb 1-1: SerialNumber: syz [ 3219.482352][T28338] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3219.681247][T27825] usb 2-1: Service connection timeout for: 256 [ 3219.687451][T27825] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3219.696104][T27825] ath9k_htc: Failed to initialize the device [ 3219.705065][ T3666] usb 2-1: ath9k_htc: USB layer deinitialized [ 3219.711942][T10727] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3219.723328][T10727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3219.733241][T10727] usb 6-1: Product: syz [ 3219.737627][T10727] usb 6-1: Manufacturer: syz [ 3219.742497][T10727] usb 6-1: SerialNumber: syz [ 3219.781637][T10727] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3220.050909][T28338] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3220.080767][ T3666] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3220.350953][T28216] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3220.466835][ T22] usb 1-1: USB disconnect, device number 11 [ 3220.600809][ T3666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3220.614272][ T3666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3220.624325][ T3666] usb 2-1: Product: syz [ 3220.628605][ T3666] usb 2-1: Manufacturer: syz [ 3220.633523][ T3666] usb 2-1: SerialNumber: syz [ 3220.682009][ T3666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3220.776806][T27978] usb 6-1: USB disconnect, device number 80 21:46:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f2, 0x700000000000000}, 0x0) 21:46:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1dd, 0x0, 0x700}, 0x0) 21:46:27 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:27 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1c8, 0x0, 0x700}, 0x0) 21:46:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f3, 0x700000000000000}, 0x0) 21:46:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1de, 0x0, 0x700}, 0x0) [ 3221.260841][ T3666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3221.270864][T24210] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3221.285659][T28338] usb 1-1: Service connection timeout for: 256 [ 3221.292490][T28338] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 21:46:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f4, 0x700000000000000}, 0x0) [ 3221.305812][T28338] ath9k_htc: Failed to initialize the device [ 3221.312709][ T22] usb 1-1: ath9k_htc: USB layer deinitialized [ 3221.469596][T27979] usb 2-1: USB disconnect, device number 124 [ 3221.600784][T28216] usb 6-1: Service connection timeout for: 256 [ 3221.606977][T28216] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3221.619712][T28216] ath9k_htc: Failed to initialize the device [ 3221.625886][T27978] usb 6-1: ath9k_htc: USB layer deinitialized [ 3221.680885][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3221.830858][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3221.840103][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3221.848375][T24210] usb 3-1: Product: syz [ 3221.853171][T24210] usb 3-1: Manufacturer: syz [ 3221.857877][T24210] usb 3-1: SerialNumber: syz [ 3221.903915][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 21:46:28 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:46:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @raw_data="9157fab2d80e04646ecdea10c89a9da5032427799945901067d869e28e42936b69a84a345a210ae3b4ac512de0810b159f82600a7757d33e1a8c16e7d40a38a21e363d902cc2b98f84a310df35b7bb7ad4562dde65b73fa27e70787c1e77743d8d8ecf7ec6dd76e2baffae80173477fb4646fc7095d546153cfeee321e805d3ed9fe8ad4a807a09ddebb8e57db0b189c5cf42bcdb97229ae8f413c805002c7ffc430bc7afd8cd43597294a66194b14ff0355f6553fac6c49df8289e4f0c86c06b1bca450253c4a7f"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 21:46:28 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1df, 0x0, 0x700}, 0x0) 21:46:28 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f5, 0x700000000000000}, 0x0) 21:46:28 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xf7, 0x700000000000000}, 0x0) 21:46:28 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e0, 0x0, 0x700}, 0x0) [ 3222.200795][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3222.210043][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3222.218590][ T22] usb 1-1: Product: syz [ 3222.223569][ T22] usb 1-1: Manufacturer: syz [ 3222.228188][ T22] usb 1-1: SerialNumber: syz [ 3222.271323][ T22] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3222.331214][ T3666] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3222.338464][ T3666] ath9k_htc: Failed to initialize the device [ 3222.345061][T27979] usb 2-1: ath9k_htc: USB layer deinitialized [ 3222.550833][T24210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3222.700904][T27979] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3222.850894][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3223.172101][T28338] usb 3-1: USB disconnect, device number 34 [ 3223.260980][T27979] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3223.270063][T27979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3223.274136][T28216] usb 1-1: USB disconnect, device number 12 [ 3223.284218][T27979] usb 2-1: Product: syz [ 3223.297145][T27979] usb 2-1: Manufacturer: syz [ 3223.301859][T27979] usb 2-1: SerialNumber: syz [ 3223.355683][T27979] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3223.600797][T24210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3223.607847][T24210] ath9k_htc: Failed to initialize the device [ 3223.618658][T28338] usb 3-1: ath9k_htc: USB layer deinitialized 21:46:29 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:29 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f6, 0x700000000000000}, 0x0) 21:46:29 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e1, 0x0, 0x700}, 0x0) 21:46:29 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x3, 0x2}) 21:46:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f7, 0x700000000000000}, 0x0) [ 3224.030895][T27979] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3224.060833][T10727] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 3224.070860][T28338] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3224.170775][ T22] usb 1-1: Service connection timeout for: 256 [ 3224.177209][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3224.185666][ T22] ath9k_htc: Failed to initialize the device [ 3224.191999][T28216] usb 1-1: ath9k_htc: USB layer deinitialized [ 3224.240985][ T3666] usb 2-1: USB disconnect, device number 125 [ 3224.550984][T28216] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3224.580939][T10727] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3224.589989][T10727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3224.598467][T28338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3224.608041][T28338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3224.616137][T28338] usb 3-1: Product: syz [ 3224.621741][T10727] usb 6-1: Product: syz [ 3224.625941][T10727] usb 6-1: Manufacturer: syz [ 3224.630556][T10727] usb 6-1: SerialNumber: syz [ 3224.635300][T28338] usb 3-1: Manufacturer: syz [ 3224.639915][T28338] usb 3-1: SerialNumber: syz [ 3224.681900][T28338] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3224.691427][T10727] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 21:46:30 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:46:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e2, 0x0, 0x700}, 0x0) 21:46:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f8, 0x700000000000000}, 0x0) 21:46:30 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e3, 0x0, 0x700}, 0x0) 21:46:30 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f9, 0x700000000000000}, 0x0) 21:46:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fa, 0x700000000000000}, 0x0) [ 3225.081225][T28216] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3225.090307][T28216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3225.098407][T28216] usb 1-1: Product: syz [ 3225.103088][T28216] usb 1-1: Manufacturer: syz [ 3225.107706][T28216] usb 1-1: SerialNumber: syz [ 3225.131025][T27979] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3225.138030][T27979] ath9k_htc: Failed to initialize the device [ 3225.144562][ T3666] usb 2-1: ath9k_htc: USB layer deinitialized [ 3225.151861][T28216] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3225.260890][T28338] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3225.270894][T24210] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3225.479661][T28932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3225.488327][T28932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3225.502984][ T22] usb 6-1: USB disconnect, device number 81 [ 3225.530908][ T3666] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3225.730993][T28216] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3225.882227][T27978] usb 3-1: USB disconnect, device number 35 [ 3226.051080][ T3666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3226.060305][ T3666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3226.068607][ T3666] usb 2-1: Product: syz [ 3226.073098][ T3666] usb 2-1: Manufacturer: syz [ 3226.077885][ T3666] usb 2-1: SerialNumber: syz [ 3226.121435][ T3666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3226.320845][T28338] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3226.327848][T28338] ath9k_htc: Failed to initialize the device [ 3226.334356][T24210] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3226.341505][T24210] ath9k_htc: Failed to initialize the device [ 3226.347689][ T22] usb 6-1: ath9k_htc: USB layer deinitialized [ 3226.353919][T27978] usb 3-1: ath9k_htc: USB layer deinitialized 21:46:32 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) [ 3226.376896][ T9283] usb 1-1: USB disconnect, device number 13 [ 3226.700913][T10727] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3226.780743][T27978] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3226.800802][T28216] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3226.807848][T28216] ath9k_htc: Failed to initialize the device [ 3226.818643][ T9283] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:33 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:33 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e4, 0x0, 0x700}, 0x0) 21:46:33 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fb, 0x700000000000000}, 0x0) 21:46:33 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f9, 0x700000000000000}, 0x0) 21:46:33 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fc, 0x700000000000000}, 0x0) [ 3226.912604][T27979] usb 2-1: USB disconnect, device number 126 [ 3227.310837][ T9283] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3227.350879][T27978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3227.360269][T27978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3227.375184][T27978] usb 3-1: Product: syz [ 3227.379360][T27978] usb 3-1: Manufacturer: syz [ 3227.384660][T27978] usb 3-1: SerialNumber: syz 21:46:33 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:33 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fb, 0x700000000000000}, 0x0) 21:46:33 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e5, 0x0, 0x700}, 0x0) 21:46:33 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fd, 0x700000000000000}, 0x0) 21:46:33 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fe, 0x700000000000000}, 0x0) 21:46:33 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x201, 0x700000000000000}, 0x0) [ 3227.460745][T27978] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3227.760772][T10727] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3227.767954][T10727] ath9k_htc: Failed to initialize the device [ 3227.774630][T27979] usb 2-1: ath9k_htc: USB layer deinitialized [ 3227.900992][ T9283] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3227.910243][ T9283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3227.918486][ T9283] usb 1-1: Product: syz [ 3227.923054][ T9283] usb 1-1: Manufacturer: syz [ 3227.927677][ T9283] usb 1-1: SerialNumber: syz [ 3227.971470][ T9283] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3228.141016][T27978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3228.570898][T27825] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3228.752990][T28338] usb 3-1: USB disconnect, device number 36 21:46:35 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usbip_server_init(0x2) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1a00000a000000"]) [ 3229.200768][T27978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3229.203079][T28216] usb 1-1: USB disconnect, device number 14 [ 3229.207747][T27978] ath9k_htc: Failed to initialize the device [ 3229.226561][T28338] usb 3-1: ath9k_htc: USB layer deinitialized [ 3229.600778][T27825] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3229.607724][T27825] ath9k_htc: Failed to initialize the device [ 3229.614375][T28216] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:35 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e6, 0x0, 0x700}, 0x0) 21:46:35 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xe8, 0x700000000000000}, 0x0) 21:46:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x202, 0x700000000000000}, 0x0) 21:46:35 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) [ 3229.672821][T28338] usb 3-1: new high-speed USB device number 37 using dummy_hcd 21:46:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e7, 0x0, 0x700}, 0x0) 21:46:35 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x20, 0x8}, 'port0\x00', 0x8b, 0x28, 0x7, 0x1000, 0x1000, 0x8c, 0x3, 0x0, 0x2, 0x9}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:46:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x203, 0x700000000000000}, 0x0) 21:46:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x204, 0x700000000000000}, 0x0) 21:46:35 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e8, 0x0, 0x700}, 0x0) 21:46:36 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1e9, 0x0, 0x700}, 0x0) [ 3230.070906][ T3666] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 3230.180833][T28216] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3230.280970][T28338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3230.290047][T28338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3230.298237][T28338] usb 3-1: Product: syz [ 3230.302592][T28338] usb 3-1: Manufacturer: syz [ 3230.307206][T28338] usb 3-1: SerialNumber: syz [ 3230.351910][T28338] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3230.661084][ T3666] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3230.670338][ T3666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3230.678507][ T3666] usb 6-1: Product: syz [ 3230.682948][ T3666] usb 6-1: Manufacturer: syz [ 3230.687565][ T3666] usb 6-1: SerialNumber: syz [ 3230.741606][ T3666] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3230.761110][T28216] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3230.771305][T28216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3230.779632][T28216] usb 1-1: Product: syz [ 3230.784553][T28216] usb 1-1: Manufacturer: syz [ 3230.789344][T28216] usb 1-1: SerialNumber: syz [ 3230.833150][T28216] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3230.990894][T28338] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3231.195704][T28976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3231.204843][T28976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3231.215124][T28976] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 3231.221654][T28976] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3231.229815][T28976] vhci_hcd vhci_hcd.0: Device attached [ 3231.340949][ T3666] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3231.431130][T27979] vhci_hcd: vhci_device speed not set [ 3231.437933][T28999] vhci_hcd: connection closed [ 3231.438533][T28216] usb 3-1: USB disconnect, device number 37 [ 3231.453077][ T7604] vhci_hcd: stop threads [ 3231.454012][T24210] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3231.458187][ T7604] vhci_hcd: release socket [ 3231.474020][ T7604] vhci_hcd: disconnect device [ 3231.500902][T27979] usb 13-1: new full-speed USB device number 9 using vhci_hcd [ 3231.509119][T27979] usb 13-1: enqueue for inactive port 0 [ 3231.590948][T27979] vhci_hcd: vhci_device speed not set [ 3231.768716][T27978] usb 6-1: USB disconnect, device number 82 21:46:38 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usbip_server_init(0x2) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1a00000a000000"]) [ 3231.963157][T29003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3231.974083][T29003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3232.080824][T28338] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3232.088130][T28338] ath9k_htc: Failed to initialize the device [ 3232.095064][T28216] usb 3-1: ath9k_htc: USB layer deinitialized [ 3232.113765][T10727] usb 1-1: USB disconnect, device number 15 [ 3232.400831][ T3666] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3232.407910][ T3666] ath9k_htc: Failed to initialize the device [ 3232.414280][T27978] usb 6-1: ath9k_htc: USB layer deinitialized [ 3232.480881][T24210] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3232.488151][T24210] ath9k_htc: Failed to initialize the device [ 3232.495062][T10727] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ea, 0x0, 0x700}, 0x0) 21:46:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x205, 0x700000000000000}, 0x0) 21:46:38 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:46:38 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async, rerun: 64) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (rerun: 64) syz_usbip_server_init(0x2) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1a00000a000000"]) 21:46:38 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) 21:46:38 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x206, 0x700000000000000}, 0x0) 21:46:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1eb, 0x0, 0x700}, 0x0) 21:46:38 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xbe, 0x0, 0x700}, 0x0) 21:46:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x207, 0x700000000000000}, 0x0) 21:46:38 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 21:46:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ec, 0x0, 0x700}, 0x0) 21:46:38 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x208, 0x700000000000000}, 0x0) 21:46:38 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ed, 0x0, 0x700}, 0x0) [ 3232.900787][T27979] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3233.080804][T10727] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3233.430844][T27979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3233.440030][T27979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3233.448437][T27979] usb 3-1: Product: syz [ 3233.452885][T27979] usb 3-1: Manufacturer: syz [ 3233.457681][T27979] usb 3-1: SerialNumber: syz [ 3233.501781][T27979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3233.601162][T10727] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3233.610256][T10727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3233.618615][T10727] usb 1-1: Product: syz [ 3233.623122][T10727] usb 1-1: Manufacturer: syz [ 3233.629028][T10727] usb 1-1: SerialNumber: syz [ 3233.671524][T10727] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3234.130957][T27979] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3234.240929][T10727] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3234.332299][T29012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.347711][T29012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.357069][T29035] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(70) [ 3234.363715][T29035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3234.371706][T29035] vhci_hcd vhci_hcd.0: Device attached [ 3234.579852][ T9283] usb 3-1: USB disconnect, device number 38 [ 3234.590798][T27825] vhci_hcd: vhci_device speed not set [ 3234.646536][T27978] usb 1-1: USB disconnect, device number 16 [ 3234.660772][T27825] usb 13-1: new full-speed USB device number 10 using vhci_hcd 21:46:41 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:46:41 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x6}, 0x98c) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:46:41 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ee, 0x0, 0x700}, 0x0) 21:46:41 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x209, 0x700000000000000}, 0x0) 21:46:41 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:41 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x1, 'queue1\x00', 0x5}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000061eda78d54e018947539d0bd1834a997a78e692b07491cf3f433d9acfdf6c0efc7d8ef32d496bbd52a3052d3c81b9327e5f2976bf7b5d8c6b6fd9dc148dddc"]) [ 3235.084594][T29036] vhci_hcd: connection reset by peer [ 3235.098064][ T7604] vhci_hcd: stop threads [ 3235.102463][ T7604] vhci_hcd: release socket [ 3235.106955][ T7604] vhci_hcd: disconnect device 21:46:41 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ef, 0x0, 0x700}, 0x0) 21:46:41 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x20a, 0x700000000000000}, 0x0) 21:46:41 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f0, 0x0, 0x700}, 0x0) 21:46:41 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x20b, 0x700000000000000}, 0x0) [ 3235.210811][T27979] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3235.223678][T27979] ath9k_htc: Failed to initialize the device [ 3235.238351][ T9283] usb 3-1: ath9k_htc: USB layer deinitialized 21:46:41 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f1, 0x0, 0x700}, 0x0) 21:46:41 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x20c, 0x700000000000000}, 0x0) [ 3235.280802][T10727] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3235.290123][T10727] ath9k_htc: Failed to initialize the device [ 3235.308240][T27978] usb 1-1: ath9k_htc: USB layer deinitialized [ 3235.460843][ T3666] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 3235.630749][ T9283] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3235.686072][T27978] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3235.980841][ T3666] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3235.990407][ T3666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3235.999404][ T3666] usb 6-1: Product: syz [ 3236.004425][ T3666] usb 6-1: Manufacturer: syz [ 3236.009102][ T3666] usb 6-1: SerialNumber: syz [ 3236.051532][ T3666] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3236.210872][ T9283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3236.219943][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3236.228539][ T9283] usb 3-1: Product: syz [ 3236.233079][ T9283] usb 3-1: Manufacturer: syz [ 3236.237708][ T9283] usb 3-1: SerialNumber: syz [ 3236.280973][T27978] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3236.290070][T27978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3236.302525][ T9283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3236.315363][T27978] usb 1-1: Product: syz [ 3236.319577][T27978] usb 1-1: Manufacturer: syz [ 3236.324460][T27978] usb 1-1: SerialNumber: syz [ 3236.371721][T27978] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3236.630985][ T3666] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3236.953084][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3237.020940][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3237.052731][T28338] usb 6-1: USB disconnect, device number 83 [ 3237.367723][T27979] usb 3-1: USB disconnect, device number 39 [ 3237.438613][T28216] usb 1-1: USB disconnect, device number 17 [ 3237.680740][ T3666] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3237.687756][ T3666] ath9k_htc: Failed to initialize the device [ 3237.694152][T28338] usb 6-1: ath9k_htc: USB layer deinitialized 21:46:44 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:46:44 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f2, 0x0, 0x700}, 0x0) 21:46:44 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x20d, 0x700000000000000}, 0x0) 21:46:44 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:44 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1ee, 0x0, 0x700}, 0x0) 21:46:44 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x1, 'queue1\x00', 0x5}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000061eda78d54e018947539d0bd1834a997a78e692b07491cf3f433d9acfdf6c0efc7d8ef32d496bbd52a3052d3c81b9327e5f2976bf7b5d8c6b6fd9dc148dddc"]) (rerun: 64) 21:46:44 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x20e, 0x700000000000000}, 0x0) 21:46:44 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f3, 0x0, 0x700}, 0x0) 21:46:44 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xb2, 0x0, 0x700}, 0x0) [ 3238.003284][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3238.010288][ T9283] ath9k_htc: Failed to initialize the device 21:46:44 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f4, 0x0, 0x700}, 0x0) 21:46:44 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x40086602, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18b6b6a1edaa54ba}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8801) 21:46:44 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x20f, 0x700000000000000}, 0x0) [ 3238.044198][T27979] usb 3-1: ath9k_htc: USB layer deinitialized [ 3238.080860][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3238.087865][ T22] ath9k_htc: Failed to initialize the device [ 3238.108189][T28216] usb 1-1: ath9k_htc: USB layer deinitialized [ 3238.430727][T27979] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3238.490784][T28216] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3239.010881][T28216] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3239.020066][T28216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3239.028269][T28216] usb 1-1: Product: syz [ 3239.030960][T27979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3239.032756][T28216] usb 1-1: Manufacturer: syz [ 3239.046384][T28216] usb 1-1: SerialNumber: syz [ 3239.049152][T27979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3239.063990][T27979] usb 3-1: Product: syz [ 3239.068192][T27979] usb 3-1: Manufacturer: syz [ 3239.077442][T27979] usb 3-1: SerialNumber: syz [ 3239.112360][T28216] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3239.134101][T27979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3239.681007][T28216] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3239.772432][T27825] vhci_hcd: vhci_device speed not set [ 3239.790808][T28438] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3240.095833][ T3666] usb 1-1: USB disconnect, device number 18 21:46:46 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:46 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f5, 0x0, 0x700}, 0x0) 21:46:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x210, 0x700000000000000}, 0x0) 21:46:46 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xce, 0x700000000000000}, 0x0) 21:46:46 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) [ 3240.720930][T28216] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3240.727945][T28216] ath9k_htc: Failed to initialize the device [ 3240.734301][ T3666] usb 1-1: ath9k_htc: USB layer deinitialized [ 3240.890917][T28438] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3240.899627][T28438] ath9k_htc: Failed to initialize the device [ 3241.090735][ T3666] usb 1-1: new high-speed USB device number 19 using dummy_hcd 21:46:47 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x1, 'queue1\x00', 0x5}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000061eda78d54e018947539d0bd1834a997a78e692b07491cf3f433d9acfdf6c0efc7d8ef32d496bbd52a3052d3c81b9327e5f2976bf7b5d8c6b6fd9dc148dddc"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x1, 'queue1\x00', 0x5}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000061eda78d54e018947539d0bd1834a997a78e692b07491cf3f433d9acfdf6c0efc7d8ef32d496bbd52a3052d3c81b9327e5f2976bf7b5d8c6b6fd9dc148dddc"]) (async) 21:46:47 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) 21:46:47 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f6, 0x0, 0x700}, 0x0) 21:46:47 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x211, 0x700000000000000}, 0x0) 21:46:47 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:47 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f7, 0x0, 0x700}, 0x0) 21:46:47 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x212, 0x700000000000000}, 0x0) [ 3241.368538][T24210] usb 3-1: USB disconnect, device number 40 [ 3241.401515][T24210] usb 3-1: ath9k_htc: USB layer deinitialized [ 3241.610840][ T3666] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3241.621528][ T3666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3241.629553][ T3666] usb 1-1: Product: syz [ 3241.634418][ T3666] usb 1-1: Manufacturer: syz [ 3241.639020][ T3666] usb 1-1: SerialNumber: syz [ 3241.650895][T27979] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3241.680829][T27825] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3241.681560][ T3666] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3241.780953][T24210] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3242.221009][T27979] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3242.230873][T27979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3242.238887][T27979] usb 2-1: Product: syz [ 3242.243951][T27825] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3242.253203][T27979] usb 2-1: Manufacturer: syz [ 3242.257812][T27979] usb 2-1: SerialNumber: syz [ 3242.262495][T27825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3242.270494][T27825] usb 6-1: Product: syz [ 3242.275382][T27825] usb 6-1: Manufacturer: syz [ 3242.281156][T27825] usb 6-1: SerialNumber: syz [ 3242.283911][T10727] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3242.321635][T27979] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3242.331072][T24210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3242.331251][T27825] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3242.345304][T24210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3242.368022][T24210] usb 3-1: Product: syz [ 3242.382798][T24210] usb 3-1: Manufacturer: syz [ 3242.387566][T24210] usb 3-1: SerialNumber: syz [ 3242.431878][T24210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3242.715608][ T3666] usb 1-1: USB disconnect, device number 19 [ 3242.910919][T27825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3242.920737][T27979] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3243.070891][T28216] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3243.118723][ T9283] usb 2-1: USB disconnect, device number 127 21:46:49 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f8, 0x0, 0x700}, 0x0) 21:46:49 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x213, 0x700000000000000}, 0x0) 21:46:49 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x214, 0x700000000000000}, 0x0) 21:46:49 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f9, 0x0, 0x700}, 0x0) [ 3243.332470][T24210] usb 6-1: USB disconnect, device number 84 [ 3243.370944][T10727] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3243.378038][T10727] ath9k_htc: Failed to initialize the device [ 3243.384418][ T3666] usb 1-1: ath9k_htc: USB layer deinitialized 21:46:49 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1a8, &(0x7f0000000040)={[{0x3, 0x4e00, "8d9fd0"}, {0xfa, 0x4e00, "3a9f4047396060e3d1339b1e168bb6c1c2cc59c2aaa72867487f3cb026557224d5a73945cf3971efd1bd77c215c66b376e6fdd7517eea60cfcef8d6047cba6f48256dd86fdc2f48e332e2865ba0e9ea305d3a60792a737c21f6f3f9327682356f6851d6776176a9752e81717f1e274541ff3f3665852c2c322f27601c9c6ac3550df309cd148ae52aa0327f78766a9a6fc783371b97bfcacd37a0e4c9ccebfc07820599d705b7e91a03ce03a322c0e07543439e4cd8680f4bf401cf76812b5e2519504a3e4694b421c798764bf8d4c7939ae862ecb00b60f5352b15da61203dc0b2a7b4170655f1dfa4fd7b73d411303dfff66fcb1c656d0f8f4"}, {0xb, 0x4e00, "b719c5446c04cf489bfa82"}, {0x8a, 0x4e00, "d1cbaa9475d060665e9e41d87b150c47e2de32e9e1d41e59c0430fce791bb4588841841257bc2f44256ff769fe3650191928cb44aefb4b9e3cd9cc99417fa745e1d7ac82dc33552141d76595885777d314eb21407c402e057d6ff6f006b5d5aca1a3ef6f35801c7f8feebedc36f983d8185bcc6ef3ca68f8c4bdc6619e71e7f132f9bec7e3d35fe3a0ab"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) [ 3243.483503][T28438] usb 3-1: USB disconnect, device number 41 21:46:50 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1f8, 0x0, 0x700}, 0x0) 21:46:50 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x215, 0x700000000000000}, 0x0) 21:46:50 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fa, 0x0, 0x700}, 0x0) 21:46:50 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:50 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:50 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fb, 0x0, 0x700}, 0x0) 21:46:50 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x216, 0x700000000000000}, 0x0) 21:46:50 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x217, 0x700000000000000}, 0x0) 21:46:50 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fc, 0x0, 0x700}, 0x0) 21:46:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x1ff, 0x4, 0x980}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x4, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x8, 0x1, 0x81, 0x7, 0x0, "cf6a0988"}, 0x5051, 0x1, {}, 0x9, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x440c0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffc, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000200)={0x0, 0x5, [{r1, 0x0, 0x10000, 0x10000}, {r1, 0x0, 0x100000000, 0x100000000}, {r1, 0x0, 0x8000, 0x2000}, {r4, 0x0, 0xfffffffff0000000, 0x100000000}, {r1, 0x0, 0xfffff000, 0x100000000}]}) 21:46:50 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x218, 0x700000000000000}, 0x0) [ 3244.010820][T27979] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3244.017814][T27825] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3244.025027][T27979] ath9k_htc: Failed to initialize the device [ 3244.031980][T27825] ath9k_htc: Failed to initialize the device [ 3244.038238][T24210] usb 6-1: ath9k_htc: USB layer deinitialized [ 3244.038450][ T9283] usb 2-1: ath9k_htc: USB layer deinitialized [ 3244.161110][T28216] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3244.168216][T28216] ath9k_htc: Failed to initialize the device [ 3244.180580][T28438] usb 3-1: ath9k_htc: USB layer deinitialized [ 3244.420755][ T9283] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3244.550755][T28438] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3244.981167][ T9283] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3244.990248][ T9283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3244.998950][ T9283] usb 2-1: Product: syz [ 3245.003378][ T9283] usb 2-1: Manufacturer: syz [ 3245.007998][ T9283] usb 2-1: SerialNumber: syz [ 3245.063666][ T9283] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3245.131104][T28438] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3245.140208][T28438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3245.148830][T28438] usb 3-1: Product: syz [ 3245.153309][T28438] usb 3-1: Manufacturer: syz [ 3245.157944][T28438] usb 3-1: SerialNumber: syz [ 3245.211874][T28438] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3245.690882][T27978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3245.820857][T28438] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3245.899276][T27825] usb 2-1: USB disconnect, device number 2 [ 3246.444004][ T9283] usb 3-1: USB disconnect, device number 42 [ 3246.730907][T27978] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3246.739197][T27978] ath9k_htc: Failed to initialize the device [ 3246.745621][T27825] usb 2-1: ath9k_htc: USB layer deinitialized [ 3246.880766][T28438] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3246.887723][T28438] ath9k_htc: Failed to initialize the device [ 3246.894633][ T9283] usb 3-1: ath9k_htc: USB layer deinitialized 21:46:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fd, 0x0, 0x700}, 0x0) 21:46:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x1ff, 0x4, 0x980}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x4, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x8, 0x1, 0x81, 0x7, 0x0, "cf6a0988"}, 0x5051, 0x1, {}, 0x9, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x440c0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffc, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000200)={0x0, 0x5, [{r1, 0x0, 0x10000, 0x10000}, {r1, 0x0, 0x100000000, 0x100000000}, {r1, 0x0, 0x8000, 0x2000}, {r4, 0x0, 0xfffffffff0000000, 0x100000000}, {r1, 0x0, 0xfffff000, 0x100000000}]}) 21:46:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x219, 0x700000000000000}, 0x0) 21:46:53 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) 21:46:53 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1a8, &(0x7f0000000040)={[{0x3, 0x4e00, "8d9fd0"}, {0xfa, 0x4e00, "3a9f4047396060e3d1339b1e168bb6c1c2cc59c2aaa72867487f3cb026557224d5a73945cf3971efd1bd77c215c66b376e6fdd7517eea60cfcef8d6047cba6f48256dd86fdc2f48e332e2865ba0e9ea305d3a60792a737c21f6f3f9327682356f6851d6776176a9752e81717f1e274541ff3f3665852c2c322f27601c9c6ac3550df309cd148ae52aa0327f78766a9a6fc783371b97bfcacd37a0e4c9ccebfc07820599d705b7e91a03ce03a322c0e07543439e4cd8680f4bf401cf76812b5e2519504a3e4694b421c798764bf8d4c7939ae862ecb00b60f5352b15da61203dc0b2a7b4170655f1dfa4fd7b73d411303dfff66fcb1c656d0f8f4"}, {0xb, 0x4e00, "b719c5446c04cf489bfa82"}, {0x8a, 0x4e00, "d1cbaa9475d060665e9e41d87b150c47e2de32e9e1d41e59c0430fce791bb4588841841257bc2f44256ff769fe3650191928cb44aefb4b9e3cd9cc99417fa745e1d7ac82dc33552141d76595885777d314eb21407c402e057d6ff6f006b5d5aca1a3ef6f35801c7f8feebedc36f983d8185bcc6ef3ca68f8c4bdc6619e71e7f132f9bec7e3d35fe3a0ab"}]}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x0, 0x2, 0x0, "803108f8"}) (rerun: 32) 21:46:53 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "d70ea2e4"}) 21:46:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x1ff, 0x4, 0x980}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x4, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x8, 0x1, 0x81, 0x7, 0x0, "cf6a0988"}, 0x5051, 0x1, {}, 0x9, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x440c0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffc, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000200)={0x0, 0x5, [{r1, 0x0, 0x10000, 0x10000}, {r1, 0x0, 0x100000000, 0x100000000}, {r1, 0x0, 0x8000, 0x2000}, {r4, 0x0, 0xfffffffff0000000, 0x100000000}, {r1, 0x0, 0xfffff000, 0x100000000}]}) 21:46:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x21a, 0x700000000000000}, 0x0) 21:46:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1fe, 0x0, 0x700}, 0x0) 21:46:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x1ff, 0x4, 0x980}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x4, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x8, 0x1, 0x81, 0x7, 0x0, "cf6a0988"}, 0x5051, 0x1, {}, 0x9, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x440c0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffc, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, 0x0) 21:46:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x21b, 0x700000000000000}, 0x0) 21:46:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x201, 0x0, 0x700}, 0x0) 21:46:53 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x21c, 0x700000000000000}, 0x0) 21:46:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x1ff, 0x4, 0x980}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x4, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x8, 0x1, 0x81, 0x7, 0x0, "cf6a0988"}, 0x5051, 0x1, {}, 0x9, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x400448c9, &(0x7f00000002c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x440c0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffc, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:46:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x202, 0x0, 0x700}, 0x0) [ 3247.250732][T27825] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3247.380859][ T9283] usb 3-1: new high-speed USB device number 43 using dummy_hcd 21:46:53 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x284, &(0x7f0000000040)={[{0x3b, 0x4e00, "606dbe637eda05fd8a49b3f3e5e35af9962ad996a186c03e2d8704bd7d081a29a220bb4a90a756d558751746a2b2ec01dffd01d1b55f26c4ac57f0"}, {0xd5, 0x4e00, "0313b21669abb8be97bd52c9d34da96239057ccd154cddd0046bcd3323dc30437eb75f40a776ff582c7722d0958f5babbe23b79b1b5d53bfa6b74444fdade1206ff1e7be911d097b11efb6ff4cea65c0b8da68232efe30353801a665dbe9bac4d7f05fe75874997dc43afdd63bca5abbfa8296422df36ab3d65560dfb248774dbbafc2b4ddb565d166eef6a3d5d28e5a9ed018ed542ec7ca348a7a71a9d728f54c81b207310880946669c59268ae34f7526279f9f304f689050845a997f0b99f2431abb71c258caf0ecb701f28be9642a0f007dd05"}, {0x85, 0x4e00, "fc2f372bd5fff384bc845bb5f262e72bcbaf5ee20a4d3befc488bb446d4eea6616a827a01794bd3387716eff4923dc632e2b3d05ec3839c271c7cb9394085777dc9ee7c6a3adb40ff21957fae7a738f7b6c259384c0c6af12d017c2f9c60884d530f19ada96629a13cbd8f3f4876e6c6b749733669d2585325eb282d92be7ef5d17c909561"}, {0xd6, 0x4e00, "52ccefd5901545c5564cea32e3cb368e7606a400c59e41a78099c54c6820d5ee010dc652c74e1418b6292fd31dbad58baec482dbff7b41ffe1dc993ce5b9dcbf44924fa9a6305d689d5f4641b16a2554bd84d9e964a49a2cd36d9193f03dee61f8719c977f098b0d18717810808c1e6d1a7a6e9df513b5c2c1f7fcf39625277e27e6e5b06c19151123e74a9c1070d0d99b2456b4f5c8bc7a80d18c7928e08fa65f82d3cc80a8d5afd10b18aaad41b1c5de3a847ea710bfd93e25c4b3adf81c7f2ac33b022c01526bd651e19b720f57a19af34c13ee25"}]}) [ 3247.790833][T27825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3247.800047][T27825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.808514][T27825] usb 2-1: Product: syz [ 3247.813190][T27825] usb 2-1: Manufacturer: syz [ 3247.817786][T27825] usb 2-1: SerialNumber: syz [ 3247.862492][T27825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3247.901332][ T9283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3247.910433][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.919153][ T9283] usb 3-1: Product: syz [ 3247.923562][ T9283] usb 3-1: Manufacturer: syz [ 3247.928182][ T9283] usb 3-1: SerialNumber: syz [ 3247.983622][ T9283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3248.481305][T27978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3248.610882][ T9283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3248.686692][T28438] usb 2-1: USB disconnect, device number 3 [ 3249.520803][T27978] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3249.527780][T27978] ath9k_htc: Failed to initialize the device [ 3249.534164][T28438] usb 2-1: ath9k_htc: USB layer deinitialized [ 3249.681012][ T9283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3249.688021][ T9283] ath9k_htc: Failed to initialize the device [ 3249.910731][ C1] ================================================================== [ 3249.918817][ C1] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 3249.926606][ C1] Read of size 4 at addr ffff88801caac2e8 by task swapper/1/0 [ 3249.934068][ C1] [ 3249.936377][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 3249.945742][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3249.955805][ C1] Call Trace: [ 3249.959071][ C1] [ 3249.961911][ C1] dump_stack_lvl+0xcd/0x134 [ 3249.966527][ C1] print_address_description.constprop.0.cold+0xeb/0x495 [ 3249.973588][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 3249.978968][ C1] kasan_report.cold+0xf4/0x1c6 [ 3249.983824][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 3249.989226][ C1] ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 3249.994460][ C1] ? psi_cgroup_free+0xf0/0x180 [ 3249.999302][ C1] ? hif_usb_start+0xa0/0xa0 [ 3250.003888][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 3250.008843][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 3250.014259][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 3250.019537][ C1] dummy_timer+0x11f9/0x32b0 [ 3250.024208][ C1] ? dummy_dequeue+0x500/0x500 [ 3250.028988][ C1] ? dummy_dequeue+0x500/0x500 [ 3250.033741][ C1] call_timer_fn+0x1a5/0x6b0 [ 3250.038320][ C1] ? timer_fixup_activate+0x350/0x350 [ 3250.043687][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 3250.048551][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3250.053761][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3250.058946][ C1] ? dummy_dequeue+0x500/0x500 [ 3250.063708][ C1] __run_timers.part.0+0x679/0xa80 [ 3250.068833][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 3250.073605][ C1] ? __wake_up_locked_sync_key+0x20/0x20 [ 3250.079232][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 3250.084433][ C1] ? sched_clock_cpu+0x69/0x2b0 [ 3250.089304][ C1] run_timer_softirq+0xb3/0x1d0 [ 3250.094169][ C1] __do_softirq+0x29b/0x9c2 [ 3250.098682][ C1] __irq_exit_rcu+0x123/0x180 [ 3250.103358][ C1] irq_exit_rcu+0x5/0x20 [ 3250.107611][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 3250.113260][ C1] [ 3250.116179][ C1] [ 3250.119100][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3250.125082][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x240 [ 3250.130916][ C1] Code: 89 de e8 9a d3 ff f7 84 db 75 98 e8 91 d7 ff f7 e8 fc 26 06 f8 66 90 e8 85 d7 ff f7 0f 00 2d fe 24 b9 00 e8 79 d7 ff f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 c4 d3 ff f7 48 85 db [ 3250.150539][ C1] RSP: 0018:ffffc90000177d20 EFLAGS: 00000293 [ 3250.156591][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3250.164563][ C1] RDX: ffff888011a19d80 RSI: ffffffff897b0247 RDI: 0000000000000000 [ 3250.172545][ C1] RBP: ffff88801743a064 R08: 0000000000000001 R09: 0000000000000001 [ 3250.180503][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 3250.188467][ C1] R13: ffff88801743a000 R14: ffff88801743a064 R15: ffff8880181b7804 [ 3250.196430][ C1] ? acpi_idle_do_entry+0x1c7/0x240 [ 3250.201637][ C1] acpi_idle_enter+0x369/0x510 [ 3250.206429][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 3250.211631][ C1] cpuidle_enter+0x4a/0xa0 [ 3250.216063][ C1] do_idle+0x3e8/0x590 [ 3250.220128][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 3250.225160][ C1] cpu_startup_entry+0x14/0x20 [ 3250.229936][ C1] start_secondary+0x21d/0x2b0 [ 3250.234711][ C1] ? set_cpu_sibling_map+0x1ef0/0x1ef0 [ 3250.240161][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 3250.246068][ C1] [ 3250.249097][ C1] [ 3250.251426][ C1] Allocated by task 0: [ 3250.255487][ C1] (stack is not available) [ 3250.259882][ C1] [ 3250.262197][ C1] Freed by task 28438: [ 3250.266269][ C1] kasan_save_stack+0x1e/0x40 [ 3250.270966][ C1] kasan_set_track+0x21/0x30 [ 3250.275565][ C1] kasan_set_free_info+0x20/0x30 [ 3250.280493][ C1] ____kasan_slab_free+0x166/0x1a0 [ 3250.285602][ C1] slab_free_freelist_hook+0x8b/0x1c0 [ 3250.290999][ C1] kfree+0xe2/0x4d0 [ 3250.294820][ C1] skb_free_head+0xac/0x110 [ 3250.299333][ C1] skb_release_data+0x5f5/0x870 [ 3250.304175][ C1] consume_skb+0xc2/0x160 [ 3250.308510][ C1] nsim_dev_trap_report_work+0x855/0xba0 [ 3250.314193][ C1] process_one_work+0x996/0x1610 [ 3250.319129][ C1] worker_thread+0x665/0x1080 [ 3250.323830][ C1] kthread+0x2e9/0x3a0 [ 3250.327908][ C1] ret_from_fork+0x1f/0x30 [ 3250.332311][ C1] [ 3250.334635][ C1] The buggy address belongs to the object at ffff88801caac000 [ 3250.334635][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 3250.348673][ C1] The buggy address is located 744 bytes inside of [ 3250.348673][ C1] 4096-byte region [ffff88801caac000, ffff88801caad000) [ 3250.362034][ C1] [ 3250.364365][ C1] The buggy address belongs to the physical page: [ 3250.370779][ C1] page:ffffea000072aa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1caa8 [ 3250.380957][ C1] head:ffffea000072aa00 order:3 compound_mapcount:0 compound_pincount:0 [ 3250.389284][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 3250.397253][ C1] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888011842140 [ 3250.405840][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 3250.414447][ C1] page dumped because: kasan: bad access detected [ 3250.420852][ C1] page_owner tracks the page as allocated [ 3250.426575][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 28438, tgid 28438 (kworker/1:8), ts 3249801138467, free_ts 3249687985049 [ 3250.449182][ C1] get_page_from_freelist+0x1298/0x3b80 [ 3250.454730][ C1] __alloc_pages+0x1c7/0x510 [ 3250.459321][ C1] alloc_pages+0x1aa/0x310 [ 3250.463751][ C1] allocate_slab+0x26c/0x3c0 [ 3250.468365][ C1] ___slab_alloc+0x99f/0xe10 [ 3250.472953][ C1] __slab_alloc.constprop.0+0x4d/0xa0 [ 3250.478330][ C1] __kmalloc_node_track_caller+0x34f/0x4a0 [ 3250.484143][ C1] __alloc_skb+0xde/0x340 [ 3250.488497][ C1] nsim_dev_trap_report_work+0x291/0xba0 [ 3250.494160][ C1] process_one_work+0x996/0x1610 [ 3250.499111][ C1] worker_thread+0x665/0x1080 [ 3250.503781][ C1] kthread+0x2e9/0x3a0 [ 3250.507840][ C1] ret_from_fork+0x1f/0x30 [ 3250.512263][ C1] page last free stack trace: [ 3250.517077][ C1] free_pcp_prepare+0x549/0xd20 [ 3250.521944][ C1] free_unref_page+0x19/0x6a0 [ 3250.526639][ C1] device_release+0x9f/0x240 [ 3250.531297][ C1] kobject_put+0x1c8/0x540 [ 3250.535775][ C1] put_device+0x1b/0x30 [ 3250.539997][ C1] ath9k_htc_probe_device+0x1c7/0x1f00 [ 3250.545448][ C1] ath9k_htc_hw_init+0x31/0x60 [ 3250.550204][ C1] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 3250.555836][ C1] request_firmware_work_func+0x12c/0x230 [ 3250.561634][ C1] process_one_work+0x996/0x1610 [ 3250.566582][ C1] worker_thread+0x665/0x1080 [ 3250.571255][ C1] kthread+0x2e9/0x3a0 [ 3250.575342][ C1] ret_from_fork+0x1f/0x30 [ 3250.579769][ C1] [ 3250.582077][ C1] Memory state around the buggy address: [ 3250.587688][ C1] ffff88801caac180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3250.595746][ C1] ffff88801caac200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3250.603809][ C1] >ffff88801caac280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3250.611861][ C1] ^ [ 3250.619316][ C1] ffff88801caac300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3250.627390][ C1] ffff88801caac380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3250.635442][ C1] ================================================================== [ 3250.643506][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 3250.650093][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 3250.659469][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3250.669531][ C1] Call Trace: [ 3250.672804][ C1] [ 3250.675657][ C1] dump_stack_lvl+0xcd/0x134 [ 3250.680263][ C1] panic+0x2d7/0x636 [ 3250.684166][ C1] ? panic_print_sys_info.part.0+0x10b/0x10b [ 3250.690142][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 3250.695514][ C1] end_report.part.0+0x3f/0x7c [ 3250.700289][ C1] kasan_report.cold+0x93/0x1c6 [ 3250.705125][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 3250.710487][ C1] ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 3250.715685][ C1] ? psi_cgroup_free+0xf0/0x180 [ 3250.720550][ C1] ? hif_usb_start+0xa0/0xa0 [ 3250.725129][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 3250.730060][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 3250.735435][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 3250.740653][ C1] dummy_timer+0x11f9/0x32b0 [ 3250.745264][ C1] ? dummy_dequeue+0x500/0x500 [ 3250.750043][ C1] ? dummy_dequeue+0x500/0x500 [ 3250.754807][ C1] call_timer_fn+0x1a5/0x6b0 [ 3250.759443][ C1] ? timer_fixup_activate+0x350/0x350 [ 3250.764803][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 3250.769638][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3250.774839][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3250.780061][ C1] ? dummy_dequeue+0x500/0x500 [ 3250.784815][ C1] __run_timers.part.0+0x679/0xa80 [ 3250.789919][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 3250.794680][ C1] ? __wake_up_locked_sync_key+0x20/0x20 [ 3250.800320][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 3250.805506][ C1] ? sched_clock_cpu+0x69/0x2b0 [ 3250.810343][ C1] run_timer_softirq+0xb3/0x1d0 [ 3250.815191][ C1] __do_softirq+0x29b/0x9c2 [ 3250.819708][ C1] __irq_exit_rcu+0x123/0x180 [ 3250.824369][ C1] irq_exit_rcu+0x5/0x20 [ 3250.828597][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 3250.834229][ C1] [ 3250.837168][ C1] [ 3250.840098][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3250.846068][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x240 [ 3250.851875][ C1] Code: 89 de e8 9a d3 ff f7 84 db 75 98 e8 91 d7 ff f7 e8 fc 26 06 f8 66 90 e8 85 d7 ff f7 0f 00 2d fe 24 b9 00 e8 79 d7 ff f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 c4 d3 ff f7 48 85 db [ 3250.871512][ C1] RSP: 0018:ffffc90000177d20 EFLAGS: 00000293 [ 3250.877592][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3250.885553][ C1] RDX: ffff888011a19d80 RSI: ffffffff897b0247 RDI: 0000000000000000 [ 3250.893519][ C1] RBP: ffff88801743a064 R08: 0000000000000001 R09: 0000000000000001 [ 3250.901494][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 3250.909446][ C1] R13: ffff88801743a000 R14: ffff88801743a064 R15: ffff8880181b7804 [ 3250.917434][ C1] ? acpi_idle_do_entry+0x1c7/0x240 [ 3250.922665][ C1] acpi_idle_enter+0x369/0x510 [ 3250.927430][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 3250.932546][ C1] cpuidle_enter+0x4a/0xa0 [ 3250.936987][ C1] do_idle+0x3e8/0x590 [ 3250.941157][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 3250.946265][ C1] cpu_startup_entry+0x14/0x20 [ 3250.951044][ C1] start_secondary+0x21d/0x2b0 [ 3250.955841][ C1] ? set_cpu_sibling_map+0x1ef0/0x1ef0 [ 3250.961335][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 3250.967233][ C1] [ 3250.970411][ C1] Kernel Offset: disabled [ 3250.974731][ C1] Rebooting in 86400 seconds..