own main item tag 0x0 [ 1582.432241][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.439690][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.447100][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.454551][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.461987][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.469438][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.476847][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.484390][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.491832][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.499289][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.506700][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.511693][T19272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.514242][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.530016][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.535009][T19272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.537398][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.552606][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.560076][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.567485][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.574965][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.582409][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.589884][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.597292][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.604748][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.612195][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.619646][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.627052][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.634518][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.641965][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.649425][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.656835][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.664298][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.671742][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.679212][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.686621][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.694088][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.701537][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.708987][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.716390][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.723854][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.731294][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.738706][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.746257][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.753702][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.761160][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.768565][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.776020][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.783457][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.790913][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.798319][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.805783][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.808998][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1582.813191][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.829587][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.837001][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.844463][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.851902][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.859364][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.866768][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.874234][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.881676][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.889136][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.896542][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.903997][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.911437][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.918895][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.926306][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.933778][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.941220][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.948628][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.956086][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.963526][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.970988][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.978397][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.985851][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1582.993288][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.000746][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.008149][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.015595][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.023041][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.030500][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.037906][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.045365][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.052795][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.060286][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.067780][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.075240][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.082676][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.090132][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.097538][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.104992][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.112429][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.119887][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.127293][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.134756][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.142190][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.149643][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.157050][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.164510][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.171963][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.179416][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.186834][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.194311][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.201763][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.209313][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.216719][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.224170][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.225392][ T9824] usb 6-1: USB disconnect, device number 12 [ 1583.231600][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231631][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231657][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231687][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231715][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231744][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231773][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231802][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231831][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231859][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231888][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231916][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231944][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.231971][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232000][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232028][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232057][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232085][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232112][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232140][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232170][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232199][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232228][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232256][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232284][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232313][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232343][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232372][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232401][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232430][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232459][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232488][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232517][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232546][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232575][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232611][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232641][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232670][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232699][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232728][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232757][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232786][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232815][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232843][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232872][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232900][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232929][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232958][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.232987][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233016][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233045][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233074][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233102][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233131][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233159][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233188][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233216][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233246][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233274][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233304][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233332][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 09:29:55 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x3}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:29:55 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x798) 09:29:55 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x768) 09:29:55 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 48) 09:29:55 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}}]}}, 0x0) 09:29:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$cdc_ncm(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x9, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\a'}, {0x5, 0x24, 0x0, 0xb807}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x2, 0xff, 0x1}, {0x6, 0x24, 0x1a, 0x80, 0x28}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x200}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x3, [0x1, 0x101]}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xfb, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1f, 0x80, 0x8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x4, 0x8, 0x9, 0x20, 0x8}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "8dcebb3087cf71921a492e26b0df5876"}]}, 0x2, [{0x35, &(0x7f0000000300)=@string={0x35, 0x3, "4a6190d897ac28c1ff121ba324ade92357d1d5a5a56c2cb0723bd7c82f473f91428fed71c24c0707c828f1822bcd380a157ca0"}}, {0x15, &(0x7f0000000340)=@string={0x15, 0x3, "1cc4dc5f2a3916b2d7f9a1b622f7da17b78d0f"}}]}) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0xd545b489dc1b1ce7, 0x1c, {0x1c, 0x4, "cae3882774978f1915c1f7940535949c5a84ab6ba8120a19f307"}}, &(0x7f0000000400)={0x0, 0x3, 0x77, @string={0x77, 0x3, "eac0679e0ea97e22512711efbf2492577b5ba56a0fa22261c2766ee0d90bfcb4225775d8619650fc1e9ef1eed6f3ec8dd853a771d71aae0251213ece0287d2d76eaffd641ff098889ab679be474728d3a3c6b61b3e4f371a5f7c4d2010824955f2fc34e7072daf1af6bdeb2572dd757b7c806371ff"}}, &(0x7f0000000480)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x4, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x3, 0xffff, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x27, "79625a000953c6325c0cefc55c4847ca"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x100, 0x0, 0x1, [0x60, 0xffff30, 0xff3f0f, 0x30]}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x5b, 0x5, "c48cd34f", "11827d7c"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x63, 0x0, 0xab, 0x7, 0x40, 0xfffc, 0x5}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0xf, 0xd9, "28efa7c8853142a75b1bc67c850afff456483b13ce554c85137e6146a2c6dc527dea7abc9c266df2ab65f14dd8cb99b21ac7d87efd0c45a6649bf78d3d5c3da8fa7daff5c5b8d9e8fed22b874c9c95c5a0d2a8dcd882bb23721e3dd3a3f994fc9352f90629cb53d84eff309daf809f189ff05d16fdeb97018b7b6ed631d8d3ee589032dd25db331af190925180c0e892617da4d5414319510b87ed3a1d53e82fdf3826dbb4fcfcc6c8577b552f0550f5975b2a32b60877cb07e7d3ea7ccad4bd6d85292642ef8546bd116fd231d9a0b978d53b459d7112238d"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x43}, &(0x7f0000000840)={0x40, 0xb, 0x2, 'J.'}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "389b"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x17}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1583.233362][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233391][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233419][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233449][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233478][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233507][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233536][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233565][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233598][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233628][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233656][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233685][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233714][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233742][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233771][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233799][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233828][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233857][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233886][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233915][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233943][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.233972][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234001][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234029][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234059][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234088][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234133][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234161][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234190][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234219][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234248][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234277][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234306][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234335][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234364][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234392][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234421][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234451][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234479][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234507][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234536][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234564][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234597][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234626][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234655][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234684][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234712][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234741][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234770][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234799][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234828][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234857][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234885][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234913][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234942][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234971][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.234999][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235028][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235057][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235086][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235114][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235143][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235171][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235200][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.235227][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.834597][T19300] FAULT_INJECTION: forcing a failure. [ 1583.834597][T19300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.840055][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.840088][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.840116][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.847457][T19300] CPU: 0 PID: 19300 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1583.854880][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.862151][T19300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1583.862169][T19300] Call Trace: [ 1583.862180][T19300] [ 1583.862190][T19300] dump_stack_lvl+0xcd/0x134 [ 1583.869569][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.876871][T19300] should_fail.cold+0x5/0xa [ 1583.884264][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.891566][T19300] _copy_from_user+0x2a/0x170 [ 1583.898987][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.906285][T19300] input_event_from_user+0x131/0x3a0 [ 1583.913684][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.920971][T19300] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1583.921007][T19300] evdev_write+0x356/0x760 [ 1583.928366][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.935697][T19300] ? evdev_read+0xe30/0xe30 [ 1583.935737][T19300] ? apparmor_file_permission+0x264/0x4e0 [ 1583.943116][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.950419][T19300] ? security_file_permission+0xab/0xd0 [ 1583.950457][T19300] vfs_write+0x2d7/0xdd0 [ 1583.957811][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.965137][T19300] ? evdev_read+0xe30/0xe30 [ 1583.965171][T19300] ? kernel_write+0x630/0x630 [ 1583.972556][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.979860][T19300] ? __fget_files+0x26a/0x440 [ 1583.987249][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1583.994574][T19300] ? __fget_light+0xe5/0x270 [ 1583.994601][T19300] ksys_write+0x1e8/0x250 [ 1584.001995][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.009293][T19300] ? __ia32_sys_read+0xb0/0xb0 [ 1584.009322][T19300] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1584.016677][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.024089][T19300] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1584.024124][T19300] do_syscall_64+0x35/0xb0 [ 1584.031510][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.038807][T19300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1584.046204][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.053505][T19300] RIP: 0033:0x7fb3c24c45a9 [ 1584.053529][T19300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1584.060920][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.068258][T19300] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 [ 1584.075655][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.082954][T19300] ORIG_RAX: 0000000000000001 [ 1584.082967][T19300] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1584.082988][T19300] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1584.090369][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.097666][T19300] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1584.105060][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.112357][T19300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1584.112377][T19300] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1584.119768][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.127076][T19300] [ 1584.134463][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.142830][ T718] usb 6-1: Service connection timeout for: 256 [ 1584.149218][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.156575][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1584.163987][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.206045][ T718] ath9k_htc: Failed to initialize the device [ 1584.206584][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.230638][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1584.234189][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.598915][ T9824] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1584.600350][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.629512][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.636927][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.644377][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.651817][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.659268][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.666674][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.674139][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.681584][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.689037][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.696443][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.703903][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.711343][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.718749][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.726213][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.733648][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.741111][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 09:29:56 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}}]}}, 0x0) 09:29:56 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7b0) 09:29:56 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 49) 09:29:56 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x780) [ 1584.748519][ T4035] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 1584.757418][ T4035] plantronics 0003:047F:FFFF.00BB: No inputs registered, leaving [ 1584.782008][ T4035] plantronics 0003:047F:FFFF.00BB: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1584.812265][ T4035] usb 2-1: USB disconnect, device number 24 [ 1584.857514][T19307] FAULT_INJECTION: forcing a failure. [ 1584.857514][T19307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.870751][T19307] CPU: 0 PID: 19307 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1584.880847][T19307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1584.890926][T19307] Call Trace: [ 1584.894225][T19307] [ 1584.897175][T19307] dump_stack_lvl+0xcd/0x134 [ 1584.901809][T19307] should_fail.cold+0x5/0xa [ 1584.906358][T19307] _copy_from_user+0x2a/0x170 [ 1584.911079][T19307] input_event_from_user+0x131/0x3a0 [ 1584.916400][T19307] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1584.922239][T19307] evdev_write+0x356/0x760 [ 1584.926695][T19307] ? evdev_read+0xe30/0xe30 [ 1584.931232][T19307] ? apparmor_file_permission+0x264/0x4e0 [ 1584.936991][T19307] ? security_file_permission+0xab/0xd0 [ 1584.942583][T19307] vfs_write+0x2d7/0xdd0 [ 1584.946871][T19307] ? evdev_read+0xe30/0xe30 [ 1584.951404][T19307] ? kernel_write+0x630/0x630 [ 1584.956112][T19307] ? __fget_files+0x26a/0x440 [ 1584.960835][T19307] ? __fget_light+0xe5/0x270 [ 1584.965458][T19307] ksys_write+0x1e8/0x250 [ 1584.969822][T19307] ? __ia32_sys_read+0xb0/0xb0 [ 1584.974623][T19307] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1584.980558][T19307] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1584.986580][T19307] do_syscall_64+0x35/0xb0 [ 1584.991049][T19307] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1584.996977][T19307] RIP: 0033:0x7fb3c24c45a9 [ 1585.001413][T19307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1585.021138][T19307] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.029587][T19307] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1585.037593][T19307] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1585.045592][T19307] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:29:57 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7c8) 09:29:57 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x798) [ 1585.053601][T19307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.061603][T19307] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1585.069609][T19307] [ 1585.199059][ T4035] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1585.389100][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1585.398197][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.406270][ T9824] usb 6-1: Product: syz [ 1585.410477][ T9824] usb 6-1: Manufacturer: syz [ 1585.415090][ T9824] usb 6-1: SerialNumber: syz [ 1585.469826][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1585.569256][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.580229][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.590039][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1585.603002][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1585.612095][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.639847][ T4035] usb 2-1: config 0 descriptor?? [ 1586.129126][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1586.130650][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.145772][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.153225][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.160660][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.168070][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.175513][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.182948][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.190393][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.197825][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.205354][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.212809][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.220259][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.227677][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.235165][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.242602][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.250040][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.257451][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.264975][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.272416][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.279857][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.287263][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.294715][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.302155][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.309604][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.317008][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.324471][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.331933][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.339377][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.340089][T19294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.346764][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.362558][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.366886][T19294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.369994][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.385090][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.392563][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.397420][T19294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.399978][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.400011][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.415980][T19294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.423148][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.438287][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.445742][ T4035] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1586.456487][ T4035] plantronics 0003:047F:FFFF.00BC: No inputs registered, leaving [ 1586.480195][ T4035] plantronics 0003:047F:FFFF.00BC: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1586.494733][ T4035] usb 2-1: USB disconnect, device number 25 [ 1586.674697][ T718] usb 6-1: USB disconnect, device number 13 09:29:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x4}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:29:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7e0) 09:29:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7b0) 09:29:59 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 50) 09:29:59 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x18}}}}}}]}}, 0x0) 09:29:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$cdc_ncm(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x9, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\a'}, {0x5, 0x24, 0x0, 0xb807}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x2, 0xff, 0x1}, {0x6, 0x24, 0x1a, 0x80, 0x28}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x200}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x3, [0x1, 0x101]}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xfb, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1f, 0x80, 0x8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x4, 0x8, 0x9, 0x20, 0x8}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "8dcebb3087cf71921a492e26b0df5876"}]}, 0x2, [{0x35, &(0x7f0000000300)=@string={0x35, 0x3, "4a6190d897ac28c1ff121ba324ade92357d1d5a5a56c2cb0723bd7c82f473f91428fed71c24c0707c828f1822bcd380a157ca0"}}, {0x15, &(0x7f0000000340)=@string={0x15, 0x3, "1cc4dc5f2a3916b2d7f9a1b622f7da17b78d0f"}}]}) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0xd545b489dc1b1ce7, 0x1c, {0x1c, 0x4, "cae3882774978f1915c1f7940535949c5a84ab6ba8120a19f307"}}, &(0x7f0000000400)={0x0, 0x3, 0x77, @string={0x77, 0x3, "eac0679e0ea97e22512711efbf2492577b5ba56a0fa22261c2766ee0d90bfcb4225775d8619650fc1e9ef1eed6f3ec8dd853a771d71aae0251213ece0287d2d76eaffd641ff098889ab679be474728d3a3c6b61b3e4f371a5f7c4d2010824955f2fc34e7072daf1af6bdeb2572dd757b7c806371ff"}}, &(0x7f0000000480)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x4, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x3, 0xffff, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x27, "79625a000953c6325c0cefc55c4847ca"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x100, 0x0, 0x1, [0x60, 0xffff30, 0xff3f0f, 0x30]}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x5b, 0x5, "c48cd34f", "11827d7c"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x63, 0x0, 0xab, 0x7, 0x40, 0xfffc, 0x5}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0xf, 0xd9, "28efa7c8853142a75b1bc67c850afff456483b13ce554c85137e6146a2c6dc527dea7abc9c266df2ab65f14dd8cb99b21ac7d87efd0c45a6649bf78d3d5c3da8fa7daff5c5b8d9e8fed22b874c9c95c5a0d2a8dcd882bb23721e3dd3a3f994fc9352f90629cb53d84eff309daf809f189ff05d16fdeb97018b7b6ed631d8d3ee589032dd25db331af190925180c0e892617da4d5414319510b87ed3a1d53e82fdf3826dbb4fcfcc6c8577b552f0550f5975b2a32b60877cb07e7d3ea7ccad4bd6d85292642ef8546bd116fd231d9a0b978d53b459d7112238d"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x43}, &(0x7f0000000840)={0x40, 0xb, 0x2, 'J.'}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "389b"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x17}}) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1587.215408][T19319] FAULT_INJECTION: forcing a failure. [ 1587.215408][T19319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.228713][T19319] CPU: 0 PID: 19319 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1587.238817][T19319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1587.248907][T19319] Call Trace: [ 1587.252206][T19319] [ 1587.255155][T19319] dump_stack_lvl+0xcd/0x134 [ 1587.259779][T19319] should_fail.cold+0x5/0xa [ 1587.264327][T19319] _copy_from_user+0x2a/0x170 [ 1587.269050][T19319] input_event_from_user+0x131/0x3a0 [ 1587.274369][T19319] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1587.280306][T19319] evdev_write+0x356/0x760 [ 1587.284764][T19319] ? evdev_read+0xe30/0xe30 [ 1587.289302][T19319] ? apparmor_file_permission+0x264/0x4e0 [ 1587.295152][T19319] ? security_file_permission+0xab/0xd0 [ 1587.300740][T19319] vfs_write+0x2d7/0xdd0 [ 1587.305015][T19319] ? evdev_read+0xe30/0xe30 [ 1587.309558][T19319] ? kernel_write+0x630/0x630 [ 1587.314270][T19319] ? __fget_files+0x26a/0x440 [ 1587.319000][T19319] ? __fget_light+0xe5/0x270 [ 1587.323616][T19319] ksys_write+0x1e8/0x250 [ 1587.327983][T19319] ? __ia32_sys_read+0xb0/0xb0 [ 1587.332789][T19319] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1587.338727][T19319] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1587.344654][T19319] do_syscall_64+0x35/0xb0 [ 1587.349130][T19319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1587.355068][T19319] RIP: 0033:0x7fb3c24c45a9 [ 1587.359513][T19319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1587.379156][T19319] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1587.387599][T19319] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1587.395596][T19319] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1587.403588][T19319] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:29:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7c8) 09:29:59 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 51) [ 1587.411590][T19319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1587.419583][T19319] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1587.427585][T19319] [ 1587.474374][T19328] FAULT_INJECTION: forcing a failure. [ 1587.474374][T19328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.487745][T19328] CPU: 0 PID: 19328 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1587.497848][T19328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1587.507931][T19328] Call Trace: [ 1587.511235][T19328] [ 1587.514187][T19328] dump_stack_lvl+0xcd/0x134 [ 1587.518819][T19328] should_fail.cold+0x5/0xa [ 1587.523364][T19328] _copy_from_user+0x2a/0x170 [ 1587.528094][T19328] input_event_from_user+0x131/0x3a0 [ 1587.533414][T19328] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1587.539033][ T4035] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1587.539236][T19328] evdev_write+0x356/0x760 [ 1587.551225][T19328] ? evdev_read+0xe30/0xe30 [ 1587.555766][T19328] ? apparmor_file_permission+0x264/0x4e0 [ 1587.561527][T19328] ? security_file_permission+0xab/0xd0 [ 1587.567109][T19328] vfs_write+0x2d7/0xdd0 [ 1587.571384][T19328] ? evdev_read+0xe30/0xe30 [ 1587.575932][T19328] ? kernel_write+0x630/0x630 [ 1587.580640][T19328] ? __fget_files+0x26a/0x440 [ 1587.585387][T19328] ? __fget_light+0xe5/0x270 [ 1587.590002][T19328] ksys_write+0x1e8/0x250 [ 1587.594358][T19328] ? __ia32_sys_read+0xb0/0xb0 [ 1587.599152][T19328] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1587.605081][T19328] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1587.611009][T19328] do_syscall_64+0x35/0xb0 [ 1587.615470][T19328] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1587.621397][T19328] RIP: 0033:0x7fb3c24c45a9 [ 1587.625834][T19328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1587.645473][T19328] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1587.653920][T19328] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1587.661922][T19328] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 09:29:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7f8) 09:29:59 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 1587.669919][T19328] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1587.677911][T19328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1587.685902][T19328] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1587.693903][T19328] [ 1587.700753][ T9824] usb 6-1: Service connection timeout for: 256 [ 1587.706964][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1587.715786][ T9824] ath9k_htc: Failed to initialize the device 09:29:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7e0) 09:29:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x810) [ 1587.722458][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1587.989118][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.000293][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.010099][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1588.023049][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1588.032149][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.052679][ T4035] usb 2-1: config 0 descriptor?? [ 1588.088984][ T718] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1588.304442][T19340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.315012][T19340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.324170][T19340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.332861][T19340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.429210][ T4035] usbhid 2-1:0.0: can't add hid device: -71 [ 1588.435241][ T4035] usbhid: probe of 2-1:0.0 failed with error -71 [ 1588.444019][ T4035] usb 2-1: USB disconnect, device number 26 [ 1588.619071][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1588.628165][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.636368][ T718] usb 6-1: Product: syz [ 1588.640583][ T718] usb 6-1: Manufacturer: syz [ 1588.645198][ T718] usb 6-1: SerialNumber: syz [ 1588.689823][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1589.288993][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1589.704317][ T4035] usb 6-1: USB disconnect, device number 14 09:30:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x828) 09:30:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7f8) 09:30:02 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 52) 09:30:02 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}}]}}, 0x0) 09:30:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect$cdc_ncm(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x9, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\a'}, {0x5, 0x24, 0x0, 0xb807}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x2, 0xff, 0x1}, {0x6, 0x24, 0x1a, 0x80, 0x28}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x200}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x3, [0x1, 0x101]}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xfb, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1f, 0x80, 0x8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x4, 0x8, 0x9, 0x20, 0x8}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "8dcebb3087cf71921a492e26b0df5876"}]}, 0x2, [{0x35, &(0x7f0000000300)=@string={0x35, 0x3, "4a6190d897ac28c1ff121ba324ade92357d1d5a5a56c2cb0723bd7c82f473f91428fed71c24c0707c828f1822bcd380a157ca0"}}, {0x15, &(0x7f0000000340)=@string={0x15, 0x3, "1cc4dc5f2a3916b2d7f9a1b622f7da17b78d0f"}}]}) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0xd545b489dc1b1ce7, 0x1c, {0x1c, 0x4, "cae3882774978f1915c1f7940535949c5a84ab6ba8120a19f307"}}, &(0x7f0000000400)={0x0, 0x3, 0x77, @string={0x77, 0x3, "eac0679e0ea97e22512711efbf2492577b5ba56a0fa22261c2766ee0d90bfcb4225775d8619650fc1e9ef1eed6f3ec8dd853a771d71aae0251213ece0287d2d76eaffd641ff098889ab679be474728d3a3c6b61b3e4f371a5f7c4d2010824955f2fc34e7072daf1af6bdeb2572dd757b7c806371ff"}}, &(0x7f0000000480)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x4, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x3, 0xffff, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x27, "79625a000953c6325c0cefc55c4847ca"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x100, 0x0, 0x1, [0x60, 0xffff30, 0xff3f0f, 0x30]}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x5b, 0x5, "c48cd34f", "11827d7c"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x63, 0x0, 0xab, 0x7, 0x40, 0xfffc, 0x5}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0xf, 0xd9, "28efa7c8853142a75b1bc67c850afff456483b13ce554c85137e6146a2c6dc527dea7abc9c266df2ab65f14dd8cb99b21ac7d87efd0c45a6649bf78d3d5c3da8fa7daff5c5b8d9e8fed22b874c9c95c5a0d2a8dcd882bb23721e3dd3a3f994fc9352f90629cb53d84eff309daf809f189ff05d16fdeb97018b7b6ed631d8d3ee589032dd25db331af190925180c0e892617da4d5414319510b87ed3a1d53e82fdf3826dbb4fcfcc6c8577b552f0550f5975b2a32b60877cb07e7d3ea7ccad4bd6d85292642ef8546bd116fd231d9a0b978d53b459d7112238d"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x43}, &(0x7f0000000840)={0x40, 0xb, 0x2, 'J.'}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "389b"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x17}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1590.242472][T19350] FAULT_INJECTION: forcing a failure. [ 1590.242472][T19350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.255679][T19350] CPU: 1 PID: 19350 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1590.265781][T19350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1590.275869][T19350] Call Trace: [ 1590.279168][T19350] [ 1590.282120][T19350] dump_stack_lvl+0xcd/0x134 [ 1590.286748][T19350] should_fail.cold+0x5/0xa [ 1590.291308][T19350] _copy_from_user+0x2a/0x170 [ 1590.296035][T19350] input_event_from_user+0x131/0x3a0 [ 1590.301354][T19350] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1590.307198][T19350] evdev_write+0x356/0x760 [ 1590.311667][T19350] ? evdev_read+0xe30/0xe30 [ 1590.316227][T19350] ? apparmor_file_permission+0x264/0x4e0 [ 1590.321990][T19350] ? security_file_permission+0xab/0xd0 [ 1590.327576][T19350] vfs_write+0x2d7/0xdd0 [ 1590.331854][T19350] ? evdev_read+0xe30/0xe30 [ 1590.336392][T19350] ? kernel_write+0x630/0x630 [ 1590.341098][T19350] ? __fget_files+0x26a/0x440 [ 1590.345822][T19350] ? __fget_light+0xe5/0x270 [ 1590.350451][T19350] ksys_write+0x1e8/0x250 [ 1590.354816][T19350] ? __ia32_sys_read+0xb0/0xb0 [ 1590.359628][T19350] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1590.365577][T19350] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1590.371507][T19350] do_syscall_64+0x35/0xb0 [ 1590.375968][T19350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1590.381898][T19350] RIP: 0033:0x7fb3c24c45a9 [ 1590.386342][T19350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1590.405983][T19350] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1590.414433][T19350] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1590.422430][T19350] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1590.430430][T19350] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:02 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 53) 09:30:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x810) 09:30:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x840) [ 1590.438430][T19350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1590.446427][T19350] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1590.454433][T19350] [ 1590.509541][ T9824] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1590.561861][T19358] FAULT_INJECTION: forcing a failure. [ 1590.561861][T19358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.575034][T19358] CPU: 1 PID: 19358 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1590.585135][T19358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1590.589015][ T718] usb 6-1: Service connection timeout for: 256 [ 1590.595189][T19358] Call Trace: [ 1590.595200][T19358] [ 1590.595210][T19358] dump_stack_lvl+0xcd/0x134 [ 1590.601410][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1590.604645][T19358] should_fail.cold+0x5/0xa [ 1590.615849][ T718] ath9k_htc: Failed to initialize the device [ 1590.619930][T19358] _copy_from_user+0x2a/0x170 [ 1590.619978][T19358] input_event_from_user+0x131/0x3a0 [ 1590.640492][T19358] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1590.646339][T19358] evdev_write+0x356/0x760 [ 1590.650793][T19358] ? evdev_read+0xe30/0xe30 [ 1590.655335][T19358] ? apparmor_file_permission+0x264/0x4e0 [ 1590.661151][T19358] ? security_file_permission+0xab/0xd0 [ 1590.666735][T19358] vfs_write+0x2d7/0xdd0 [ 1590.671002][T19358] ? evdev_read+0xe30/0xe30 [ 1590.675545][T19358] ? kernel_write+0x630/0x630 [ 1590.680252][T19358] ? __fget_files+0x26a/0x440 [ 1590.684979][T19358] ? __fget_light+0xe5/0x270 [ 1590.689593][T19358] ksys_write+0x1e8/0x250 [ 1590.693957][T19358] ? __ia32_sys_read+0xb0/0xb0 [ 1590.698753][T19358] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1590.704676][T19358] ? syscall_enter_from_user_mode+0x22/0xb0 09:30:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x828) 09:30:02 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3}}}}}}]}}, 0x0) [ 1590.710606][T19358] do_syscall_64+0x35/0xb0 [ 1590.715065][T19358] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1590.720995][T19358] RIP: 0033:0x7fb3c24c45a9 [ 1590.725437][T19358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1590.745081][T19358] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1590.753531][T19358] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 09:30:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x858) [ 1590.761537][T19358] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1590.769543][T19358] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1590.777549][T19358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1590.785554][T19358] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1590.793560][T19358] [ 1590.796883][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1590.879145][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.890091][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.899897][ T9824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1590.912751][ T9824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1590.921869][ T9824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.933731][ T9824] usb 2-1: config 0 descriptor?? [ 1591.168942][ T4035] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1591.400997][T19367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.411393][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.418823][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.426283][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.433720][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.441152][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.448557][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.449981][T19367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.455973][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.471121][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.478536][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.485976][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.493413][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.500868][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.508277][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.515714][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.523150][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.530585][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.537991][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.545431][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.552866][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.560302][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.567702][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.575139][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.582593][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.590029][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.597434][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.604880][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.612342][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.619790][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.627193][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.630016][T19368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.634619][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.650365][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.652157][T19368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.657749][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.672913][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.680348][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.687927][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.689142][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1591.695343][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.704392][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.711751][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.719741][ T4035] usb 6-1: Product: syz [ 1591.727076][ T9824] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1591.731224][ T4035] usb 6-1: Manufacturer: syz [ 1591.742202][ T9824] plantronics 0003:047F:FFFF.00BD: No inputs registered, leaving [ 1591.743420][ T4035] usb 6-1: SerialNumber: syz [ 1591.753216][ T9824] plantronics 0003:047F:FFFF.00BD: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1591.770112][ T9824] usb 2-1: USB disconnect, device number 27 [ 1591.829850][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1592.409066][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1592.815882][ T4043] usb 6-1: USB disconnect, device number 15 09:30:05 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x6}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:05 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x840) 09:30:05 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 54) 09:30:05 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x870) 09:30:05 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}}]}}, 0x0) 09:30:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100dc780000407f04ffff00000000000009040000090300001679c30be601ebab2900090581030800"/54], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x90, 0x81, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x27, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x4, 0x8}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x20, 0x6, 0x6, 0x20, 0x40}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0xc0, &(0x7f0000000200)=@string={0xc0, 0x3, "1cec278d96a77061c9c3b160c527d7a81882a3c071e2cccf6fb7dde73a80b891a79b982c5cbae985d8b2a6d50fd37fb1a253d3351acee22d80806b08a715843e56bcca6f28b5202cad44b6d4264d819ce8adb99bbdddec640c8205a2b45fdba4f68cc704e75c1dd0d2b8bde5b264d9f4d5d12783fdb20618503f89dc289dffad1b49a345f945ad986f7399eb08f86c30b2c8b9f14c8d19b5e9b58b3f62fb83527d580355cc573d8f708b0b572b50f07d48a6786d0af44fca8e835fdcc8d8"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x52, 0x80, 0x17, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x406a8acac082ccbb, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x4fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1f, 0x1}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x8, 0x7f, 0xd7, 0x20, 0x3f}, 0x14, &(0x7f0000000380)={0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x4, 0x0, 0xfffb}, @ptm_cap={0x3}]}, 0x6, [{0x65, &(0x7f00000003c0)=@string={0x65, 0x3, "d179a96abad68de59a17bbd0900f1c0a97dc91616d1dbe98a0b10eec4e66319caa1430cb91201fcd9b8807e3d0005f1cb040cfcdc4ae1547a928356794d9eb0f2e74d74063eb79c126ae3d66ce36794a12a375e644018df43cc59fd0e9aaacb430cb0b"}}, {0x59, &(0x7f0000000440)=@string={0x59, 0x3, "5cde47a057711a5eeadf68837d4a18bdd6639e388b8f590a74d6c45a3e5096afa60333c07e5d3da3900018cb218120bb557d6fe29c4cb2de060ed1f1297fbf4acb16ef39dc763c0db38edd02a3463c0da9e253c1bf12e7"}}, {0xdb, &(0x7f00000004c0)=@string={0xdb, 0x3, "cfeedbdd62e91e1b8dec28628f75ed7f7dce33d20fa33351f8a532e5d7c72dd96b2cee63368b7bef6c9c7cff216c6d1acbd707e5e32469835419ed7e4a9bf3edf4212665773b21cb825b4373af83207f7a8d563e88eeeaf0ea5ef2498a17489a0983a1fcee5c7c7d1404865d4aefca04f2dea2bbb54942a3a0adedc329324571822489b93d35f0394ef0f6bce1e631bdf2c7c56e97f7d6c063803c919a512d510ee2013b0f8668e4ca2e584524a364f66b92b6a599259839ede48acf479f6aa8e679cd6b3b2f67f404e3cde87a00e21b858e4014f74d7ca1cb"}}, {0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "60f494f9466e9d79bf02bb82db8cda39316a58cf322274c2dbdc9be5fd8a3dfedaf7a032c4cdf4c49644a3f9eb10c068fe2cd5c26ad479494d007dfb89fb7cb89add6b48900201991adabd3cf6c1f4a38e138698882da02cb1530d2a3ee49d397d328d"}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "aef238a48363eda280dd9c3c83808cae2445de3749bf958426b22adb23f29da07ce04c3a402dd655c72a6ebd9d405150317189b25c2e1904f57b342ea94481782c79c34f87d1d930ede6df55f42843dc5b91923dc7c7368b51ec937fad608552c867d0808ad46e2cb39b6ecd7aa1ed1e72b74afbcb0359546ff6178a6051"}}, {0x10, &(0x7f00000006c0)=@string={0x10, 0x3, "4c013b10176d2f56fbc076937097"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x140) [ 1593.360141][T19376] FAULT_INJECTION: forcing a failure. [ 1593.360141][T19376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.373400][T19376] CPU: 1 PID: 19376 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1593.383510][T19376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1593.393681][T19376] Call Trace: [ 1593.396994][T19376] [ 1593.399954][T19376] dump_stack_lvl+0xcd/0x134 [ 1593.404582][T19376] should_fail.cold+0x5/0xa [ 1593.409134][T19376] _copy_from_user+0x2a/0x170 [ 1593.413858][T19376] input_event_from_user+0x131/0x3a0 [ 1593.419179][T19376] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1593.425026][T19376] evdev_write+0x356/0x760 [ 1593.429495][T19376] ? evdev_read+0xe30/0xe30 [ 1593.434051][T19376] ? apparmor_file_permission+0x264/0x4e0 [ 1593.439818][T19376] ? security_file_permission+0xab/0xd0 [ 1593.445401][T19376] vfs_write+0x2d7/0xdd0 [ 1593.449679][T19376] ? evdev_read+0xe30/0xe30 [ 1593.454219][T19376] ? kernel_write+0x630/0x630 [ 1593.458928][T19376] ? __fget_files+0x26a/0x440 [ 1593.463742][T19376] ? __fget_light+0xe5/0x270 [ 1593.468361][T19376] ksys_write+0x1e8/0x250 [ 1593.472723][T19376] ? __ia32_sys_read+0xb0/0xb0 [ 1593.477518][T19376] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1593.483454][T19376] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1593.489389][T19376] do_syscall_64+0x35/0xb0 [ 1593.493853][T19376] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1593.499790][T19376] RIP: 0033:0x7fb3c24c45a9 09:30:05 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x858) [ 1593.504230][T19376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1593.523870][T19376] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1593.532321][T19376] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1593.540322][T19376] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1593.548320][T19376] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:05 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x888) 09:30:05 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 55) 09:30:05 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8a0) 09:30:05 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x870) [ 1593.556315][T19376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.564311][T19376] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1593.572318][T19376] 09:30:05 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x888) [ 1593.639086][ T4035] usb 6-1: Service connection timeout for: 256 [ 1593.645300][ T4035] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1593.664437][ T4035] ath9k_htc: Failed to initialize the device [ 1593.670329][T19389] FAULT_INJECTION: forcing a failure. [ 1593.670329][T19389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.680980][ T4043] usb 6-1: ath9k_htc: USB layer deinitialized [ 1593.683524][T19389] CPU: 0 PID: 19389 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1593.699741][T19389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1593.709821][T19389] Call Trace: [ 1593.713116][T19389] [ 1593.716071][T19389] dump_stack_lvl+0xcd/0x134 [ 1593.720695][T19389] should_fail.cold+0x5/0xa [ 1593.725240][T19389] _copy_from_user+0x2a/0x170 [ 1593.729962][T19389] input_event_from_user+0x131/0x3a0 [ 1593.735274][T19389] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1593.738974][ T72] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1593.741092][T19389] evdev_write+0x356/0x760 [ 1593.741131][T19389] ? evdev_read+0xe30/0xe30 [ 1593.757607][T19389] ? apparmor_file_permission+0x264/0x4e0 [ 1593.763368][T19389] ? security_file_permission+0xab/0xd0 [ 1593.768957][T19389] vfs_write+0x2d7/0xdd0 [ 1593.773229][T19389] ? evdev_read+0xe30/0xe30 [ 1593.777767][T19389] ? kernel_write+0x630/0x630 [ 1593.782472][T19389] ? __fget_files+0x26a/0x440 [ 1593.787191][T19389] ? __fget_light+0xe5/0x270 [ 1593.791818][T19389] ksys_write+0x1e8/0x250 [ 1593.796183][T19389] ? __ia32_sys_read+0xb0/0xb0 [ 1593.800973][T19389] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1593.806902][T19389] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1593.812835][T19389] do_syscall_64+0x35/0xb0 [ 1593.817317][T19389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1593.823240][T19389] RIP: 0033:0x7fb3c24c45a9 [ 1593.827682][T19389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1593.847766][T19389] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1593.856216][T19389] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1593.864211][T19389] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1593.872204][T19389] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.880202][T19389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.888195][T19389] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1593.896200][T19389] [ 1594.109078][ T4043] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1594.141253][T19375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.151517][T19375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.229003][ T72] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1594.236729][ T72] usb 2-1: no configurations [ 1594.241414][ T72] usb 2-1: can't read configurations, error -22 [ 1594.689111][ T4043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1594.698207][ T4043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.706276][ T4043] usb 6-1: Product: syz [ 1594.710484][ T4043] usb 6-1: Manufacturer: syz [ 1594.715098][ T4043] usb 6-1: SerialNumber: syz [ 1594.759713][ T4043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1595.339143][ T4043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1595.745525][ T9824] usb 6-1: USB disconnect, device number 16 09:30:08 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x7}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:08 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8b8) 09:30:08 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8a0) 09:30:08 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 56) 09:30:08 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x5}}}}}}]}}, 0x0) 09:30:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100dc780000407f04ffff00000000000009040000090300001679c30be601ebab2900090581030800"/54], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x90, 0x81, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x27, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x4, 0x8}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x20, 0x6, 0x6, 0x20, 0x40}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0xc0, &(0x7f0000000200)=@string={0xc0, 0x3, "1cec278d96a77061c9c3b160c527d7a81882a3c071e2cccf6fb7dde73a80b891a79b982c5cbae985d8b2a6d50fd37fb1a253d3351acee22d80806b08a715843e56bcca6f28b5202cad44b6d4264d819ce8adb99bbdddec640c8205a2b45fdba4f68cc704e75c1dd0d2b8bde5b264d9f4d5d12783fdb20618503f89dc289dffad1b49a345f945ad986f7399eb08f86c30b2c8b9f14c8d19b5e9b58b3f62fb83527d580355cc573d8f708b0b572b50f07d48a6786d0af44fca8e835fdcc8d8"}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x52, 0x80, 0x17, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x406a8acac082ccbb, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x4fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1f, 0x1}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x8, 0x7f, 0xd7, 0x20, 0x3f}, 0x14, &(0x7f0000000380)={0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x4, 0x0, 0xfffb}, @ptm_cap={0x3}]}, 0x6, [{0x65, &(0x7f00000003c0)=@string={0x65, 0x3, "d179a96abad68de59a17bbd0900f1c0a97dc91616d1dbe98a0b10eec4e66319caa1430cb91201fcd9b8807e3d0005f1cb040cfcdc4ae1547a928356794d9eb0f2e74d74063eb79c126ae3d66ce36794a12a375e644018df43cc59fd0e9aaacb430cb0b"}}, {0x59, &(0x7f0000000440)=@string={0x59, 0x3, "5cde47a057711a5eeadf68837d4a18bdd6639e388b8f590a74d6c45a3e5096afa60333c07e5d3da3900018cb218120bb557d6fe29c4cb2de060ed1f1297fbf4acb16ef39dc763c0db38edd02a3463c0da9e253c1bf12e7"}}, {0xdb, &(0x7f00000004c0)=@string={0xdb, 0x3, "cfeedbdd62e91e1b8dec28628f75ed7f7dce33d20fa33351f8a532e5d7c72dd96b2cee63368b7bef6c9c7cff216c6d1acbd707e5e32469835419ed7e4a9bf3edf4212665773b21cb825b4373af83207f7a8d563e88eeeaf0ea5ef2498a17489a0983a1fcee5c7c7d1404865d4aefca04f2dea2bbb54942a3a0adedc329324571822489b93d35f0394ef0f6bce1e631bdf2c7c56e97f7d6c063803c919a512d510ee2013b0f8668e4ca2e584524a364f66b92b6a599259839ede48acf479f6aa8e679cd6b3b2f67f404e3cde87a00e21b858e4014f74d7ca1cb"}}, {0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "60f494f9466e9d79bf02bb82db8cda39316a58cf322274c2dbdc9be5fd8a3dfedaf7a032c4cdf4c49644a3f9eb10c068fe2cd5c26ad479494d007dfb89fb7cb89add6b48900201991adabd3cf6c1f4a38e138698882da02cb1530d2a3ee49d397d328d"}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "aef238a48363eda280dd9c3c83808cae2445de3749bf958426b22adb23f29da07ce04c3a402dd655c72a6ebd9d405150317189b25c2e1904f57b342ea94481782c79c34f87d1d930ede6df55f42843dc5b91923dc7c7368b51ec937fad608552c867d0808ad46e2cb39b6ecd7aa1ed1e72b74afbcb0359546ff6178a6051"}}, {0x10, &(0x7f00000006c0)=@string={0x10, 0x3, "4c013b10176d2f56fbc076937097"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x140) [ 1596.279355][T19402] FAULT_INJECTION: forcing a failure. [ 1596.279355][T19402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.292700][T19402] CPU: 0 PID: 19402 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1596.302798][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1596.312879][T19402] Call Trace: [ 1596.316176][T19402] [ 1596.319128][T19402] dump_stack_lvl+0xcd/0x134 [ 1596.323756][T19402] should_fail.cold+0x5/0xa [ 1596.328307][T19402] _copy_from_user+0x2a/0x170 [ 1596.333037][T19402] input_event_from_user+0x131/0x3a0 [ 1596.338355][T19402] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1596.344196][T19402] evdev_write+0x356/0x760 [ 1596.348655][T19402] ? evdev_read+0xe30/0xe30 [ 1596.353194][T19402] ? apparmor_file_permission+0x264/0x4e0 [ 1596.358960][T19402] ? security_file_permission+0xab/0xd0 [ 1596.364563][T19402] vfs_write+0x2d7/0xdd0 [ 1596.368846][T19402] ? evdev_read+0xe30/0xe30 [ 1596.373394][T19402] ? kernel_write+0x630/0x630 [ 1596.378115][T19402] ? __fget_files+0x26a/0x440 [ 1596.382836][T19402] ? __fget_light+0xe5/0x270 [ 1596.387452][T19402] ksys_write+0x1e8/0x250 [ 1596.392265][T19402] ? __ia32_sys_read+0xb0/0xb0 [ 1596.397066][T19402] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1596.402998][T19402] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1596.408931][T19402] do_syscall_64+0x35/0xb0 [ 1596.413389][T19402] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1596.419316][T19402] RIP: 0033:0x7fb3c24c45a9 [ 1596.423750][T19402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1596.443394][T19402] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1596.451841][T19402] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1596.459841][T19402] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1596.467837][T19402] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:08 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8b8) 09:30:08 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8d0) 09:30:08 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 57) 09:30:08 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8d0) [ 1596.475831][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1596.483831][T19402] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1596.491834][T19402] [ 1596.569025][ T72] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1596.570868][T19412] FAULT_INJECTION: forcing a failure. [ 1596.570868][T19412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.589965][T19412] CPU: 0 PID: 19412 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1596.599426][ T4043] usb 6-1: Service connection timeout for: 256 [ 1596.600041][T19412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1596.606186][ T4043] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1596.616218][T19412] Call Trace: [ 1596.616229][T19412] [ 1596.616238][T19412] dump_stack_lvl+0xcd/0x134 [ 1596.634894][T19412] should_fail.cold+0x5/0xa [ 1596.639453][T19412] _copy_from_user+0x2a/0x170 [ 1596.644175][T19412] input_event_from_user+0x131/0x3a0 [ 1596.646852][ T4043] ath9k_htc: Failed to initialize the device [ 1596.649471][T19412] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1596.649509][T19412] evdev_write+0x356/0x760 [ 1596.649542][T19412] ? evdev_read+0xe30/0xe30 [ 1596.649571][T19412] ? apparmor_file_permission+0x264/0x4e0 [ 1596.649608][T19412] ? security_file_permission+0xab/0xd0 [ 1596.649641][T19412] vfs_write+0x2d7/0xdd0 [ 1596.649672][T19412] ? evdev_read+0xe30/0xe30 [ 1596.690356][T19412] ? kernel_write+0x630/0x630 [ 1596.695066][T19412] ? __fget_files+0x26a/0x440 [ 1596.699790][T19412] ? __fget_light+0xe5/0x270 [ 1596.704403][T19412] ksys_write+0x1e8/0x250 [ 1596.708760][T19412] ? __ia32_sys_read+0xb0/0xb0 [ 1596.713554][T19412] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1596.719486][T19412] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1596.725463][T19412] do_syscall_64+0x35/0xb0 [ 1596.729922][T19412] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1596.735847][T19412] RIP: 0033:0x7fb3c24c45a9 [ 1596.740283][T19412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1596.759925][T19412] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 09:30:08 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8e8) 09:30:08 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}}]}}, 0x0) [ 1596.768376][T19412] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1596.776372][T19412] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1596.784364][T19412] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1596.792360][T19412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1596.800356][T19412] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1596.808365][T19412] [ 1596.812423][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1597.038999][ T72] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1597.046718][ T72] usb 2-1: no configurations [ 1597.051387][ T72] usb 2-1: can't read configurations, error -22 [ 1597.188943][ T9824] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1597.719049][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1597.728140][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.736214][ T9824] usb 6-1: Product: syz [ 1597.740433][ T9824] usb 6-1: Manufacturer: syz [ 1597.745047][ T9824] usb 6-1: SerialNumber: syz [ 1597.789838][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1598.359034][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1598.776204][ T718] usb 6-1: USB disconnect, device number 17 09:30:11 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x8}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8e8) 09:30:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x900) 09:30:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 58) 09:30:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100dc780000407f04ffff00000000000009040000090300001679c30be601ebab2900090581030800"/54], 0x0) (async) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x90, 0x81, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x27, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x4, 0x8}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x20, 0x6, 0x6, 0x20, 0x40}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0xc0, &(0x7f0000000200)=@string={0xc0, 0x3, "1cec278d96a77061c9c3b160c527d7a81882a3c071e2cccf6fb7dde73a80b891a79b982c5cbae985d8b2a6d50fd37fb1a253d3351acee22d80806b08a715843e56bcca6f28b5202cad44b6d4264d819ce8adb99bbdddec640c8205a2b45fdba4f68cc704e75c1dd0d2b8bde5b264d9f4d5d12783fdb20618503f89dc289dffad1b49a345f945ad986f7399eb08f86c30b2c8b9f14c8d19b5e9b58b3f62fb83527d580355cc573d8f708b0b572b50f07d48a6786d0af44fca8e835fdcc8d8"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x52, 0x80, 0x17, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x406a8acac082ccbb, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x4fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1f, 0x1}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x8, 0x7f, 0xd7, 0x20, 0x3f}, 0x14, &(0x7f0000000380)={0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x4, 0x0, 0xfffb}, @ptm_cap={0x3}]}, 0x6, [{0x65, &(0x7f00000003c0)=@string={0x65, 0x3, "d179a96abad68de59a17bbd0900f1c0a97dc91616d1dbe98a0b10eec4e66319caa1430cb91201fcd9b8807e3d0005f1cb040cfcdc4ae1547a928356794d9eb0f2e74d74063eb79c126ae3d66ce36794a12a375e644018df43cc59fd0e9aaacb430cb0b"}}, {0x59, &(0x7f0000000440)=@string={0x59, 0x3, "5cde47a057711a5eeadf68837d4a18bdd6639e388b8f590a74d6c45a3e5096afa60333c07e5d3da3900018cb218120bb557d6fe29c4cb2de060ed1f1297fbf4acb16ef39dc763c0db38edd02a3463c0da9e253c1bf12e7"}}, {0xdb, &(0x7f00000004c0)=@string={0xdb, 0x3, "cfeedbdd62e91e1b8dec28628f75ed7f7dce33d20fa33351f8a532e5d7c72dd96b2cee63368b7bef6c9c7cff216c6d1acbd707e5e32469835419ed7e4a9bf3edf4212665773b21cb825b4373af83207f7a8d563e88eeeaf0ea5ef2498a17489a0983a1fcee5c7c7d1404865d4aefca04f2dea2bbb54942a3a0adedc329324571822489b93d35f0394ef0f6bce1e631bdf2c7c56e97f7d6c063803c919a512d510ee2013b0f8668e4ca2e584524a364f66b92b6a599259839ede48acf479f6aa8e679cd6b3b2f67f404e3cde87a00e21b858e4014f74d7ca1cb"}}, {0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "60f494f9466e9d79bf02bb82db8cda39316a58cf322274c2dbdc9be5fd8a3dfedaf7a032c4cdf4c49644a3f9eb10c068fe2cd5c26ad479494d007dfb89fb7cb89add6b48900201991adabd3cf6c1f4a38e138698882da02cb1530d2a3ee49d397d328d"}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "aef238a48363eda280dd9c3c83808cae2445de3749bf958426b22adb23f29da07ce04c3a402dd655c72a6ebd9d405150317189b25c2e1904f57b342ea94481782c79c34f87d1d930ede6df55f42843dc5b91923dc7c7368b51ec937fad608552c867d0808ad46e2cb39b6ecd7aa1ed1e72b74afbcb0359546ff6178a6051"}}, {0x10, &(0x7f00000006c0)=@string={0x10, 0x3, "4c013b10176d2f56fbc076937097"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x140) 09:30:11 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7}}}}}}]}}, 0x0) [ 1599.316407][T19431] FAULT_INJECTION: forcing a failure. [ 1599.316407][T19431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.329553][T19431] CPU: 0 PID: 19431 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1599.339653][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1599.349733][T19431] Call Trace: [ 1599.353039][T19431] [ 1599.355999][T19431] dump_stack_lvl+0xcd/0x134 [ 1599.360632][T19431] should_fail.cold+0x5/0xa [ 1599.365175][T19431] _copy_from_user+0x2a/0x170 [ 1599.369901][T19431] input_event_from_user+0x131/0x3a0 [ 1599.375223][T19431] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1599.381072][T19431] evdev_write+0x356/0x760 [ 1599.385537][T19431] ? evdev_read+0xe30/0xe30 [ 1599.390076][T19431] ? apparmor_file_permission+0x264/0x4e0 [ 1599.395841][T19431] ? security_file_permission+0xab/0xd0 [ 1599.401431][T19431] vfs_write+0x2d7/0xdd0 [ 1599.405710][T19431] ? evdev_read+0xe30/0xe30 [ 1599.410258][T19431] ? kernel_write+0x630/0x630 [ 1599.414970][T19431] ? __fget_files+0x26a/0x440 [ 1599.419693][T19431] ? __fget_light+0xe5/0x270 [ 1599.424321][T19431] ksys_write+0x1e8/0x250 [ 1599.428685][T19431] ? __ia32_sys_read+0xb0/0xb0 [ 1599.433485][T19431] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1599.439415][T19431] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1599.445347][T19431] do_syscall_64+0x35/0xb0 [ 1599.449811][T19431] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1599.455739][T19431] RIP: 0033:0x7fb3c24c45a9 [ 1599.460179][T19431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1599.479824][T19431] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1599.488276][T19431] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1599.496281][T19431] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1599.504282][T19431] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 09:30:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x900) 09:30:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 59) 09:30:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x40, 0x22, 0x74, {0x74, 0xa, "60e785c23c7d6c7211d8ad09cc5dbb9e19fb9484bb5f8c03e580707cb626701bfccfc594b89345e353438f668dc94938f2727b3b2178cac86794f0b36d0420e1be87215e50cb7719e669aacab1310699d9358203a3815ead3295d1f174857f2017f4032f32565d20d4cbcd3f9d0d05b27e9a"}}, &(0x7f0000000200)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "138d68eafb8092b0ced26ccc1de20706ba6b6364a7ddedd6b0764b560acb7ae9be364e7043b3c6c2c915ebb6c6bd1e10ca69fd699b87bcd05915f2245962d5ba46159b7044a815270f2a6e5588ef53e0b5feac84aae5ecc3acd4e28f0f320dcc6de85e9af616cb14d75811d8f80787f75dfd089d2114d706ad5bafbcdc085e6a714fb499f44f17d8868c88d34e68d00e242ccb98870105a2e57f61c9a148cbbd806a5e544fd53f0ac2d02c5c8818b4a5fba05f3f73373801fcf635012fec88c66857151e6b0172c7d375f04d72dc543d97bd2c2a355767f030a227864e"}}, &(0x7f0000000180)={0x0, 0x22, 0x24, {[@main=@item_012={0x2, 0x0, 0xc, "0115"}, @global=@item_4={0x3, 0x1, 0x3, "cade8ac1"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0xa, "dd342516"}, @main=@item_4={0x3, 0x0, 0x8, "461a88aa"}, @global=@item_012={0x1, 0x1, 0xa, "a6"}, @local=@item_4={0x3, 0x2, 0xa, "f0a06bb2"}, @main=@item_4={0x3, 0x0, 0xb, "243a19ff"}, @main=@item_4={0x3, 0x0, 0x8, "8ec7e907"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe09, 0x3f, 0x1, {0x22, 0x5c1}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0xd7, "e84584c57367d502984a1b7a556b0fa20906b01eb2f392bebb9ff0bc022f9b191396a3f502a4639185b89c629354f1f79e42d1a110a8471c2444a0119f261afcc96e7725017e3ba1272fdda9e8219f6f0d54dcd2cce3b83e556a137851b9b8b6af3d1a72a5b39544d8c850294c0a546b501828e9c2cba086472441398308024bd3fdaa168ac0fbeff7e11f4865d11fcc7810d94e3cabfbae32ce50660aea96003f5dcbf2393278457881a03484e15407d49bdcd33e75313871f0f1e43adb8cae10cac8fd148a9354d1712dc83fd60f0e1de5a49ae53792"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000500)={0x20, 0x1, 0xef, "67b38a477cb8c67065b4783d436effb46d5d82e40413d329d6396afff68c71f27b647edbc789606bd4fb4b8292779f6c96b4b702113c69b7fc2a098087aed9d4570f34651856ab4382ec2be45685188f323d47487f189ecc81d2e1d41e75b40483de96286a3bf154db476f2d8876989f30ccfebebf274ccbbc10b8da2b4d2a8d0a0308c769913e42371068da76c2ba70a360d72a51ac39ebb2e2c9318e8921f0a678900ec213c51cff59322e3e66f68f5621927f9ed31cc2ae12093bc471640648edbc687cb16a7530aa3dcf8e6f1002a5acd68cebd185a9fb212b0751ac7dcca0a79c2be6958ec4a199296d009bf4"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x77}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1599.512284][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1599.520284][T19431] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1599.528325][T19431] [ 1599.539088][T19430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.547647][T19430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.608140][T19440] FAULT_INJECTION: forcing a failure. [ 1599.608140][T19440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.621312][T19440] CPU: 0 PID: 19440 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1599.631409][T19440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1599.641494][T19440] Call Trace: [ 1599.644794][T19440] [ 1599.647751][T19440] dump_stack_lvl+0xcd/0x134 [ 1599.652381][T19440] should_fail.cold+0x5/0xa [ 1599.657020][T19440] _copy_from_user+0x2a/0x170 [ 1599.661743][T19440] input_event_from_user+0x131/0x3a0 [ 1599.667064][T19440] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1599.672907][T19440] evdev_write+0x356/0x760 [ 1599.677370][T19440] ? evdev_read+0xe30/0xe30 [ 1599.681911][T19440] ? apparmor_file_permission+0x264/0x4e0 [ 1599.687677][T19440] ? security_file_permission+0xab/0xd0 [ 1599.693307][T19440] vfs_write+0x2d7/0xdd0 [ 1599.697585][T19440] ? evdev_read+0xe30/0xe30 [ 1599.702127][T19440] ? kernel_write+0x630/0x630 09:30:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) [ 1599.706838][T19440] ? __fget_files+0x26a/0x440 [ 1599.711561][T19440] ? __fget_light+0xe5/0x270 [ 1599.716182][T19440] ksys_write+0x1e8/0x250 [ 1599.720548][T19440] ? __ia32_sys_read+0xb0/0xb0 [ 1599.725353][T19440] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1599.731285][T19440] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1599.737224][T19440] do_syscall_64+0x35/0xb0 [ 1599.741692][T19440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1599.747622][T19440] RIP: 0033:0x7fb3c24c45a9 [ 1599.752065][T19440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1599.771707][T19440] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1599.780153][T19440] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1599.788153][T19440] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1599.796148][T19440] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x930) [ 1599.804144][T19440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1599.812141][T19440] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1599.820164][T19440] [ 1599.824247][ T9824] usb 6-1: Service connection timeout for: 256 [ 1599.830479][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1599.847652][ T9824] ath9k_htc: Failed to initialize the device [ 1599.853989][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1600.218931][ T4134] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1600.226627][ T718] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1600.619228][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.630237][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.640091][ T4134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1600.652934][ T4134] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1600.662092][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.673004][ T4134] usb 2-1: config 0 descriptor?? [ 1600.789018][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1600.798246][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.806330][ T718] usb 6-1: Product: syz [ 1600.810559][ T718] usb 6-1: Manufacturer: syz [ 1600.815175][ T718] usb 6-1: SerialNumber: syz [ 1600.859480][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1601.370901][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.378346][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.385817][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.393262][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.400706][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.408115][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.415562][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.423020][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.430473][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.437882][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.445326][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.452762][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.460202][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.467609][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.475051][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.482494][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.489930][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.497332][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.504776][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.512234][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.519670][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.527078][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.534537][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.541977][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.549436][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.556849][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.564306][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.571746][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.579203][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.586614][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.594077][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.601529][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.608979][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.616383][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.623843][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.631286][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.638693][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.646156][ T4134] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 1601.656917][ T4134] plantronics 0003:047F:FFFF.00BE: No inputs registered, leaving [ 1601.679183][ T4134] plantronics 0003:047F:FFFF.00BE: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1601.691690][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1601.703045][ T4134] usb 2-1: USB disconnect, device number 32 [ 1602.097651][ T72] usb 6-1: USB disconnect, device number 18 09:30:14 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x9}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x930) 09:30:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 60) 09:30:14 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x18}}}}}}]}}, 0x0) 09:30:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x948) 09:30:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x40, 0x22, 0x74, {0x74, 0xa, "60e785c23c7d6c7211d8ad09cc5dbb9e19fb9484bb5f8c03e580707cb626701bfccfc594b89345e353438f668dc94938f2727b3b2178cac86794f0b36d0420e1be87215e50cb7719e669aacab1310699d9358203a3815ead3295d1f174857f2017f4032f32565d20d4cbcd3f9d0d05b27e9a"}}, &(0x7f0000000200)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "138d68eafb8092b0ced26ccc1de20706ba6b6364a7ddedd6b0764b560acb7ae9be364e7043b3c6c2c915ebb6c6bd1e10ca69fd699b87bcd05915f2245962d5ba46159b7044a815270f2a6e5588ef53e0b5feac84aae5ecc3acd4e28f0f320dcc6de85e9af616cb14d75811d8f80787f75dfd089d2114d706ad5bafbcdc085e6a714fb499f44f17d8868c88d34e68d00e242ccb98870105a2e57f61c9a148cbbd806a5e544fd53f0ac2d02c5c8818b4a5fba05f3f73373801fcf635012fec88c66857151e6b0172c7d375f04d72dc543d97bd2c2a355767f030a227864e"}}, &(0x7f0000000180)={0x0, 0x22, 0x24, {[@main=@item_012={0x2, 0x0, 0xc, "0115"}, @global=@item_4={0x3, 0x1, 0x3, "cade8ac1"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0xa, "dd342516"}, @main=@item_4={0x3, 0x0, 0x8, "461a88aa"}, @global=@item_012={0x1, 0x1, 0xa, "a6"}, @local=@item_4={0x3, 0x2, 0xa, "f0a06bb2"}, @main=@item_4={0x3, 0x0, 0xb, "243a19ff"}, @main=@item_4={0x3, 0x0, 0x8, "8ec7e907"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe09, 0x3f, 0x1, {0x22, 0x5c1}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0xd7, "e84584c57367d502984a1b7a556b0fa20906b01eb2f392bebb9ff0bc022f9b191396a3f502a4639185b89c629354f1f79e42d1a110a8471c2444a0119f261afcc96e7725017e3ba1272fdda9e8219f6f0d54dcd2cce3b83e556a137851b9b8b6af3d1a72a5b39544d8c850294c0a546b501828e9c2cba086472441398308024bd3fdaa168ac0fbeff7e11f4865d11fcc7810d94e3cabfbae32ce50660aea96003f5dcbf2393278457881a03484e15407d49bdcd33e75313871f0f1e43adb8cae10cac8fd148a9354d1712dc83fd60f0e1de5a49ae53792"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000500)={0x20, 0x1, 0xef, "67b38a477cb8c67065b4783d436effb46d5d82e40413d329d6396afff68c71f27b647edbc789606bd4fb4b8292779f6c96b4b702113c69b7fc2a098087aed9d4570f34651856ab4382ec2be45685188f323d47487f189ecc81d2e1d41e75b40483de96286a3bf154db476f2d8876989f30ccfebebf274ccbbc10b8da2b4d2a8d0a0308c769913e42371068da76c2ba70a360d72a51ac39ebb2e2c9318e8921f0a678900ec213c51cff59322e3e66f68f5621927f9ed31cc2ae12093bc471640648edbc687cb16a7530aa3dcf8e6f1002a5acd68cebd185a9fb212b0751ac7dcca0a79c2be6958ec4a199296d009bf4"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x77}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1602.642697][T19455] FAULT_INJECTION: forcing a failure. [ 1602.642697][T19455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.655845][T19455] CPU: 1 PID: 19455 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1602.665942][T19455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1602.676028][T19455] Call Trace: [ 1602.679327][T19455] [ 1602.682284][T19455] dump_stack_lvl+0xcd/0x134 [ 1602.686927][T19455] should_fail.cold+0x5/0xa [ 1602.691482][T19455] _copy_from_user+0x2a/0x170 [ 1602.696218][T19455] input_event_from_user+0x131/0x3a0 [ 1602.701544][T19455] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1602.707384][T19455] evdev_write+0x356/0x760 [ 1602.711945][T19455] ? evdev_read+0xe30/0xe30 [ 1602.716488][T19455] ? apparmor_file_permission+0x264/0x4e0 [ 1602.722258][T19455] ? security_file_permission+0xab/0xd0 [ 1602.727846][T19455] vfs_write+0x2d7/0xdd0 [ 1602.732126][T19455] ? evdev_read+0xe30/0xe30 [ 1602.736665][T19455] ? kernel_write+0x630/0x630 09:30:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x960) [ 1602.741381][T19455] ? __fget_files+0x26a/0x440 [ 1602.746104][T19455] ? __fget_light+0xe5/0x270 [ 1602.750721][T19455] ksys_write+0x1e8/0x250 [ 1602.755096][T19455] ? __ia32_sys_read+0xb0/0xb0 [ 1602.759921][T19455] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1602.765846][T19455] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1602.771780][T19455] do_syscall_64+0x35/0xb0 [ 1602.776354][T19455] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1602.782287][T19455] RIP: 0033:0x7fb3c24c45a9 [ 1602.786728][T19455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1602.806368][T19455] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1602.814909][T19455] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1602.822909][T19455] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1602.830916][T19455] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x948) 09:30:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x978) 09:30:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 61) [ 1602.838917][T19455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1602.846915][T19455] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1602.855005][T19455] [ 1602.924584][T19466] FAULT_INJECTION: forcing a failure. [ 1602.924584][T19466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.937768][T19466] CPU: 0 PID: 19466 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1602.947874][T19466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1602.957962][T19466] Call Trace: [ 1602.961269][T19466] [ 1602.964219][T19466] dump_stack_lvl+0xcd/0x134 [ 1602.968849][T19466] should_fail.cold+0x5/0xa [ 1602.973402][T19466] _copy_from_user+0x2a/0x170 [ 1602.978130][T19466] input_event_from_user+0x131/0x3a0 [ 1602.983456][T19466] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1602.989305][T19466] evdev_write+0x356/0x760 [ 1602.993781][T19466] ? evdev_read+0xe30/0xe30 [ 1602.998323][T19466] ? apparmor_file_permission+0x264/0x4e0 [ 1603.004084][T19466] ? security_file_permission+0xab/0xd0 [ 1603.009669][T19466] vfs_write+0x2d7/0xdd0 [ 1603.013946][T19466] ? evdev_read+0xe30/0xe30 [ 1603.018496][T19466] ? kernel_write+0x630/0x630 [ 1603.023203][T19466] ? __fget_files+0x26a/0x440 [ 1603.027936][T19466] ? __fget_light+0xe5/0x270 [ 1603.032565][T19466] ksys_write+0x1e8/0x250 [ 1603.036930][T19466] ? __ia32_sys_read+0xb0/0xb0 [ 1603.041738][T19466] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1603.047672][T19466] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1603.053602][T19466] do_syscall_64+0x35/0xb0 [ 1603.058067][T19466] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1603.063997][T19466] RIP: 0033:0x7fb3c24c45a9 [ 1603.068438][T19466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1603.088078][T19466] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1603.096524][T19466] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1603.104522][T19466] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1603.112519][T19466] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:15 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x960) [ 1603.120521][T19466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1603.128520][T19466] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1603.128919][ T4043] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1603.136509][T19466] [ 1603.138176][ T718] usb 6-1: Service connection timeout for: 256 [ 1603.153789][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1603.165926][ T718] ath9k_htc: Failed to initialize the device 09:30:15 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x990) [ 1603.179313][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1603.519048][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.530162][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.540058][ T4043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1603.552914][ T4043] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1603.562009][ T4043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.573223][ T72] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1603.582843][ T4043] usb 2-1: config 0 descriptor?? [ 1603.919056][ T4043] usbhid 2-1:0.0: can't add hid device: -71 [ 1603.925119][ T4043] usbhid: probe of 2-1:0.0 failed with error -71 [ 1603.933840][ T4043] usb 2-1: USB disconnect, device number 33 [ 1604.109126][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1604.118234][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.126301][ T72] usb 6-1: Product: syz [ 1604.130515][ T72] usb 6-1: Manufacturer: syz [ 1604.135132][ T72] usb 6-1: SerialNumber: syz [ 1604.190020][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1604.759082][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1605.164994][ T718] usb 6-1: USB disconnect, device number 19 09:30:17 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0xa}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:17 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x978) 09:30:17 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 62) 09:30:17 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9a8) 09:30:17 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 09:30:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x40, 0x22, 0x74, {0x74, 0xa, "60e785c23c7d6c7211d8ad09cc5dbb9e19fb9484bb5f8c03e580707cb626701bfccfc594b89345e353438f668dc94938f2727b3b2178cac86794f0b36d0420e1be87215e50cb7719e669aacab1310699d9358203a3815ead3295d1f174857f2017f4032f32565d20d4cbcd3f9d0d05b27e9a"}}, &(0x7f0000000200)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "138d68eafb8092b0ced26ccc1de20706ba6b6364a7ddedd6b0764b560acb7ae9be364e7043b3c6c2c915ebb6c6bd1e10ca69fd699b87bcd05915f2245962d5ba46159b7044a815270f2a6e5588ef53e0b5feac84aae5ecc3acd4e28f0f320dcc6de85e9af616cb14d75811d8f80787f75dfd089d2114d706ad5bafbcdc085e6a714fb499f44f17d8868c88d34e68d00e242ccb98870105a2e57f61c9a148cbbd806a5e544fd53f0ac2d02c5c8818b4a5fba05f3f73373801fcf635012fec88c66857151e6b0172c7d375f04d72dc543d97bd2c2a355767f030a227864e"}}, &(0x7f0000000180)={0x0, 0x22, 0x24, {[@main=@item_012={0x2, 0x0, 0xc, "0115"}, @global=@item_4={0x3, 0x1, 0x3, "cade8ac1"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0xa, "dd342516"}, @main=@item_4={0x3, 0x0, 0x8, "461a88aa"}, @global=@item_012={0x1, 0x1, 0xa, "a6"}, @local=@item_4={0x3, 0x2, 0xa, "f0a06bb2"}, @main=@item_4={0x3, 0x0, 0xb, "243a19ff"}, @main=@item_4={0x3, 0x0, 0x8, "8ec7e907"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe09, 0x3f, 0x1, {0x22, 0x5c1}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0xd7, "e84584c57367d502984a1b7a556b0fa20906b01eb2f392bebb9ff0bc022f9b191396a3f502a4639185b89c629354f1f79e42d1a110a8471c2444a0119f261afcc96e7725017e3ba1272fdda9e8219f6f0d54dcd2cce3b83e556a137851b9b8b6af3d1a72a5b39544d8c850294c0a546b501828e9c2cba086472441398308024bd3fdaa168ac0fbeff7e11f4865d11fcc7810d94e3cabfbae32ce50660aea96003f5dcbf2393278457881a03484e15407d49bdcd33e75313871f0f1e43adb8cae10cac8fd148a9354d1712dc83fd60f0e1de5a49ae53792"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000500)={0x20, 0x1, 0xef, "67b38a477cb8c67065b4783d436effb46d5d82e40413d329d6396afff68c71f27b647edbc789606bd4fb4b8292779f6c96b4b702113c69b7fc2a098087aed9d4570f34651856ab4382ec2be45685188f323d47487f189ecc81d2e1d41e75b40483de96286a3bf154db476f2d8876989f30ccfebebf274ccbbc10b8da2b4d2a8d0a0308c769913e42371068da76c2ba70a360d72a51ac39ebb2e2c9318e8921f0a678900ec213c51cff59322e3e66f68f5621927f9ed31cc2ae12093bc471640648edbc687cb16a7530aa3dcf8e6f1002a5acd68cebd185a9fb212b0751ac7dcca0a79c2be6958ec4a199296d009bf4"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x77}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1605.697657][T19482] FAULT_INJECTION: forcing a failure. [ 1605.697657][T19482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.710878][T19482] CPU: 1 PID: 19482 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1605.720986][T19482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1605.731075][T19482] Call Trace: [ 1605.734375][T19482] [ 1605.737329][T19482] dump_stack_lvl+0xcd/0x134 [ 1605.741958][T19482] should_fail.cold+0x5/0xa [ 1605.746512][T19482] _copy_from_user+0x2a/0x170 [ 1605.751262][T19482] input_event_from_user+0x131/0x3a0 [ 1605.756669][T19482] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1605.762516][T19482] evdev_write+0x356/0x760 [ 1605.766975][T19482] ? evdev_read+0xe30/0xe30 [ 1605.771537][T19482] ? apparmor_file_permission+0x264/0x4e0 [ 1605.777300][T19482] ? security_file_permission+0xab/0xd0 [ 1605.782886][T19482] vfs_write+0x2d7/0xdd0 [ 1605.787167][T19482] ? evdev_read+0xe30/0xe30 [ 1605.791712][T19482] ? kernel_write+0x630/0x630 [ 1605.796420][T19482] ? __fget_files+0x26a/0x440 [ 1605.801155][T19482] ? __fget_light+0xe5/0x270 [ 1605.805775][T19482] ksys_write+0x1e8/0x250 [ 1605.810142][T19482] ? __ia32_sys_read+0xb0/0xb0 [ 1605.814937][T19482] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1605.820869][T19482] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1605.826798][T19482] do_syscall_64+0x35/0xb0 [ 1605.831261][T19482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1605.837190][T19482] RIP: 0033:0x7fb3c24c45a9 [ 1605.841633][T19482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1605.861292][T19482] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1605.869737][T19482] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1605.877739][T19482] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1605.885744][T19482] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:17 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x990) 09:30:17 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9c0) 09:30:17 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 63) [ 1605.893738][T19482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1605.901737][T19482] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1605.909743][T19482] 09:30:17 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9a8) [ 1605.991624][T19492] FAULT_INJECTION: forcing a failure. [ 1605.991624][T19492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.004778][T19492] CPU: 1 PID: 19492 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1606.014881][T19492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1606.024968][T19492] Call Trace: [ 1606.028274][T19492] [ 1606.031235][T19492] dump_stack_lvl+0xcd/0x134 [ 1606.035865][T19492] should_fail.cold+0x5/0xa [ 1606.040411][T19492] _copy_from_user+0x2a/0x170 [ 1606.045139][T19492] input_event_from_user+0x131/0x3a0 [ 1606.050465][T19492] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1606.056304][T19492] evdev_write+0x356/0x760 [ 1606.060762][T19492] ? evdev_read+0xe30/0xe30 [ 1606.065302][T19492] ? apparmor_file_permission+0x264/0x4e0 [ 1606.071065][T19492] ? security_file_permission+0xab/0xd0 [ 1606.076653][T19492] vfs_write+0x2d7/0xdd0 [ 1606.080928][T19492] ? evdev_read+0xe30/0xe30 [ 1606.085469][T19492] ? kernel_write+0x630/0x630 [ 1606.090178][T19492] ? __fget_files+0x26a/0x440 [ 1606.094902][T19492] ? __fget_light+0xe5/0x270 [ 1606.099522][T19492] ksys_write+0x1e8/0x250 [ 1606.103875][T19492] ? __ia32_sys_read+0xb0/0xb0 [ 1606.108674][T19492] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1606.114659][T19492] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1606.120590][T19492] do_syscall_64+0x35/0xb0 [ 1606.125055][T19492] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1606.130996][T19492] RIP: 0033:0x7fb3c24c45a9 [ 1606.135437][T19492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1606.155083][T19492] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1606.163546][T19492] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1606.171591][T19492] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1606.179596][T19492] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:18 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9d8) 09:30:18 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}}]}}, 0x0) [ 1606.187597][T19492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1606.195601][T19492] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1606.203612][T19492] [ 1606.211656][ T72] usb 6-1: Service connection timeout for: 256 [ 1606.217870][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1606.228265][ T72] ath9k_htc: Failed to initialize the device [ 1606.234693][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1606.244025][ T4134] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1606.629149][ T718] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1606.669094][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.680145][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.689959][ T4134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1606.702803][ T4134] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1606.711921][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.729888][ T4134] usb 2-1: config 0 descriptor?? [ 1607.270891][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.278356][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.285818][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.293264][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.300719][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.308125][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.315591][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.323044][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.330505][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.338013][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.345484][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.352938][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.360404][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.367816][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.375258][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.382694][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.390133][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.397544][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.404976][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.412421][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.419866][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.427286][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.434747][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.442192][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.449648][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.457055][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.464507][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.471949][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.479417][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.486826][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.494270][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.501705][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.509140][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.516546][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.523979][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.531432][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.538894][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.546311][ T4134] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1607.557479][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1607.566586][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.574649][ T718] usb 6-1: Product: syz [ 1607.578921][ T718] usb 6-1: Manufacturer: syz [ 1607.583548][ T718] usb 6-1: SerialNumber: syz [ 1607.591362][ T4134] plantronics 0003:047F:FFFF.00BF: No inputs registered, leaving [ 1607.609188][ T4134] plantronics 0003:047F:FFFF.00BF: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1607.639948][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1607.650566][ T4134] usb 2-1: USB disconnect, device number 34 [ 1608.379065][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1608.785603][ T4134] usb 6-1: USB disconnect, device number 20 09:30:21 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0xf}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:21 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9f0) 09:30:21 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 64) 09:30:21 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9c0) 09:30:21 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}}]}}, 0x0) 09:30:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0xd0, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0x192}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc0, 0x7, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x81, 0x7f, 0x4}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x8, 0x9, 0x2, 0x8, 0x3f}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfe, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3, 0x62, 0x7, 0x6}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40e}}, {0x17, &(0x7f0000000280)=@string={0x17, 0x3, "2e32698b6eb723e968f093d521e587aa97bdca61fd"}}]}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x30, 0x56a, 0x4004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x24, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x20, {0x9, 0x21, 0x2, 0xa5, 0x1, {0x22, 0xc53}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3c, 0x8, 0xb0}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0xca, 0x1}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x7f, 0x9, 0x4, 0x8, 0x3f}, 0x2a, &(0x7f0000001000)=ANY=[@ANYBLOB="050f592ef22a00030a1003000f00020166000710020012780514100a06020000000f007f000000ff0000ff0000"], 0x6, [{0xa9, &(0x7f0000000400)=@string={0xa9, 0x3, "a3229a0962a1f9c7e11fc81685fb346262ff9686001e340ae4eb91db932cec4d3f2dd7517266806698de32d3bf133c720f5ab2c64fc4c121c4c340e9e62c7e7e9cebd32d144c1eafc86e78ccbe6eee26985407b14c005de1037d7326fb3800e9edf0f7524b01961bd5aa9830bdbc397ac5aa0457c48bd6fab74a03c03e7780eef5aac9d3b41c9cad115674e191e5bd42ebf41dcb6b74ae68cacdc867236ccd6ef9f88e8430a505"}}, {0x19, &(0x7f00000004c0)=@string={0x19, 0x3, "f5765928d4c8a9cde6e614e0498aabc37e03da0628c2de"}}, {0x88, &(0x7f0000000500)=@string={0x88, 0x3, "b037e128a9f5cb5214d3093f22524f9ebe62da8a059fe7b261138a449773801f9ba80bdbc7838f90c32d1432c58b973c8bad2c9e6eb85c0899a6875a20b95774d2083283ee27b0f32122899849e53ad9483283df01718e1023b4d7ec255e7118796139e6433147ff4d512be622b7229375d635a6a7a72d8a37961492da581b795d3cbbcf014a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x200a}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="c92f00002639a640c410ca814df3050203010902120001cdfa0800000000000000ae00000000090400000003000000ae3f291a1219bb009582e906c160fa0a3a94aeb98baa3deae802b78c8ad30efea5f6899ae249e5969b957c48"], 0x0) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000840)={0x20, 0x9, 0x77, {0x77, 0x23, "f74d08321e3a4caa43caa0a39a5c2583ce822eadefa76b83e58c1d8c972fbc7cf09270f592f3c360ae75c53d28edc16911780194027661a2fbfb6be000d4a63736b8b5428e7db2fb1f866cc723c0739e765a40926f4e42edea91b91e4a487481cb8144f737c1b7c4969be7ed564c842838e9b965bd"}}, &(0x7f00000008c0)={0x0, 0x3, 0x93, @string={0x93, 0x3, "a1a8e9080d038c4ccba8be24c84402900e6e292c50a1f6cc0b74fdee6677b49ec13af9bea87410e0d1ced290a5ff07e48be8e85ed0b1840e1dd8e03d97cb93821b2b36e4e6aa45f97523c421ad4282113d0c4923606f0c74ccf312d496b1f4ee2e341225a043a2db7f3fc8316a398b0e01b4048f8acf06caabaa0b7174c55a3239325721973e192d7dcd1dc62bb08702b6"}}, &(0x7f0000000980)={0x0, 0xf, 0x98, {0x5, 0xf, 0x98, 0x2, [@generic={0x6f, 0x10, 0x3, "73b0a2fd21fff6882d5bf1808164a67d23bfd0bb04e07b17faefe29691c4b9fff48a0a3458f07e3276b10c0733863bcd40e006817140257320dfdabc4cc185758c2bceb9c1a410d21e20088112dcd67f02e4c6621e779eeeda504ed171f8af0720509d17c2301a611c442597"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x8000, 0xf00f, 0x4, [0xff00f0, 0x0, 0xff0000, 0x0, 0xc0, 0xff0000]}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x3, 0x0, 'q\fVG', 'Zk4{'}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x60, 0x0, 0x80, 0x40, 0xfff, 0x2f9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b00)={0x40, 0xb, 0x6b, "e4809d45c5d1a2d63aae155b41f4c2267227b20ad5e11dc21987c7579fdd1dbe1efe3f04743467fa4a06536baeb93e23eedca32e820eca647224afd628c57fe0bfc1366e9859643e6cf8a2ef8bb0bfcc7deb86ca5280ab0fcdab5740e141668aa2ca81fe12dcff58072285"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x20, 0x8, [0xff0]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "baf8"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x13, 0x6}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000e00)={0x40, 0x19, 0x2, 'u['}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0xc062}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x5e}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1609.329552][T19510] FAULT_INJECTION: forcing a failure. [ 1609.329552][T19510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.342825][T19510] CPU: 0 PID: 19510 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1609.352931][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1609.363278][T19510] Call Trace: [ 1609.366578][T19510] [ 1609.369533][T19510] dump_stack_lvl+0xcd/0x134 [ 1609.374174][T19510] should_fail.cold+0x5/0xa [ 1609.378721][T19510] _copy_from_user+0x2a/0x170 [ 1609.383447][T19510] input_event_from_user+0x131/0x3a0 [ 1609.388766][T19510] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1609.394614][T19510] evdev_write+0x356/0x760 [ 1609.399077][T19510] ? evdev_read+0xe30/0xe30 [ 1609.403617][T19510] ? apparmor_file_permission+0x264/0x4e0 [ 1609.409377][T19510] ? security_file_permission+0xab/0xd0 [ 1609.414961][T19510] vfs_write+0x2d7/0xdd0 [ 1609.419239][T19510] ? evdev_read+0xe30/0xe30 [ 1609.423781][T19510] ? kernel_write+0x630/0x630 [ 1609.428487][T19510] ? __fget_files+0x26a/0x440 [ 1609.433375][T19510] ? __fget_light+0xe5/0x270 [ 1609.437993][T19510] ksys_write+0x1e8/0x250 [ 1609.442363][T19510] ? __ia32_sys_read+0xb0/0xb0 [ 1609.447157][T19510] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1609.453099][T19510] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1609.459035][T19510] do_syscall_64+0x35/0xb0 [ 1609.463507][T19510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1609.469438][T19510] RIP: 0033:0x7fb3c24c45a9 [ 1609.473876][T19510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1609.493606][T19510] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1609.502061][T19510] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1609.510064][T19510] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1609.518101][T19510] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:21 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9d8) 09:30:21 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa08) 09:30:21 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 65) [ 1609.526106][T19510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1609.534107][T19510] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1609.542120][T19510] 09:30:21 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa20) 09:30:21 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa38) 09:30:21 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9f0) [ 1609.589085][ T4043] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1609.638916][ T718] usb 6-1: Service connection timeout for: 256 [ 1609.645172][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1609.655210][T19520] FAULT_INJECTION: forcing a failure. [ 1609.655210][T19520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.661322][ T718] ath9k_htc: Failed to initialize the device [ 1609.668336][T19520] CPU: 1 PID: 19520 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1609.674739][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1609.684327][T19520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1609.684347][T19520] Call Trace: [ 1609.684357][T19520] [ 1609.684368][T19520] dump_stack_lvl+0xcd/0x134 [ 1609.684403][T19520] should_fail.cold+0x5/0xa [ 1609.715904][T19520] _copy_from_user+0x2a/0x170 [ 1609.720632][T19520] input_event_from_user+0x131/0x3a0 [ 1609.726048][T19520] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1609.731895][T19520] evdev_write+0x356/0x760 [ 1609.736350][T19520] ? evdev_read+0xe30/0xe30 [ 1609.740889][T19520] ? apparmor_file_permission+0x264/0x4e0 [ 1609.746651][T19520] ? security_file_permission+0xab/0xd0 [ 1609.752232][T19520] vfs_write+0x2d7/0xdd0 [ 1609.756504][T19520] ? evdev_read+0xe30/0xe30 [ 1609.761051][T19520] ? kernel_write+0x630/0x630 [ 1609.765760][T19520] ? __fget_files+0x26a/0x440 [ 1609.770489][T19520] ? __fget_light+0xe5/0x270 [ 1609.775108][T19520] ksys_write+0x1e8/0x250 [ 1609.779467][T19520] ? __ia32_sys_read+0xb0/0xb0 [ 1609.784272][T19520] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1609.790204][T19520] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1609.796154][T19520] do_syscall_64+0x35/0xb0 [ 1609.800617][T19520] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1609.806551][T19520] RIP: 0033:0x7fb3c24c45a9 [ 1609.810994][T19520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1609.830742][T19520] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1609.839213][T19520] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1609.847217][T19520] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1609.855218][T19520] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1609.863223][T19520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1609.871231][T19520] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1609.879283][T19520] [ 1610.119004][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.129987][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.141235][ T4043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1610.154203][ T4043] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1610.163308][ T4043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.179098][ T4134] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1610.189845][ T4043] usb 2-1: config 0 descriptor?? [ 1610.432385][T19509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.442888][T19509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.452176][T19509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.460866][T19509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.471850][T19509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.480708][T19509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.759046][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1610.768185][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.776288][ T4134] usb 6-1: Product: syz [ 1610.780505][ T4134] usb 6-1: Manufacturer: syz [ 1610.785124][ T4134] usb 6-1: SerialNumber: syz [ 1610.799280][ T4043] usbhid 2-1:0.0: can't add hid device: -71 [ 1610.805301][ T4043] usbhid: probe of 2-1:0.0 failed with error -71 [ 1610.818583][ T4043] usb 2-1: USB disconnect, device number 35 [ 1610.829860][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1611.399000][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1611.804964][ T4043] usb 6-1: USB disconnect, device number 21 09:30:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x18}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:24 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa50) 09:30:24 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa08) 09:30:24 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 66) 09:30:24 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x4}}}}}}]}}, 0x0) 09:30:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0xd0, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0x192}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc0, 0x7, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x81, 0x7f, 0x4}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x8, 0x9, 0x2, 0x8, 0x3f}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfe, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3, 0x62, 0x7, 0x6}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40e}}, {0x17, &(0x7f0000000280)=@string={0x17, 0x3, "2e32698b6eb723e968f093d521e587aa97bdca61fd"}}]}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x30, 0x56a, 0x4004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x24, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x20, {0x9, 0x21, 0x2, 0xa5, 0x1, {0x22, 0xc53}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3c, 0x8, 0xb0}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0xca, 0x1}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x7f, 0x9, 0x4, 0x8, 0x3f}, 0x2a, &(0x7f0000001000)=ANY=[@ANYBLOB="050f592ef22a00030a1003000f00020166000710020012780514100a06020000000f007f000000ff0000ff0000"], 0x6, [{0xa9, &(0x7f0000000400)=@string={0xa9, 0x3, "a3229a0962a1f9c7e11fc81685fb346262ff9686001e340ae4eb91db932cec4d3f2dd7517266806698de32d3bf133c720f5ab2c64fc4c121c4c340e9e62c7e7e9cebd32d144c1eafc86e78ccbe6eee26985407b14c005de1037d7326fb3800e9edf0f7524b01961bd5aa9830bdbc397ac5aa0457c48bd6fab74a03c03e7780eef5aac9d3b41c9cad115674e191e5bd42ebf41dcb6b74ae68cacdc867236ccd6ef9f88e8430a505"}}, {0x19, &(0x7f00000004c0)=@string={0x19, 0x3, "f5765928d4c8a9cde6e614e0498aabc37e03da0628c2de"}}, {0x88, &(0x7f0000000500)=@string={0x88, 0x3, "b037e128a9f5cb5214d3093f22524f9ebe62da8a059fe7b261138a449773801f9ba80bdbc7838f90c32d1432c58b973c8bad2c9e6eb85c0899a6875a20b95774d2083283ee27b0f32122899849e53ad9483283df01718e1023b4d7ec255e7118796139e6433147ff4d512be622b7229375d635a6a7a72d8a37961492da581b795d3cbbcf014a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x200a}}]}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="c92f00002639a640c410ca814df3050203010902120001cdfa0800000000000000ae00000000090400000003000000ae3f291a1219bb009582e906c160fa0a3a94aeb98baa3deae802b78c8ad30efea5f6899ae249e5969b957c48"], 0x0) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000840)={0x20, 0x9, 0x77, {0x77, 0x23, "f74d08321e3a4caa43caa0a39a5c2583ce822eadefa76b83e58c1d8c972fbc7cf09270f592f3c360ae75c53d28edc16911780194027661a2fbfb6be000d4a63736b8b5428e7db2fb1f866cc723c0739e765a40926f4e42edea91b91e4a487481cb8144f737c1b7c4969be7ed564c842838e9b965bd"}}, &(0x7f00000008c0)={0x0, 0x3, 0x93, @string={0x93, 0x3, "a1a8e9080d038c4ccba8be24c84402900e6e292c50a1f6cc0b74fdee6677b49ec13af9bea87410e0d1ced290a5ff07e48be8e85ed0b1840e1dd8e03d97cb93821b2b36e4e6aa45f97523c421ad4282113d0c4923606f0c74ccf312d496b1f4ee2e341225a043a2db7f3fc8316a398b0e01b4048f8acf06caabaa0b7174c55a3239325721973e192d7dcd1dc62bb08702b6"}}, &(0x7f0000000980)={0x0, 0xf, 0x98, {0x5, 0xf, 0x98, 0x2, [@generic={0x6f, 0x10, 0x3, "73b0a2fd21fff6882d5bf1808164a67d23bfd0bb04e07b17faefe29691c4b9fff48a0a3458f07e3276b10c0733863bcd40e006817140257320dfdabc4cc185758c2bceb9c1a410d21e20088112dcd67f02e4c6621e779eeeda504ed171f8af0720509d17c2301a611c442597"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x8000, 0xf00f, 0x4, [0xff00f0, 0x0, 0xff0000, 0x0, 0xc0, 0xff0000]}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x3, 0x0, 'q\fVG', 'Zk4{'}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x60, 0x0, 0x80, 0x40, 0xfff, 0x2f9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b00)={0x40, 0xb, 0x6b, "e4809d45c5d1a2d63aae155b41f4c2267227b20ad5e11dc21987c7579fdd1dbe1efe3f04743467fa4a06536baeb93e23eedca32e820eca647224afd628c57fe0bfc1366e9859643e6cf8a2ef8bb0bfcc7deb86ca5280ab0fcdab5740e141668aa2ca81fe12dcff58072285"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x20, 0x8, [0xff0]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "baf8"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x13, 0x6}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000e00)={0x40, 0x19, 0x2, 'u['}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0xc062}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x5e}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1612.336939][T19532] FAULT_INJECTION: forcing a failure. [ 1612.336939][T19532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1612.343220][T19534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.350186][T19532] CPU: 1 PID: 19532 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1612.358692][T19534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.368427][T19532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1612.377727][T19534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.386169][T19532] Call Trace: [ 1612.386180][T19532] [ 1612.386190][T19532] dump_stack_lvl+0xcd/0x134 [ 1612.386225][T19532] should_fail.cold+0x5/0xa [ 1612.395347][T19536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.397812][T19532] _copy_from_user+0x2a/0x170 [ 1612.401094][T19536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.405378][T19532] input_event_from_user+0x131/0x3a0 09:30:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0xd0, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0x192}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc0, 0x7, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x81, 0x7f, 0x4}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x8, 0x9, 0x2, 0x8, 0x3f}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfe, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3, 0x62, 0x7, 0x6}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40e}}, {0x17, &(0x7f0000000280)=@string={0x17, 0x3, "2e32698b6eb723e968f093d521e587aa97bdca61fd"}}]}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x30, 0x56a, 0x4004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x24, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x20, {0x9, 0x21, 0x2, 0xa5, 0x1, {0x22, 0xc53}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3c, 0x8, 0xb0}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0xca, 0x1}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x7f, 0x9, 0x4, 0x8, 0x3f}, 0x2a, &(0x7f0000001000)=ANY=[@ANYBLOB="050f592ef22a00030a1003000f00020166000710020012780514100a06020000000f007f000000ff0000ff0000"], 0x6, [{0xa9, &(0x7f0000000400)=@string={0xa9, 0x3, "a3229a0962a1f9c7e11fc81685fb346262ff9686001e340ae4eb91db932cec4d3f2dd7517266806698de32d3bf133c720f5ab2c64fc4c121c4c340e9e62c7e7e9cebd32d144c1eafc86e78ccbe6eee26985407b14c005de1037d7326fb3800e9edf0f7524b01961bd5aa9830bdbc397ac5aa0457c48bd6fab74a03c03e7780eef5aac9d3b41c9cad115674e191e5bd42ebf41dcb6b74ae68cacdc867236ccd6ef9f88e8430a505"}}, {0x19, &(0x7f00000004c0)=@string={0x19, 0x3, "f5765928d4c8a9cde6e614e0498aabc37e03da0628c2de"}}, {0x88, &(0x7f0000000500)=@string={0x88, 0x3, "b037e128a9f5cb5214d3093f22524f9ebe62da8a059fe7b261138a449773801f9ba80bdbc7838f90c32d1432c58b973c8bad2c9e6eb85c0899a6875a20b95774d2083283ee27b0f32122899849e53ad9483283df01718e1023b4d7ec255e7118796139e6433147ff4d512be622b7229375d635a6a7a72d8a37961492da581b795d3cbbcf014a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x200a}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="c92f00002639a640c410ca814df3050203010902120001cdfa0800000000000000ae00000000090400000003000000ae3f291a1219bb009582e906c160fa0a3a94aeb98baa3deae802b78c8ad30efea5f6899ae249e5969b957c48"], 0x0) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000840)={0x20, 0x9, 0x77, {0x77, 0x23, "f74d08321e3a4caa43caa0a39a5c2583ce822eadefa76b83e58c1d8c972fbc7cf09270f592f3c360ae75c53d28edc16911780194027661a2fbfb6be000d4a63736b8b5428e7db2fb1f866cc723c0739e765a40926f4e42edea91b91e4a487481cb8144f737c1b7c4969be7ed564c842838e9b965bd"}}, &(0x7f00000008c0)={0x0, 0x3, 0x93, @string={0x93, 0x3, "a1a8e9080d038c4ccba8be24c84402900e6e292c50a1f6cc0b74fdee6677b49ec13af9bea87410e0d1ced290a5ff07e48be8e85ed0b1840e1dd8e03d97cb93821b2b36e4e6aa45f97523c421ad4282113d0c4923606f0c74ccf312d496b1f4ee2e341225a043a2db7f3fc8316a398b0e01b4048f8acf06caabaa0b7174c55a3239325721973e192d7dcd1dc62bb08702b6"}}, &(0x7f0000000980)={0x0, 0xf, 0x98, {0x5, 0xf, 0x98, 0x2, [@generic={0x6f, 0x10, 0x3, "73b0a2fd21fff6882d5bf1808164a67d23bfd0bb04e07b17faefe29691c4b9fff48a0a3458f07e3276b10c0733863bcd40e006817140257320dfdabc4cc185758c2bceb9c1a410d21e20088112dcd67f02e4c6621e779eeeda504ed171f8af0720509d17c2301a611c442597"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x8000, 0xf00f, 0x4, [0xff00f0, 0x0, 0xff0000, 0x0, 0xc0, 0xff0000]}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x3, 0x0, 'q\fVG', 'Zk4{'}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x60, 0x0, 0x80, 0x40, 0xfff, 0x2f9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b00)={0x40, 0xb, 0x6b, "e4809d45c5d1a2d63aae155b41f4c2267227b20ad5e11dc21987c7579fdd1dbe1efe3f04743467fa4a06536baeb93e23eedca32e820eca647224afd628c57fe0bfc1366e9859643e6cf8a2ef8bb0bfcc7deb86ca5280ab0fcdab5740e141668aa2ca81fe12dcff58072285"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x20, 0x8, [0xff0]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "baf8"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x13, 0x6}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000e00)={0x40, 0x19, 0x2, 'u['}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0xc062}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x5e}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1612.414993][T19534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.418188][T19532] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1612.449566][T19532] evdev_write+0x356/0x760 [ 1612.454025][T19532] ? evdev_read+0xe30/0xe30 [ 1612.458565][T19532] ? apparmor_file_permission+0x264/0x4e0 [ 1612.464328][T19532] ? security_file_permission+0xab/0xd0 [ 1612.469916][T19532] vfs_write+0x2d7/0xdd0 [ 1612.474195][T19532] ? evdev_read+0xe30/0xe30 [ 1612.478749][T19532] ? kernel_write+0x630/0x630 [ 1612.483461][T19532] ? __fget_files+0x26a/0x440 [ 1612.488189][T19532] ? __fget_light+0xe5/0x270 [ 1612.492807][T19532] ksys_write+0x1e8/0x250 [ 1612.497170][T19532] ? __ia32_sys_read+0xb0/0xb0 [ 1612.501969][T19532] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1612.507901][T19532] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1612.513829][T19532] do_syscall_64+0x35/0xb0 [ 1612.518293][T19532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1612.524221][T19532] RIP: 0033:0x7fb3c24c45a9 [ 1612.528660][T19532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1612.548303][T19532] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1612.556778][T19532] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1612.564778][T19532] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1612.572786][T19532] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:24 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa20) 09:30:24 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa68) [ 1612.580781][T19532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1612.588779][T19532] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1612.596783][T19532] 09:30:24 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 67) 09:30:24 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa38) [ 1612.668906][ T4134] usb 6-1: Service connection timeout for: 256 [ 1612.675181][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1612.688222][ T4134] ath9k_htc: Failed to initialize the device [ 1612.688603][T19551] FAULT_INJECTION: forcing a failure. [ 1612.688603][T19551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1612.707490][T19551] CPU: 1 PID: 19551 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1612.717593][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1612.727688][T19551] Call Trace: [ 1612.730998][T19551] [ 1612.733953][T19551] dump_stack_lvl+0xcd/0x134 [ 1612.738673][T19551] should_fail.cold+0x5/0xa [ 1612.743227][T19551] _copy_from_user+0x2a/0x170 [ 1612.747952][T19551] input_event_from_user+0x131/0x3a0 [ 1612.753289][T19551] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1612.759156][T19551] evdev_write+0x356/0x760 [ 1612.763617][T19551] ? evdev_read+0xe30/0xe30 [ 1612.768168][T19551] ? apparmor_file_permission+0x264/0x4e0 [ 1612.774011][T19551] ? security_file_permission+0xab/0xd0 [ 1612.779601][T19551] vfs_write+0x2d7/0xdd0 [ 1612.783876][T19551] ? evdev_read+0xe30/0xe30 [ 1612.788421][T19551] ? kernel_write+0x630/0x630 [ 1612.793132][T19551] ? __fget_files+0x26a/0x440 [ 1612.797864][T19551] ? __fget_light+0xe5/0x270 [ 1612.802480][T19551] ksys_write+0x1e8/0x250 [ 1612.806843][T19551] ? __ia32_sys_read+0xb0/0xb0 [ 1612.811638][T19551] ? syscall_enter_from_user_mode+0x22/0xb0 09:30:24 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}}}}}}]}}, 0x0) [ 1612.817581][T19551] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1612.823514][T19551] do_syscall_64+0x35/0xb0 [ 1612.827978][T19551] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1612.833910][T19551] RIP: 0033:0x7fb3c24c45a9 [ 1612.838360][T19551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1612.858007][T19551] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1612.866547][T19551] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1612.874552][T19551] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1612.882557][T19551] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1612.890559][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1612.898559][T19551] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1612.906567][T19551] [ 1612.909020][ T718] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1612.909761][ T4043] usb 6-1: ath9k_htc: USB layer deinitialized [ 1613.279052][ T4043] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1613.319105][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.330101][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.339917][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1613.352760][ T718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1613.361869][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.374292][ T718] usb 2-1: config 0 descriptor?? [ 1613.620028][T19544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.628613][T19544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.637387][T19544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.646235][T19544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.654948][T19544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.663817][T19544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.869109][ T4043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1613.878244][ T4043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.886316][ T4043] usb 6-1: Product: syz [ 1613.890524][ T4043] usb 6-1: Manufacturer: syz [ 1613.895170][ T4043] usb 6-1: SerialNumber: syz [ 1613.959769][ T4043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1613.978994][ T718] usbhid 2-1:0.0: can't add hid device: -71 [ 1613.985003][ T718] usbhid: probe of 2-1:0.0 failed with error -71 [ 1613.993365][ T718] usb 2-1: USB disconnect, device number 36 [ 1614.559022][ T4043] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1614.975299][ T72] usb 6-1: USB disconnect, device number 22 09:30:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x1d}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:27 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa80) 09:30:27 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa50) 09:30:27 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 68) 09:30:27 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6}}}}}}]}}, 0x0) 09:30:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1615.505123][T19565] FAULT_INJECTION: forcing a failure. [ 1615.505123][T19565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.518403][T19565] CPU: 0 PID: 19565 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1615.528606][T19565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1615.538688][T19565] Call Trace: [ 1615.541983][T19565] [ 1615.544935][T19565] dump_stack_lvl+0xcd/0x134 [ 1615.549562][T19565] should_fail.cold+0x5/0xa [ 1615.554109][T19565] _copy_from_user+0x2a/0x170 [ 1615.558828][T19565] input_event_from_user+0x131/0x3a0 [ 1615.564144][T19565] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1615.570074][T19565] evdev_write+0x356/0x760 [ 1615.574538][T19565] ? evdev_read+0xe30/0xe30 [ 1615.579076][T19565] ? apparmor_file_permission+0x264/0x4e0 [ 1615.584833][T19565] ? security_file_permission+0xab/0xd0 [ 1615.590423][T19565] vfs_write+0x2d7/0xdd0 [ 1615.594702][T19565] ? evdev_read+0xe30/0xe30 [ 1615.599246][T19565] ? kernel_write+0x630/0x630 [ 1615.603951][T19565] ? __fget_files+0x26a/0x440 [ 1615.608675][T19565] ? __fget_light+0xe5/0x270 [ 1615.613293][T19565] ksys_write+0x1e8/0x250 [ 1615.617651][T19565] ? __ia32_sys_read+0xb0/0xb0 [ 1615.622443][T19565] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1615.628374][T19565] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1615.634308][T19565] do_syscall_64+0x35/0xb0 [ 1615.638769][T19565] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1615.644694][T19565] RIP: 0033:0x7fb3c24c45a9 [ 1615.649133][T19565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1615.668767][T19565] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1615.677209][T19565] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1615.685211][T19565] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1615.693207][T19565] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:27 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa68) 09:30:27 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa98) 09:30:27 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 69) [ 1615.701204][T19565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1615.709198][T19565] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1615.717196][T19565] [ 1615.769055][ T4035] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1615.789113][ T4043] usb 6-1: Service connection timeout for: 256 [ 1615.795380][ T4043] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1615.806405][ T4043] ath9k_htc: Failed to initialize the device [ 1615.810769][T19575] FAULT_INJECTION: forcing a failure. [ 1615.810769][T19575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.813269][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1615.825684][T19575] CPU: 0 PID: 19575 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1615.841773][T19575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1615.851856][T19575] Call Trace: [ 1615.855148][T19575] [ 1615.858100][T19575] dump_stack_lvl+0xcd/0x134 [ 1615.862725][T19575] should_fail.cold+0x5/0xa [ 1615.867273][T19575] _copy_from_user+0x2a/0x170 [ 1615.871996][T19575] input_event_from_user+0x131/0x3a0 [ 1615.877316][T19575] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1615.883153][T19575] evdev_write+0x356/0x760 [ 1615.887605][T19575] ? evdev_read+0xe30/0xe30 [ 1615.892140][T19575] ? apparmor_file_permission+0x264/0x4e0 [ 1615.897906][T19575] ? security_file_permission+0xab/0xd0 [ 1615.903507][T19575] vfs_write+0x2d7/0xdd0 [ 1615.907781][T19575] ? evdev_read+0xe30/0xe30 [ 1615.912326][T19575] ? kernel_write+0x630/0x630 [ 1615.917034][T19575] ? __fget_files+0x26a/0x440 [ 1615.921754][T19575] ? __fget_light+0xe5/0x270 [ 1615.926380][T19575] ksys_write+0x1e8/0x250 [ 1615.930746][T19575] ? __ia32_sys_read+0xb0/0xb0 [ 1615.935544][T19575] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1615.941472][T19575] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1615.947489][T19575] do_syscall_64+0x35/0xb0 [ 1615.951951][T19575] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1615.957877][T19575] RIP: 0033:0x7fb3c24c45a9 [ 1615.962333][T19575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1615.981978][T19575] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1615.990428][T19575] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1615.998428][T19575] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1616.006425][T19575] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:28 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa80) 09:30:28 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xab0) 09:30:28 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 70) [ 1616.014427][T19575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1616.022431][T19575] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1616.030436][T19575] [ 1616.096037][T19584] FAULT_INJECTION: forcing a failure. [ 1616.096037][T19584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1616.109268][T19584] CPU: 1 PID: 19584 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1616.119375][T19584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1616.129454][T19584] Call Trace: [ 1616.132750][T19584] [ 1616.135696][T19584] dump_stack_lvl+0xcd/0x134 [ 1616.140361][T19584] should_fail.cold+0x5/0xa [ 1616.144908][T19584] _copy_from_user+0x2a/0x170 [ 1616.149625][T19584] input_event_from_user+0x131/0x3a0 [ 1616.154944][T19584] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1616.160780][T19584] evdev_write+0x356/0x760 [ 1616.165227][T19584] ? evdev_read+0xe30/0xe30 [ 1616.169765][T19584] ? apparmor_file_permission+0x264/0x4e0 [ 1616.175530][T19584] ? security_file_permission+0xab/0xd0 [ 1616.181115][T19584] vfs_write+0x2d7/0xdd0 [ 1616.185388][T19584] ? evdev_read+0xe30/0xe30 [ 1616.189931][T19584] ? kernel_write+0x630/0x630 [ 1616.194638][T19584] ? __fget_files+0x26a/0x440 [ 1616.199432][T19584] ? __fget_light+0xe5/0x270 [ 1616.204051][T19584] ksys_write+0x1e8/0x250 [ 1616.208406][T19584] ? __ia32_sys_read+0xb0/0xb0 [ 1616.213196][T19584] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1616.219124][T19584] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1616.225051][T19584] do_syscall_64+0x35/0xb0 [ 1616.229560][T19584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1616.235487][T19584] RIP: 0033:0x7fb3c24c45a9 [ 1616.240011][T19584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1616.259648][T19584] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1616.268092][T19584] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1616.276093][T19584] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1616.284173][T19584] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.292164][T19584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1616.300157][T19584] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1616.308161][T19584] [ 1616.312773][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.323707][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.333497][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1616.346368][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1616.355476][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.365582][ T4035] usb 2-1: config 0 descriptor?? [ 1616.429136][ T72] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1616.850852][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.858297][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.867538][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.875008][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.882457][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.889914][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.897336][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.904795][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.912236][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.919694][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.927096][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.934552][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.942085][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.949550][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.957041][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.964492][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.971929][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.979396][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.986805][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1616.994262][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.001710][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.009164][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.016572][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.024029][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.031468][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.038921][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.046335][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.049929][T19566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.053870][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.069595][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.070430][T19566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.076978][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.092167][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.099618][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.107026][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.114484][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.121931][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.129382][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.136781][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.144237][ T4035] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0x0 [ 1617.154534][ T4035] plantronics 0003:047F:FFFF.00C0: No inputs registered, leaving [ 1617.167753][ T4035] plantronics 0003:047F:FFFF.00C0: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1617.182416][ T4035] usb 2-1: USB disconnect, device number 37 [ 1617.239101][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1617.248183][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.256239][ T72] usb 6-1: Product: syz [ 1617.260457][ T72] usb 6-1: Manufacturer: syz [ 1617.265072][ T72] usb 6-1: SerialNumber: syz [ 1617.309718][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1617.938983][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1618.344576][ T718] usb 6-1: USB disconnect, device number 23 09:30:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x3e}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:30 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xac8) 09:30:30 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa98) 09:30:30 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 71) 09:30:30 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x7}}}}}}]}}, 0x0) 09:30:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) (async) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) [ 1618.871434][T19591] FAULT_INJECTION: forcing a failure. [ 1618.871434][T19591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.884574][T19591] CPU: 1 PID: 19591 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1618.894673][T19591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1618.904754][T19591] Call Trace: [ 1618.908054][T19591] [ 1618.911004][T19591] dump_stack_lvl+0xcd/0x134 [ 1618.915633][T19591] should_fail.cold+0x5/0xa [ 1618.920187][T19591] _copy_from_user+0x2a/0x170 [ 1618.924916][T19591] input_event_from_user+0x131/0x3a0 [ 1618.930236][T19591] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1618.936082][T19591] evdev_write+0x356/0x760 [ 1618.940534][T19591] ? evdev_read+0xe30/0xe30 [ 1618.945073][T19591] ? apparmor_file_permission+0x264/0x4e0 [ 1618.950831][T19591] ? security_file_permission+0xab/0xd0 [ 1618.956416][T19591] vfs_write+0x2d7/0xdd0 [ 1618.960688][T19591] ? evdev_read+0xe30/0xe30 [ 1618.965277][T19591] ? kernel_write+0x630/0x630 [ 1618.969994][T19591] ? __fget_files+0x26a/0x440 [ 1618.974714][T19591] ? __fget_light+0xe5/0x270 [ 1618.979328][T19591] ksys_write+0x1e8/0x250 [ 1618.983686][T19591] ? __ia32_sys_read+0xb0/0xb0 [ 1618.988477][T19591] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1618.994403][T19591] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1619.000334][T19591] do_syscall_64+0x35/0xb0 [ 1619.004794][T19591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1619.010722][T19591] RIP: 0033:0x7fb3c24c45a9 [ 1619.015160][T19591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1619.034797][T19591] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1619.043242][T19591] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1619.051239][T19591] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1619.059237][T19591] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:31 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xae0) 09:30:31 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 72) 09:30:31 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xab0) [ 1619.067232][T19591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1619.075233][T19591] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1619.083236][T19591] [ 1619.126339][T19599] FAULT_INJECTION: forcing a failure. [ 1619.126339][T19599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1619.139570][T19599] CPU: 1 PID: 19599 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1619.149672][T19599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1619.159749][T19599] Call Trace: [ 1619.163046][T19599] [ 1619.165993][T19599] dump_stack_lvl+0xcd/0x134 [ 1619.170633][T19599] should_fail.cold+0x5/0xa [ 1619.175180][T19599] _copy_from_user+0x2a/0x170 [ 1619.179983][T19599] input_event_from_user+0x131/0x3a0 [ 1619.185300][T19599] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1619.191145][T19599] evdev_write+0x356/0x760 [ 1619.195599][T19599] ? evdev_read+0xe30/0xe30 [ 1619.200143][T19599] ? apparmor_file_permission+0x264/0x4e0 [ 1619.206174][T19599] ? security_file_permission+0xab/0xd0 [ 1619.211758][T19599] vfs_write+0x2d7/0xdd0 [ 1619.216035][T19599] ? evdev_read+0xe30/0xe30 [ 1619.220581][T19599] ? kernel_write+0x630/0x630 [ 1619.225288][T19599] ? __fget_files+0x26a/0x440 [ 1619.230019][T19599] ? __fget_light+0xe5/0x270 [ 1619.234636][T19599] ksys_write+0x1e8/0x250 [ 1619.239005][T19599] ? __ia32_sys_read+0xb0/0xb0 [ 1619.243811][T19599] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1619.249742][T19599] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1619.255678][T19599] do_syscall_64+0x35/0xb0 [ 1619.260142][T19599] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1619.266073][T19599] RIP: 0033:0x7fb3c24c45a9 [ 1619.268954][ T4134] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1619.270492][T19599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1619.270522][T19599] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1619.270552][T19599] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1619.270573][T19599] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1619.322178][T19599] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1619.330189][T19599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1619.338185][T19599] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1619.346187][T19599] [ 1619.353702][ T72] usb 6-1: Service connection timeout for: 256 [ 1619.360155][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1619.369110][ T72] ath9k_htc: Failed to initialize the device 09:30:31 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xaf8) 09:30:31 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xac8) [ 1619.375402][ T718] usb 6-1: ath9k_htc: USB layer deinitialized 09:30:31 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 73) [ 1619.445717][T19607] FAULT_INJECTION: forcing a failure. [ 1619.445717][T19607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1619.459030][T19607] CPU: 1 PID: 19607 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1619.469129][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1619.479208][T19607] Call Trace: [ 1619.482500][T19607] [ 1619.485448][T19607] dump_stack_lvl+0xcd/0x134 [ 1619.490073][T19607] should_fail.cold+0x5/0xa [ 1619.494621][T19607] _copy_from_user+0x2a/0x170 [ 1619.499351][T19607] input_event_from_user+0x131/0x3a0 [ 1619.504670][T19607] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1619.510511][T19607] evdev_write+0x356/0x760 [ 1619.514965][T19607] ? evdev_read+0xe30/0xe30 [ 1619.519591][T19607] ? apparmor_file_permission+0x264/0x4e0 [ 1619.525361][T19607] ? security_file_permission+0xab/0xd0 [ 1619.530948][T19607] vfs_write+0x2d7/0xdd0 [ 1619.535222][T19607] ? evdev_read+0xe30/0xe30 [ 1619.539761][T19607] ? kernel_write+0x630/0x630 [ 1619.544465][T19607] ? __fget_files+0x26a/0x440 [ 1619.549209][T19607] ? __fget_light+0xe5/0x270 [ 1619.553824][T19607] ksys_write+0x1e8/0x250 [ 1619.558199][T19607] ? __ia32_sys_read+0xb0/0xb0 [ 1619.562995][T19607] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1619.568928][T19607] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1619.574875][T19607] do_syscall_64+0x35/0xb0 [ 1619.579337][T19607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1619.585265][T19607] RIP: 0033:0x7fb3c24c45a9 [ 1619.589701][T19607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1619.609344][T19607] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1619.617873][T19607] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1619.625872][T19607] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1619.629075][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.633856][T19607] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1619.633878][T19607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1619.633897][T19607] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1619.633921][T19607] [ 1619.671921][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.681903][ T4134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1619.694752][ T4134] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1619.703837][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.728354][ T4134] usb 2-1: config 0 descriptor?? [ 1619.788995][ T718] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1620.220809][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.228255][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.235818][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.243271][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.250711][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.258130][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.265564][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.272998][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.280462][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.287863][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.295310][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.302830][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.310278][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.317687][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.325126][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.332565][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.340017][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.347422][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.354868][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.362308][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.369759][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.377184][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.384654][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.392119][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.399582][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.406996][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.414454][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.421893][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.429379][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.436879][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.444342][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.451788][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.459271][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.466675][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.474204][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.481652][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.489106][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.490560][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.496490][ T4134] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 1620.513829][ T4134] plantronics 0003:047F:FFFF.00C1: No inputs registered, leaving [ 1620.515154][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.530637][ T4134] plantronics 0003:047F:FFFF.00C1: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1620.533989][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.571957][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.589011][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1620.597155][ T4035] usb 2-1: USB disconnect, device number 38 [ 1620.598067][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.598098][ T718] usb 6-1: Product: syz [ 1620.616307][ T718] usb 6-1: Manufacturer: syz [ 1620.620979][ T718] usb 6-1: SerialNumber: syz [ 1620.669721][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1621.239044][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1621.645563][ T4134] usb 6-1: USB disconnect, device number 24 09:30:34 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x48}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:34 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x18}}}}}}]}}, 0x0) 09:30:34 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xae0) 09:30:34 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb10) 09:30:34 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 74) 09:30:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) (async) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) [ 1622.178676][T19622] FAULT_INJECTION: forcing a failure. [ 1622.178676][T19622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.191812][T19622] CPU: 0 PID: 19622 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1622.201913][T19622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1622.212004][T19622] Call Trace: [ 1622.215300][T19622] [ 1622.218265][T19622] dump_stack_lvl+0xcd/0x134 [ 1622.222905][T19622] should_fail.cold+0x5/0xa [ 1622.227456][T19622] _copy_from_user+0x2a/0x170 [ 1622.232178][T19622] input_event_from_user+0x131/0x3a0 [ 1622.237502][T19622] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1622.243348][T19622] evdev_write+0x356/0x760 [ 1622.247801][T19622] ? evdev_read+0xe30/0xe30 [ 1622.252342][T19622] ? apparmor_file_permission+0x264/0x4e0 [ 1622.258103][T19622] ? security_file_permission+0xab/0xd0 [ 1622.263684][T19622] vfs_write+0x2d7/0xdd0 [ 1622.267953][T19622] ? evdev_read+0xe30/0xe30 [ 1622.272489][T19622] ? kernel_write+0x630/0x630 [ 1622.277197][T19622] ? __fget_files+0x26a/0x440 [ 1622.281919][T19622] ? __fget_light+0xe5/0x270 [ 1622.286543][T19622] ksys_write+0x1e8/0x250 [ 1622.290909][T19622] ? __ia32_sys_read+0xb0/0xb0 [ 1622.295704][T19622] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1622.301637][T19622] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1622.307572][T19622] do_syscall_64+0x35/0xb0 [ 1622.312039][T19622] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1622.317969][T19622] RIP: 0033:0x7fb3c24c45a9 [ 1622.322410][T19622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1622.342225][T19622] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1622.350672][T19622] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1622.358670][T19622] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1622.366667][T19622] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:34 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb28) 09:30:34 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xaf8) [ 1622.374664][T19622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.382662][T19622] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1622.390660][T19622] 09:30:34 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 75) 09:30:34 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb40) [ 1622.478169][T19635] FAULT_INJECTION: forcing a failure. [ 1622.478169][T19635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.491579][T19635] CPU: 1 PID: 19635 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1622.501678][T19635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1622.509015][ T718] usb 6-1: Service connection timeout for: 256 [ 1622.511739][T19635] Call Trace: [ 1622.511750][T19635] [ 1622.511760][T19635] dump_stack_lvl+0xcd/0x134 [ 1622.517917][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1622.521185][T19635] should_fail.cold+0x5/0xa [ 1622.521233][T19635] _copy_from_user+0x2a/0x170 [ 1622.538250][ T718] ath9k_htc: Failed to initialize the device [ 1622.541017][T19635] input_event_from_user+0x131/0x3a0 [ 1622.541071][T19635] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1622.541104][T19635] evdev_write+0x356/0x760 [ 1622.541137][T19635] ? evdev_read+0xe30/0xe30 [ 1622.550572][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1622.551749][T19635] ? apparmor_file_permission+0x264/0x4e0 [ 1622.551795][T19635] ? security_file_permission+0xab/0xd0 [ 1622.589201][T19635] vfs_write+0x2d7/0xdd0 [ 1622.593477][T19635] ? evdev_read+0xe30/0xe30 [ 1622.598019][T19635] ? kernel_write+0x630/0x630 [ 1622.602740][T19635] ? __fget_files+0x26a/0x440 [ 1622.607474][T19635] ? __fget_light+0xe5/0x270 [ 1622.612099][T19635] ksys_write+0x1e8/0x250 [ 1622.616483][T19635] ? __ia32_sys_read+0xb0/0xb0 [ 1622.621361][T19635] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1622.627290][T19635] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1622.633220][T19635] do_syscall_64+0x35/0xb0 [ 1622.637681][T19635] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1622.643609][T19635] RIP: 0033:0x7fb3c24c45a9 [ 1622.648050][T19635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1622.667691][T19635] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 09:30:34 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb10) 09:30:34 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x2}}}}]}}, 0x0) [ 1622.676161][T19635] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1622.684159][T19635] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1622.692154][T19635] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.700155][T19635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.708156][T19635] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1622.716157][T19635] [ 1622.719967][ T4035] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1622.969048][ T4134] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1623.159251][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.170212][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.180022][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1623.192889][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1623.201980][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.220378][ T4035] usb 2-1: config 0 descriptor?? [ 1623.489007][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1623.498143][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.506242][ T4134] usb 6-1: Product: syz [ 1623.510593][ T4134] usb 6-1: Manufacturer: syz [ 1623.515208][ T4134] usb 6-1: SerialNumber: syz [ 1623.559866][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1623.690788][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.698239][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.705927][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.713378][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.720824][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.728234][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.735677][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.743112][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.750545][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.757957][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.765383][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.772815][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.780267][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.787679][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.795119][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.802553][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.810002][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.817410][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.824849][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.832296][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.839761][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.847169][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.854627][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.862059][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.869514][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.876927][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.884473][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.891912][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.899367][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.906775][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.914229][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.921665][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.929120][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.936530][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.943991][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.951436][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.959075][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.966487][ T4035] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 1623.970498][T19626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.975747][ T4035] plantronics 0003:047F:FFFF.00C2: No inputs registered, leaving [ 1623.991077][T19626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.000067][ T4035] plantronics 0003:047F:FFFF.00C2: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1624.014269][T19626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.024666][T19626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.039364][ T4035] usb 2-1: USB disconnect, device number 39 [ 1624.199048][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1624.605751][ T4035] usb 6-1: USB disconnect, device number 25 09:30:37 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x4c}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:37 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb58) 09:30:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb28) 09:30:37 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 76) 09:30:37 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x3}}}}]}}, 0x0) 09:30:37 executing program 1: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000200)=""/4096) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/61) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1625.153050][T19650] FAULT_INJECTION: forcing a failure. [ 1625.153050][T19650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.166284][T19650] CPU: 0 PID: 19650 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1625.176427][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1625.186509][T19650] Call Trace: [ 1625.189812][T19650] [ 1625.192761][T19650] dump_stack_lvl+0xcd/0x134 [ 1625.197389][T19650] should_fail.cold+0x5/0xa [ 1625.201942][T19650] _copy_from_user+0x2a/0x170 [ 1625.206664][T19650] input_event_from_user+0x131/0x3a0 [ 1625.211988][T19650] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1625.217829][T19650] evdev_write+0x356/0x760 [ 1625.222374][T19650] ? evdev_read+0xe30/0xe30 [ 1625.226917][T19650] ? apparmor_file_permission+0x264/0x4e0 [ 1625.232678][T19650] ? security_file_permission+0xab/0xd0 [ 1625.238264][T19650] vfs_write+0x2d7/0xdd0 [ 1625.242540][T19650] ? evdev_read+0xe30/0xe30 [ 1625.247090][T19650] ? kernel_write+0x630/0x630 [ 1625.251806][T19650] ? __fget_files+0x26a/0x440 [ 1625.256538][T19650] ? __fget_light+0xe5/0x270 [ 1625.261161][T19650] ksys_write+0x1e8/0x250 [ 1625.265526][T19650] ? __ia32_sys_read+0xb0/0xb0 [ 1625.270319][T19650] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1625.276247][T19650] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1625.282175][T19650] do_syscall_64+0x35/0xb0 [ 1625.286636][T19650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1625.292562][T19650] RIP: 0033:0x7fb3c24c45a9 09:30:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb40) [ 1625.297007][T19650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1625.316662][T19650] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1625.325110][T19650] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1625.333117][T19650] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1625.341124][T19650] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:37 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb70) 09:30:37 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 77) 09:30:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb58) [ 1625.349125][T19650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1625.357126][T19650] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1625.365133][T19650] 09:30:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb70) [ 1625.417962][ T72] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1625.469058][ T4134] usb 6-1: Service connection timeout for: 256 [ 1625.475318][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1625.489336][T19668] FAULT_INJECTION: forcing a failure. [ 1625.489336][T19668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.502486][T19668] CPU: 0 PID: 19668 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1625.512585][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1625.522757][T19668] Call Trace: [ 1625.526054][T19668] [ 1625.529000][T19668] dump_stack_lvl+0xcd/0x134 [ 1625.533626][T19668] should_fail.cold+0x5/0xa [ 1625.538177][T19668] _copy_from_user+0x2a/0x170 [ 1625.542904][T19668] input_event_from_user+0x131/0x3a0 [ 1625.548225][T19668] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1625.554073][T19668] evdev_write+0x356/0x760 [ 1625.558535][T19668] ? evdev_read+0xe30/0xe30 [ 1625.563077][T19668] ? apparmor_file_permission+0x264/0x4e0 [ 1625.568846][T19668] ? security_file_permission+0xab/0xd0 [ 1625.574430][T19668] vfs_write+0x2d7/0xdd0 [ 1625.578706][T19668] ? evdev_read+0xe30/0xe30 [ 1625.583252][T19668] ? kernel_write+0x630/0x630 [ 1625.587960][T19668] ? __fget_files+0x26a/0x440 [ 1625.592684][T19668] ? __fget_light+0xe5/0x270 [ 1625.597304][T19668] ksys_write+0x1e8/0x250 [ 1625.601666][T19668] ? __ia32_sys_read+0xb0/0xb0 [ 1625.606456][T19668] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1625.612383][T19668] ? syscall_enter_from_user_mode+0x22/0xb0 09:30:37 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb88) [ 1625.618314][T19668] do_syscall_64+0x35/0xb0 [ 1625.622774][T19668] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1625.628706][T19668] RIP: 0033:0x7fb3c24c45a9 [ 1625.633146][T19668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1625.652789][T19668] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1625.661242][T19668] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1625.669239][T19668] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1625.677237][T19668] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1625.685233][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1625.693239][T19668] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1625.701242][T19668] [ 1625.705282][ T4134] ath9k_htc: Failed to initialize the device [ 1625.719597][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1625.789114][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.800156][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.809973][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1625.822822][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1625.832099][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.850029][ T72] usb 2-1: config 0 descriptor?? [ 1626.138942][ T4035] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1626.330805][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.338261][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.345726][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.353177][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.360625][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.368035][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.375497][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.382978][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.390441][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.398040][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.405606][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.413096][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.420569][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.427977][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.435493][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.442951][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.450397][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.457801][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.465247][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.472688][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.480129][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.487625][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.495069][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.502543][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.510003][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.517410][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.524870][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.532333][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.539774][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.547189][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.554651][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.562109][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.569569][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.577016][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.584484][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.591932][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.599395][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.606811][ T72] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1626.615156][ T72] plantronics 0003:047F:FFFF.00C3: No inputs registered, leaving [ 1626.629328][ T72] plantronics 0003:047F:FFFF.00C3: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1626.662450][ T72] usb 2-1: USB disconnect, device number 40 [ 1626.939036][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1626.948141][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.956241][ T4035] usb 6-1: Product: syz [ 1626.960456][ T4035] usb 6-1: Manufacturer: syz [ 1626.965073][ T4035] usb 6-1: SerialNumber: syz [ 1627.019896][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1627.589073][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1627.994953][ T4134] usb 6-1: USB disconnect, device number 26 09:30:40 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x68}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:40 executing program 1: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000200)=""/4096) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/61) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:30:40 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb88) 09:30:40 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 78) 09:30:40 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xba0) 09:30:40 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x4}}}}]}}, 0x0) [ 1628.553337][T19681] FAULT_INJECTION: forcing a failure. [ 1628.553337][T19681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.566625][T19681] CPU: 0 PID: 19681 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1628.576724][T19681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1628.586802][T19681] Call Trace: [ 1628.590109][T19681] [ 1628.593063][T19681] dump_stack_lvl+0xcd/0x134 [ 1628.597688][T19681] should_fail.cold+0x5/0xa [ 1628.602238][T19681] _copy_from_user+0x2a/0x170 [ 1628.606968][T19681] input_event_from_user+0x131/0x3a0 [ 1628.612284][T19681] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1628.618128][T19681] evdev_write+0x356/0x760 [ 1628.622581][T19681] ? evdev_read+0xe30/0xe30 [ 1628.627118][T19681] ? apparmor_file_permission+0x264/0x4e0 [ 1628.632882][T19681] ? security_file_permission+0xab/0xd0 [ 1628.638468][T19681] vfs_write+0x2d7/0xdd0 [ 1628.642749][T19681] ? evdev_read+0xe30/0xe30 [ 1628.647288][T19681] ? kernel_write+0x630/0x630 09:30:40 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbb8) [ 1628.651997][T19681] ? __fget_files+0x26a/0x440 [ 1628.656809][T19681] ? __fget_light+0xe5/0x270 [ 1628.661425][T19681] ksys_write+0x1e8/0x250 [ 1628.665785][T19681] ? __ia32_sys_read+0xb0/0xb0 [ 1628.670579][T19681] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1628.676507][T19681] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1628.682435][T19681] do_syscall_64+0x35/0xb0 [ 1628.686910][T19681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1628.692840][T19681] RIP: 0033:0x7fb3c24c45a9 [ 1628.697276][T19681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1628.716914][T19681] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1628.725366][T19681] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1628.733452][T19681] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1628.741449][T19681] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:40 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xba0) 09:30:40 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbd0) [ 1628.749444][T19681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1628.757448][T19681] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1628.765446][T19681] 09:30:40 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbb8) 09:30:40 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 79) [ 1628.823295][ T72] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1628.832390][ T4035] usb 6-1: Service connection timeout for: 256 [ 1628.838654][ T4035] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1628.863365][ T4035] ath9k_htc: Failed to initialize the device [ 1628.871286][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1628.880834][T19696] FAULT_INJECTION: forcing a failure. [ 1628.880834][T19696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.894001][T19696] CPU: 0 PID: 19696 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1628.904097][T19696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1628.914349][T19696] Call Trace: [ 1628.917641][T19696] 09:30:40 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbe8) [ 1628.920589][T19696] dump_stack_lvl+0xcd/0x134 [ 1628.925212][T19696] should_fail.cold+0x5/0xa [ 1628.929762][T19696] _copy_from_user+0x2a/0x170 [ 1628.934485][T19696] input_event_from_user+0x131/0x3a0 [ 1628.939805][T19696] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1628.945647][T19696] evdev_write+0x356/0x760 [ 1628.950099][T19696] ? evdev_read+0xe30/0xe30 [ 1628.954641][T19696] ? apparmor_file_permission+0x264/0x4e0 [ 1628.960409][T19696] ? security_file_permission+0xab/0xd0 [ 1628.965995][T19696] vfs_write+0x2d7/0xdd0 [ 1628.970267][T19696] ? evdev_read+0xe30/0xe30 [ 1628.974806][T19696] ? kernel_write+0x630/0x630 [ 1628.979507][T19696] ? __fget_files+0x26a/0x440 [ 1628.984236][T19696] ? __fget_light+0xe5/0x270 [ 1628.988866][T19696] ksys_write+0x1e8/0x250 [ 1628.993229][T19696] ? __ia32_sys_read+0xb0/0xb0 [ 1628.998067][T19696] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1629.003996][T19696] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1629.009934][T19696] do_syscall_64+0x35/0xb0 [ 1629.014402][T19696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1629.020331][T19696] RIP: 0033:0x7fb3c24c45a9 [ 1629.024765][T19696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1629.044505][T19696] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1629.052955][T19696] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1629.060956][T19696] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1629.068953][T19696] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1629.076949][T19696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.084945][T19696] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1629.092948][T19696] [ 1629.208998][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.220001][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.229915][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1629.242762][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1629.251882][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.269946][ T72] usb 2-1: config 0 descriptor?? [ 1629.488974][ T4134] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1629.750762][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.758216][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.765688][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.773168][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.780646][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.788057][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.795591][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.803037][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.810492][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.817989][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.825439][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.832915][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.840356][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.847775][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.855236][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.862697][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.870149][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.877562][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.885003][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.892461][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.899901][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.907308][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.914764][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.922221][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.929673][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.937080][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.944529][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.952003][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.959445][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.966850][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.974300][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.981763][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.989200][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1629.996610][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1630.004067][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1630.011526][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1630.018987][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1630.026408][ T72] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 1630.034393][ T72] plantronics 0003:047F:FFFF.00C4: No inputs registered, leaving [ 1630.050630][ T72] plantronics 0003:047F:FFFF.00C4: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1630.065208][ T72] usb 2-1: USB disconnect, device number 41 [ 1630.129038][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1630.138175][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.146371][ T4134] usb 6-1: Product: syz [ 1630.150578][ T4134] usb 6-1: Manufacturer: syz [ 1630.155193][ T4134] usb 6-1: SerialNumber: syz [ 1630.209897][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1630.789065][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1631.195751][ T72] usb 6-1: USB disconnect, device number 27 09:30:43 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x6c}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:43 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbd0) 09:30:43 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc00) 09:30:43 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x5}}}}]}}, 0x0) 09:30:43 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 80) 09:30:43 executing program 1: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000200)=""/4096) (async) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/61) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1631.745297][T19709] FAULT_INJECTION: forcing a failure. [ 1631.745297][T19709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1631.758477][T19709] CPU: 1 PID: 19709 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1631.768605][T19709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1631.778688][T19709] Call Trace: [ 1631.781994][T19709] [ 1631.784948][T19709] dump_stack_lvl+0xcd/0x134 [ 1631.789578][T19709] should_fail.cold+0x5/0xa [ 1631.794128][T19709] _copy_from_user+0x2a/0x170 [ 1631.798855][T19709] input_event_from_user+0x131/0x3a0 [ 1631.804262][T19709] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1631.810106][T19709] evdev_write+0x356/0x760 [ 1631.814573][T19709] ? evdev_read+0xe30/0xe30 [ 1631.819121][T19709] ? apparmor_file_permission+0x264/0x4e0 [ 1631.824896][T19709] ? security_file_permission+0xab/0xd0 [ 1631.830481][T19709] vfs_write+0x2d7/0xdd0 [ 1631.834753][T19709] ? evdev_read+0xe30/0xe30 [ 1631.839292][T19709] ? kernel_write+0x630/0x630 [ 1631.844000][T19709] ? __fget_files+0x26a/0x440 [ 1631.848735][T19709] ? __fget_light+0xe5/0x270 [ 1631.853351][T19709] ksys_write+0x1e8/0x250 [ 1631.857716][T19709] ? __ia32_sys_read+0xb0/0xb0 [ 1631.862595][T19709] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1631.868524][T19709] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1631.874454][T19709] do_syscall_64+0x35/0xb0 [ 1631.878918][T19709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1631.884851][T19709] RIP: 0033:0x7fb3c24c45a9 [ 1631.889290][T19709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1631.908926][T19709] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1631.917389][T19709] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1631.925382][T19709] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1631.933380][T19709] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:43 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbe8) 09:30:43 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc18) [ 1631.941460][T19709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1631.949455][T19709] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1631.957455][T19709] 09:30:44 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 81) 09:30:44 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc00) 09:30:44 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc30) [ 1632.029922][ T4134] usb 6-1: Service connection timeout for: 256 [ 1632.036184][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1632.054945][ T4134] ath9k_htc: Failed to initialize the device [ 1632.066035][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1632.066735][T19721] FAULT_INJECTION: forcing a failure. 09:30:44 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc18) [ 1632.066735][T19721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1632.085358][T19721] CPU: 0 PID: 19721 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1632.095458][T19721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1632.105547][T19721] Call Trace: [ 1632.108854][T19721] [ 1632.111810][T19721] dump_stack_lvl+0xcd/0x134 [ 1632.116436][T19721] should_fail.cold+0x5/0xa [ 1632.120988][T19721] _copy_from_user+0x2a/0x170 [ 1632.125710][T19721] input_event_from_user+0x131/0x3a0 [ 1632.131028][T19721] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1632.136867][T19721] evdev_write+0x356/0x760 [ 1632.139012][ T4035] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1632.141312][T19721] ? evdev_read+0xe30/0xe30 [ 1632.141352][T19721] ? apparmor_file_permission+0x264/0x4e0 [ 1632.159149][T19721] ? security_file_permission+0xab/0xd0 [ 1632.164734][T19721] vfs_write+0x2d7/0xdd0 [ 1632.169008][T19721] ? evdev_read+0xe30/0xe30 [ 1632.173549][T19721] ? kernel_write+0x630/0x630 [ 1632.178257][T19721] ? __fget_files+0x26a/0x440 [ 1632.182979][T19721] ? __fget_light+0xe5/0x270 [ 1632.187598][T19721] ksys_write+0x1e8/0x250 [ 1632.191958][T19721] ? __ia32_sys_read+0xb0/0xb0 [ 1632.196753][T19721] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1632.202697][T19721] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1632.208639][T19721] do_syscall_64+0x35/0xb0 [ 1632.213104][T19721] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1632.219031][T19721] RIP: 0033:0x7fb3c24c45a9 [ 1632.223471][T19721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1632.243111][T19721] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1632.251563][T19721] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1632.259563][T19721] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1632.267559][T19721] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1632.275557][T19721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1632.283643][T19721] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1632.291650][T19721] [ 1632.448938][ T72] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1632.649026][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.660075][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.669881][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1632.682820][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1632.692052][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.702575][ T4035] usb 2-1: config 0 descriptor?? [ 1633.000060][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.007466][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.014875][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.022296][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.029744][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.037152][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.044595][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.052042][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.059496][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.066902][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.074362][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.081813][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.089269][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.096680][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.104142][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.111581][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.119034][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.126442][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.133904][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.141354][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.148773][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.156246][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.163690][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.171167][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.178591][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.186063][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.193513][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.200980][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.208389][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.215856][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.223298][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.230767][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.238199][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.245679][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.253146][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.260623][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.268041][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.275521][ T4035] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0 [ 1633.286159][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1633.295299][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.303344][ T72] usb 6-1: Product: syz [ 1633.307523][ T72] usb 6-1: Manufacturer: syz [ 1633.312197][ T72] usb 6-1: SerialNumber: syz [ 1633.319311][ T4035] plantronics 0003:047F:FFFF.00C5: No inputs registered, leaving [ 1633.329916][ T4035] plantronics 0003:047F:FFFF.00C5: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1633.344087][ T4035] usb 2-1: USB disconnect, device number 42 [ 1633.351188][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1633.929001][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1634.336487][ T4134] usb 6-1: USB disconnect, device number 28 09:30:46 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc30) 09:30:46 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc48) 09:30:46 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 82) 09:30:46 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x6}}}}]}}, 0x0) 09:30:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000180)={0x40, 0xb, 0x9b, {0x9b, 0xc, "657f2dd5b557025b31cfb92f8c8a24d4d466a7653fcb4349ff5511bdde441fdee4c5dfaedec286c100f75feea163a25a18ef8944d783e1e83c07884762db9a111f55f79aac6354e491b87b4d516acd229e4075165192ee811554d64dd513f42f84edcad09fe117f71bf8f970560ba0a9a68fd2997318fc7993432bb1f6587a79c85ca9824c9d088cfdbfb24df452191641f7f7a390134f717c"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f00000000c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x2, 0x2, 0x9, "59ea"}, @global=@item_4={0x3, 0x1, 0xbd740dd616366fe2, "c1ee1923"}, @local=@item_012={0x2, 0x2, 0x4, "76ae"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0xa, "ebbe3e36"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x8}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0xfa, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x1, 0x7d, "1c0ce769658c395aec4cbe6ca6c4df6168b80e47b8a09e3778531994ab295968f7517d19887c90be0acd2332dd3f3507202db5ee50bba3597f6286530e0a30dfde881331f5e3bdbf69a85f5e15bfb722ca54f1fa73754d9ace9ea7a4e1c08b4dafe5947ca6e3ca5c10bf465891613e9a5bbe1e78c4b65413c90d67f3c2"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:30:46 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x74}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) [ 1634.873750][T19734] FAULT_INJECTION: forcing a failure. [ 1634.873750][T19734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.886884][T19734] CPU: 0 PID: 19734 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1634.896979][T19734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1634.907061][T19734] Call Trace: [ 1634.910367][T19734] [ 1634.913319][T19734] dump_stack_lvl+0xcd/0x134 [ 1634.917954][T19734] should_fail.cold+0x5/0xa [ 1634.922501][T19734] _copy_from_user+0x2a/0x170 [ 1634.927222][T19734] input_event_from_user+0x131/0x3a0 [ 1634.932543][T19734] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1634.938383][T19734] evdev_write+0x356/0x760 [ 1634.942838][T19734] ? evdev_read+0xe30/0xe30 [ 1634.947382][T19734] ? apparmor_file_permission+0x264/0x4e0 [ 1634.953147][T19734] ? security_file_permission+0xab/0xd0 [ 1634.958735][T19734] vfs_write+0x2d7/0xdd0 [ 1634.963007][T19734] ? evdev_read+0xe30/0xe30 [ 1634.967554][T19734] ? kernel_write+0x630/0x630 09:30:46 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc48) [ 1634.972263][T19734] ? __fget_files+0x26a/0x440 [ 1634.976987][T19734] ? __fget_light+0xe5/0x270 [ 1634.981601][T19734] ksys_write+0x1e8/0x250 [ 1634.985956][T19734] ? __ia32_sys_read+0xb0/0xb0 [ 1634.990750][T19734] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1634.996680][T19734] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1635.002616][T19734] do_syscall_64+0x35/0xb0 [ 1635.007078][T19734] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1635.013009][T19734] RIP: 0033:0x7fb3c24c45a9 [ 1635.017448][T19734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1635.037084][T19734] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1635.045533][T19734] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1635.053535][T19734] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1635.061532][T19734] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:47 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc60) 09:30:47 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc60) [ 1635.069531][T19734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.077580][T19734] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1635.085585][T19734] 09:30:47 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 83) [ 1635.177475][T19747] FAULT_INJECTION: forcing a failure. [ 1635.177475][T19747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1635.190630][T19747] CPU: 1 PID: 19747 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1635.200729][T19747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1635.210804][T19747] Call Trace: [ 1635.214114][T19747] [ 1635.217067][T19747] dump_stack_lvl+0xcd/0x134 [ 1635.221699][T19747] should_fail.cold+0x5/0xa [ 1635.226251][T19747] _copy_from_user+0x2a/0x170 [ 1635.230975][T19747] input_event_from_user+0x131/0x3a0 [ 1635.236294][T19747] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1635.239122][ T718] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1635.242115][T19747] evdev_write+0x356/0x760 [ 1635.254127][T19747] ? evdev_read+0xe30/0xe30 [ 1635.258669][T19747] ? apparmor_file_permission+0x264/0x4e0 [ 1635.264439][T19747] ? security_file_permission+0xab/0xd0 [ 1635.270028][T19747] vfs_write+0x2d7/0xdd0 [ 1635.274303][T19747] ? evdev_read+0xe30/0xe30 [ 1635.278840][T19747] ? kernel_write+0x630/0x630 [ 1635.283545][T19747] ? __fget_files+0x26a/0x440 [ 1635.288273][T19747] ? __fget_light+0xe5/0x270 [ 1635.292891][T19747] ksys_write+0x1e8/0x250 [ 1635.297249][T19747] ? __ia32_sys_read+0xb0/0xb0 [ 1635.302044][T19747] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1635.307974][T19747] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1635.313905][T19747] do_syscall_64+0x35/0xb0 [ 1635.318367][T19747] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1635.324293][T19747] RIP: 0033:0x7fb3c24c45a9 [ 1635.328814][T19747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1635.348457][T19747] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1635.356900][T19747] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1635.364896][T19747] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 09:30:47 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc78) [ 1635.372893][T19747] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.380887][T19747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.388881][T19747] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1635.396879][T19747] [ 1635.401034][ T72] usb 6-1: Service connection timeout for: 256 [ 1635.407233][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 09:30:47 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc78) 09:30:47 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 84) 09:30:47 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc90) [ 1635.425163][ T72] ath9k_htc: Failed to initialize the device [ 1635.433242][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized 09:30:47 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc90) [ 1635.502134][T19754] FAULT_INJECTION: forcing a failure. [ 1635.502134][T19754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1635.515397][T19754] CPU: 0 PID: 19754 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1635.525491][T19754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1635.535568][T19754] Call Trace: [ 1635.538864][T19754] [ 1635.541811][T19754] dump_stack_lvl+0xcd/0x134 [ 1635.546434][T19754] should_fail.cold+0x5/0xa 09:30:47 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x7}}}}]}}, 0x0) [ 1635.550984][T19754] _copy_from_user+0x2a/0x170 [ 1635.555711][T19754] input_event_from_user+0x131/0x3a0 [ 1635.561026][T19754] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1635.566874][T19754] evdev_write+0x356/0x760 [ 1635.571331][T19754] ? evdev_read+0xe30/0xe30 [ 1635.575876][T19754] ? apparmor_file_permission+0x264/0x4e0 [ 1635.581637][T19754] ? security_file_permission+0xab/0xd0 [ 1635.587221][T19754] vfs_write+0x2d7/0xdd0 [ 1635.591495][T19754] ? evdev_read+0xe30/0xe30 [ 1635.596033][T19754] ? kernel_write+0x630/0x630 [ 1635.600748][T19754] ? __fget_files+0x26a/0x440 [ 1635.605470][T19754] ? __fget_light+0xe5/0x270 [ 1635.610089][T19754] ksys_write+0x1e8/0x250 [ 1635.614446][T19754] ? __ia32_sys_read+0xb0/0xb0 [ 1635.619244][T19754] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1635.625169][T19754] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1635.631100][T19754] do_syscall_64+0x35/0xb0 [ 1635.635565][T19754] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1635.641492][T19754] RIP: 0033:0x7fb3c24c45a9 [ 1635.645927][T19754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1635.665563][T19754] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1635.674010][T19754] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1635.682013][T19754] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1635.690013][T19754] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.698010][T19754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.706006][T19754] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1635.714007][T19754] [ 1635.799029][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.810153][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.819979][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1635.832843][ T718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1635.841956][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.852224][ T718] usb 2-1: config 0 descriptor?? [ 1635.998982][ T4134] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1636.519195][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1636.528304][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.536385][ T4134] usb 6-1: Product: syz [ 1636.540598][ T4134] usb 6-1: Manufacturer: syz [ 1636.545233][ T4134] usb 6-1: SerialNumber: syz [ 1636.599856][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1636.809104][ T718] usbhid 2-1:0.0: can't add hid device: -71 [ 1636.815135][ T718] usbhid: probe of 2-1:0.0 failed with error -71 [ 1636.825248][ T718] usb 2-1: USB disconnect, device number 43 [ 1637.179043][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 09:30:49 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000180)={0x40, 0xb, 0x9b, {0x9b, 0xc, "657f2dd5b557025b31cfb92f8c8a24d4d466a7653fcb4349ff5511bdde441fdee4c5dfaedec286c100f75feea163a25a18ef8944d783e1e83c07884762db9a111f55f79aac6354e491b87b4d516acd229e4075165192ee811554d64dd513f42f84edcad09fe117f71bf8f970560ba0a9a68fd2997318fc7993432bb1f6587a79c85ca9824c9d088cfdbfb24df452191641f7f7a390134f717c"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f00000000c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x2, 0x2, 0x9, "59ea"}, @global=@item_4={0x3, 0x1, 0xbd740dd616366fe2, "c1ee1923"}, @local=@item_012={0x2, 0x2, 0x4, "76ae"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0xa, "ebbe3e36"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x8}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0xfa, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x1, 0x7d, "1c0ce769658c395aec4cbe6ca6c4df6168b80e47b8a09e3778531994ab295968f7517d19887c90be0acd2332dd3f3507202db5ee50bba3597f6286530e0a30dfde881331f5e3bdbf69a85f5e15bfb722ca54f1fa73754d9ace9ea7a4e1c08b4dafe5947ca6e3ca5c10bf465891613e9a5bbe1e78c4b65413c90d67f3c2"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x7}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1637.585246][ T718] usb 6-1: USB disconnect, device number 29 [ 1637.599142][ T72] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1637.969022][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.980050][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.989874][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1638.002720][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1638.011838][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.029895][ T72] usb 2-1: config 0 descriptor?? 09:30:50 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x7a}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:50 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xca8) 09:30:50 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xca8) 09:30:50 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 85) 09:30:50 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x8}}}}]}}, 0x0) [ 1638.119955][T19766] FAULT_INJECTION: forcing a failure. [ 1638.119955][T19766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1638.133254][T19766] CPU: 1 PID: 19766 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1638.143356][T19766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1638.153440][T19766] Call Trace: [ 1638.156754][T19766] [ 1638.159710][T19766] dump_stack_lvl+0xcd/0x134 [ 1638.164346][T19766] should_fail.cold+0x5/0xa 09:30:50 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcc0) [ 1638.168908][T19766] _copy_from_user+0x2a/0x170 [ 1638.173637][T19766] input_event_from_user+0x131/0x3a0 [ 1638.178964][T19766] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1638.184811][T19766] evdev_write+0x356/0x760 [ 1638.189267][T19766] ? evdev_read+0xe30/0xe30 [ 1638.193807][T19766] ? apparmor_file_permission+0x264/0x4e0 [ 1638.199572][T19766] ? security_file_permission+0xab/0xd0 [ 1638.205161][T19766] vfs_write+0x2d7/0xdd0 [ 1638.209435][T19766] ? evdev_read+0xe30/0xe30 [ 1638.213976][T19766] ? kernel_write+0x630/0x630 [ 1638.218684][T19766] ? __fget_files+0x26a/0x440 [ 1638.223464][T19766] ? __fget_light+0xe5/0x270 [ 1638.228085][T19766] ksys_write+0x1e8/0x250 [ 1638.232444][T19766] ? __ia32_sys_read+0xb0/0xb0 [ 1638.237244][T19766] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1638.243174][T19766] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1638.249105][T19766] do_syscall_64+0x35/0xb0 [ 1638.253569][T19766] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1638.259504][T19766] RIP: 0033:0x7fb3c24c45a9 [ 1638.263945][T19766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1638.283596][T19766] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1638.292042][T19766] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1638.300040][T19766] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1638.308040][T19766] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:50 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcc0) 09:30:50 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcd8) 09:30:50 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 86) [ 1638.316038][T19766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1638.324036][T19766] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1638.332036][T19766] 09:30:50 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcf0) 09:30:50 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcd8) [ 1638.423272][T19780] FAULT_INJECTION: forcing a failure. [ 1638.423272][T19780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1638.436655][T19780] CPU: 0 PID: 19780 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1638.446764][T19780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1638.456843][T19780] Call Trace: [ 1638.460141][T19780] [ 1638.463090][T19780] dump_stack_lvl+0xcd/0x134 [ 1638.467748][T19780] should_fail.cold+0x5/0xa [ 1638.472299][T19780] _copy_from_user+0x2a/0x170 [ 1638.477027][T19780] input_event_from_user+0x131/0x3a0 [ 1638.482348][T19780] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1638.488194][T19780] evdev_write+0x356/0x760 [ 1638.492646][T19780] ? evdev_read+0xe30/0xe30 [ 1638.497196][T19780] ? apparmor_file_permission+0x264/0x4e0 [ 1638.502956][T19780] ? security_file_permission+0xab/0xd0 [ 1638.508536][T19780] vfs_write+0x2d7/0xdd0 [ 1638.512809][T19780] ? evdev_read+0xe30/0xe30 [ 1638.517348][T19780] ? kernel_write+0x630/0x630 [ 1638.522056][T19780] ? __fget_files+0x26a/0x440 [ 1638.526795][T19780] ? __fget_light+0xe5/0x270 [ 1638.531417][T19780] ksys_write+0x1e8/0x250 [ 1638.535784][T19780] ? __ia32_sys_read+0xb0/0xb0 [ 1638.540582][T19780] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1638.546518][T19780] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1638.552450][T19780] do_syscall_64+0x35/0xb0 [ 1638.556909][T19780] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1638.562835][T19780] RIP: 0033:0x7fb3c24c45a9 [ 1638.567276][T19780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1638.586919][T19780] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1638.595373][T19780] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1638.603373][T19780] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1638.611373][T19780] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.619368][T19780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1638.627361][T19780] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1638.635360][T19780] [ 1638.638556][ T4134] usb 6-1: Service connection timeout for: 256 [ 1638.644785][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1638.655296][ T4134] ath9k_htc: Failed to initialize the device [ 1638.662832][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1638.949046][ T72] usbhid 2-1:0.0: can't add hid device: -71 [ 1638.955036][ T72] usbhid: probe of 2-1:0.0 failed with error -71 [ 1638.972499][ T72] usb 2-1: USB disconnect, device number 44 [ 1639.039020][ T718] usb 6-1: new high-speed USB device number 30 using dummy_hcd 09:30:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000180)={0x40, 0xb, 0x9b, {0x9b, 0xc, "657f2dd5b557025b31cfb92f8c8a24d4d466a7653fcb4349ff5511bdde441fdee4c5dfaedec286c100f75feea163a25a18ef8944d783e1e83c07884762db9a111f55f79aac6354e491b87b4d516acd229e4075165192ee811554d64dd513f42f84edcad09fe117f71bf8f970560ba0a9a68fd2997318fc7993432bb1f6587a79c85ca9824c9d088cfdbfb24df452191641f7f7a390134f717c"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f00000000c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x2, 0x2, 0x9, "59ea"}, @global=@item_4={0x3, 0x1, 0xbd740dd616366fe2, "c1ee1923"}, @local=@item_012={0x2, 0x2, 0x4, "76ae"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0xa, "ebbe3e36"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x8}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0xfa, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x1, 0x7d, "1c0ce769658c395aec4cbe6ca6c4df6168b80e47b8a09e3778531994ab295968f7517d19887c90be0acd2332dd3f3507202db5ee50bba3597f6286530e0a30dfde881331f5e3bdbf69a85f5e15bfb722ca54f1fa73754d9ace9ea7a4e1c08b4dafe5947ca6e3ca5c10bf465891613e9a5bbe1e78c4b65413c90d67f3c2"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x7}}) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1639.629126][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1639.638262][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.646333][ T718] usb 6-1: Product: syz [ 1639.650540][ T718] usb 6-1: Manufacturer: syz [ 1639.655153][ T718] usb 6-1: SerialNumber: syz [ 1639.698919][ T72] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1639.699921][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1640.069127][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.080110][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.089939][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1640.102788][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1640.111892][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.129985][ T72] usb 2-1: config 0 descriptor?? [ 1640.329033][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1640.659057][ T72] usbhid 2-1:0.0: can't add hid device: -32 [ 1640.665082][ T72] usbhid: probe of 2-1:0.0 failed with error -32 [ 1640.744157][ T4134] usb 6-1: USB disconnect, device number 30 09:30:53 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:53 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd08) 09:30:53 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcf0) 09:30:53 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 87) 09:30:53 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0xa}}}}]}}, 0x0) [ 1641.272523][T19794] FAULT_INJECTION: forcing a failure. [ 1641.272523][T19794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.285853][T19794] CPU: 0 PID: 19794 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1641.295956][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1641.306036][T19794] Call Trace: [ 1641.309335][T19794] [ 1641.312287][T19794] dump_stack_lvl+0xcd/0x134 [ 1641.316912][T19794] should_fail.cold+0x5/0xa [ 1641.321468][T19794] _copy_from_user+0x2a/0x170 [ 1641.326191][T19794] input_event_from_user+0x131/0x3a0 [ 1641.331513][T19794] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1641.337351][T19794] evdev_write+0x356/0x760 [ 1641.341812][T19794] ? evdev_read+0xe30/0xe30 [ 1641.346356][T19794] ? apparmor_file_permission+0x264/0x4e0 [ 1641.352474][T19794] ? security_file_permission+0xab/0xd0 [ 1641.358071][T19794] vfs_write+0x2d7/0xdd0 [ 1641.362348][T19794] ? evdev_read+0xe30/0xe30 [ 1641.366891][T19794] ? kernel_write+0x630/0x630 [ 1641.371597][T19794] ? __fget_files+0x26a/0x440 [ 1641.376326][T19794] ? __fget_light+0xe5/0x270 [ 1641.380948][T19794] ksys_write+0x1e8/0x250 [ 1641.385311][T19794] ? __ia32_sys_read+0xb0/0xb0 [ 1641.390107][T19794] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1641.396036][T19794] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1641.401967][T19794] do_syscall_64+0x35/0xb0 [ 1641.406431][T19794] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1641.412364][T19794] RIP: 0033:0x7fb3c24c45a9 [ 1641.416804][T19794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1641.436437][T19794] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1641.444887][T19794] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1641.452887][T19794] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1641.460885][T19794] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:53 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd20) 09:30:53 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd08) [ 1641.468880][T19794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1641.476876][T19794] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1641.484876][T19794] 09:30:53 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 88) 09:30:53 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd20) [ 1641.577877][T19807] FAULT_INJECTION: forcing a failure. [ 1641.577877][T19807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.591025][T19807] CPU: 0 PID: 19807 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1641.601126][T19807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1641.611210][T19807] Call Trace: [ 1641.614507][T19807] [ 1641.617474][T19807] dump_stack_lvl+0xcd/0x134 [ 1641.622104][T19807] should_fail.cold+0x5/0xa [ 1641.626661][T19807] _copy_from_user+0x2a/0x170 [ 1641.631387][T19807] input_event_from_user+0x131/0x3a0 [ 1641.636703][T19807] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1641.642547][T19807] evdev_write+0x356/0x760 [ 1641.647009][T19807] ? evdev_read+0xe30/0xe30 [ 1641.651552][T19807] ? apparmor_file_permission+0x264/0x4e0 [ 1641.657321][T19807] ? security_file_permission+0xab/0xd0 [ 1641.662908][T19807] vfs_write+0x2d7/0xdd0 [ 1641.667181][T19807] ? evdev_read+0xe30/0xe30 [ 1641.671721][T19807] ? kernel_write+0x630/0x630 [ 1641.676427][T19807] ? __fget_files+0x26a/0x440 [ 1641.681153][T19807] ? __fget_light+0xe5/0x270 [ 1641.685775][T19807] ksys_write+0x1e8/0x250 [ 1641.690134][T19807] ? __ia32_sys_read+0xb0/0xb0 [ 1641.694923][T19807] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1641.700852][T19807] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1641.706787][T19807] do_syscall_64+0x35/0xb0 [ 1641.711247][T19807] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1641.717173][T19807] RIP: 0033:0x7fb3c24c45a9 [ 1641.721610][T19807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1641.741250][T19807] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1641.749699][T19807] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1641.757703][T19807] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1641.765702][T19807] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:53 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0xb}}}}]}}, 0x0) 09:30:53 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd38) [ 1641.773701][T19807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1641.781703][T19807] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1641.789712][T19807] [ 1641.794258][ T718] usb 6-1: Service connection timeout for: 256 [ 1641.800644][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1641.819290][ T718] ath9k_htc: Failed to initialize the device [ 1641.825551][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1642.188920][ T4134] usb 6-1: new high-speed USB device number 31 using dummy_hcd 09:30:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100cc70df046d4f8b2b13fcbef778860410000000800000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x2, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4000}}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x400000, 0x222902) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x1, 0xffffffff, 0x81}) [ 1642.433254][ T9824] usb 2-1: USB disconnect, device number 45 [ 1642.709057][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1642.718154][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.726225][ T4134] usb 6-1: Product: syz [ 1642.730437][ T4134] usb 6-1: Manufacturer: syz [ 1642.735053][ T4134] usb 6-1: SerialNumber: syz [ 1642.789718][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1642.849051][ T9824] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1643.148995][ T9824] usb 2-1: device descriptor read/64, error 18 [ 1643.449133][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1643.549102][ T9824] usb 2-1: device descriptor read/64, error 18 [ 1643.829027][ T9824] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1643.866160][ T72] usb 6-1: USB disconnect, device number 31 [ 1644.109042][ T9824] usb 2-1: device descriptor read/64, error 18 09:30:56 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x2}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:56 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd38) 09:30:56 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd50) 09:30:56 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 89) 09:30:56 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0xc}}}}]}}, 0x0) 09:30:56 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd50) [ 1644.397211][T19822] FAULT_INJECTION: forcing a failure. [ 1644.397211][T19822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.410518][T19822] CPU: 1 PID: 19822 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1644.420618][T19822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1644.430704][T19822] Call Trace: [ 1644.434003][T19822] [ 1644.436953][T19822] dump_stack_lvl+0xcd/0x134 [ 1644.441584][T19822] should_fail.cold+0x5/0xa [ 1644.446144][T19822] _copy_from_user+0x2a/0x170 [ 1644.450867][T19822] input_event_from_user+0x131/0x3a0 [ 1644.456191][T19822] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1644.462032][T19822] evdev_write+0x356/0x760 [ 1644.466490][T19822] ? evdev_read+0xe30/0xe30 [ 1644.471031][T19822] ? apparmor_file_permission+0x264/0x4e0 [ 1644.476791][T19822] ? security_file_permission+0xab/0xd0 [ 1644.482380][T19822] vfs_write+0x2d7/0xdd0 [ 1644.486652][T19822] ? evdev_read+0xe30/0xe30 [ 1644.491190][T19822] ? kernel_write+0x630/0x630 [ 1644.495900][T19822] ? __fget_files+0x26a/0x440 [ 1644.500624][T19822] ? __fget_light+0xe5/0x270 [ 1644.505238][T19822] ksys_write+0x1e8/0x250 [ 1644.509594][T19822] ? __ia32_sys_read+0xb0/0xb0 [ 1644.514393][T19822] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1644.520320][T19822] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1644.526250][T19822] do_syscall_64+0x35/0xb0 [ 1644.530714][T19822] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1644.536641][T19822] RIP: 0033:0x7fb3c24c45a9 [ 1644.541078][T19822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1644.560715][T19822] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1644.569014][ T9824] usb 2-1: device descriptor read/64, error 18 [ 1644.569164][T19822] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1644.583313][T19822] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 09:30:56 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd68) [ 1644.591312][T19822] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1644.599311][T19822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1644.607303][T19822] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1644.615305][T19822] 09:30:56 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd68) 09:30:56 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 90) 09:30:56 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd80) 09:30:56 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd80) [ 1644.699791][ T9824] usb usb2-port1: attempt power cycle [ 1644.758985][ T4134] usb 6-1: Service connection timeout for: 256 [ 1644.765271][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1644.783562][ T4134] ath9k_htc: Failed to initialize the device [ 1644.790040][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1644.815924][T19840] FAULT_INJECTION: forcing a failure. [ 1644.815924][T19840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.829320][T19840] CPU: 1 PID: 19840 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1644.839423][T19840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1644.849504][T19840] Call Trace: [ 1644.852804][T19840] [ 1644.855753][T19840] dump_stack_lvl+0xcd/0x134 [ 1644.860380][T19840] should_fail.cold+0x5/0xa [ 1644.864930][T19840] _copy_from_user+0x2a/0x170 [ 1644.869654][T19840] input_event_from_user+0x131/0x3a0 [ 1644.874971][T19840] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1644.880812][T19840] evdev_write+0x356/0x760 [ 1644.885267][T19840] ? evdev_read+0xe30/0xe30 [ 1644.889809][T19840] ? apparmor_file_permission+0x264/0x4e0 [ 1644.895580][T19840] ? security_file_permission+0xab/0xd0 [ 1644.901168][T19840] vfs_write+0x2d7/0xdd0 [ 1644.905445][T19840] ? evdev_read+0xe30/0xe30 [ 1644.909989][T19840] ? kernel_write+0x630/0x630 [ 1644.914698][T19840] ? __fget_files+0x26a/0x440 [ 1644.919424][T19840] ? __fget_light+0xe5/0x270 [ 1644.924043][T19840] ksys_write+0x1e8/0x250 [ 1644.928403][T19840] ? __ia32_sys_read+0xb0/0xb0 [ 1644.933202][T19840] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1644.939131][T19840] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1644.945063][T19840] do_syscall_64+0x35/0xb0 [ 1644.949610][T19840] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1644.955540][T19840] RIP: 0033:0x7fb3c24c45a9 [ 1644.959981][T19840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1644.979626][T19840] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1644.988071][T19840] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1644.996067][T19840] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1645.004065][T19840] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.012060][T19840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1645.020057][T19840] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1645.028058][T19840] [ 1645.178929][ T9824] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1645.289069][ T9824] usb 2-1: Invalid ep0 maxpacket: 109 [ 1645.329064][ T72] usb 6-1: new high-speed USB device number 32 using dummy_hcd 09:30:57 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100cc70df046d4f8b2b13fcbef778860410000000800000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x2, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4000}}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x400000, 0x222902) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x1, 0xffffffff, 0x81}) [ 1645.438938][ T9824] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1645.849076][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1645.858171][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.866398][ T72] usb 6-1: Product: syz [ 1645.870620][ T72] usb 6-1: Manufacturer: syz [ 1645.875241][ T72] usb 6-1: SerialNumber: syz [ 1645.938919][ T9824] usb 2-1: device not accepting address 49, error -71 [ 1645.946159][ T9824] usb usb2-port1: unable to enumerate USB device [ 1645.979726][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1646.349096][ T9824] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1646.548985][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1646.648923][ T9824] usb 2-1: device descriptor read/64, error 18 [ 1646.955177][ T4134] usb 6-1: USB disconnect, device number 32 [ 1647.088958][ T9824] usb 2-1: device descriptor read/64, error 18 [ 1647.388954][ T9824] usb 2-1: new high-speed USB device number 51 using dummy_hcd 09:30:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x3}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:30:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd98) 09:30:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd98) 09:30:59 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0xd}}}}]}}, 0x0) 09:30:59 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 91) [ 1647.486228][T19847] FAULT_INJECTION: forcing a failure. [ 1647.486228][T19847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1647.499490][T19847] CPU: 1 PID: 19847 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1647.509589][T19847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1647.519674][T19847] Call Trace: [ 1647.522971][T19847] [ 1647.525974][T19847] dump_stack_lvl+0xcd/0x134 [ 1647.530600][T19847] should_fail.cold+0x5/0xa [ 1647.535152][T19847] _copy_from_user+0x2a/0x170 [ 1647.539935][T19847] input_event_from_user+0x131/0x3a0 [ 1647.545254][T19847] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1647.551100][T19847] evdev_write+0x356/0x760 [ 1647.555555][T19847] ? evdev_read+0xe30/0xe30 [ 1647.560094][T19847] ? apparmor_file_permission+0x264/0x4e0 [ 1647.566034][T19847] ? security_file_permission+0xab/0xd0 [ 1647.571619][T19847] vfs_write+0x2d7/0xdd0 [ 1647.575900][T19847] ? evdev_read+0xe30/0xe30 [ 1647.580439][T19847] ? kernel_write+0x630/0x630 [ 1647.585144][T19847] ? __fget_files+0x26a/0x440 [ 1647.589871][T19847] ? __fget_light+0xe5/0x270 [ 1647.594487][T19847] ksys_write+0x1e8/0x250 [ 1647.598851][T19847] ? __ia32_sys_read+0xb0/0xb0 [ 1647.603644][T19847] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1647.609578][T19847] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1647.615513][T19847] do_syscall_64+0x35/0xb0 [ 1647.619976][T19847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1647.625898][T19847] RIP: 0033:0x7fb3c24c45a9 [ 1647.630334][T19847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1647.649981][T19847] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1647.658517][T19847] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1647.666524][T19847] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1647.674610][T19847] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:30:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdb0) 09:30:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdb0) [ 1647.682615][T19847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.690619][T19847] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1647.698628][T19847] 09:30:59 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 92) 09:30:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdc8) [ 1647.729098][ T9824] usb 2-1: device descriptor read/64, error 18 [ 1647.789018][ T72] usb 6-1: Service connection timeout for: 256 [ 1647.795259][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1647.804820][T19860] FAULT_INJECTION: forcing a failure. [ 1647.804820][T19860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1647.818010][T19860] CPU: 0 PID: 19860 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1647.822348][ T72] ath9k_htc: Failed to initialize the device [ 1647.828090][T19860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1647.828109][T19860] Call Trace: [ 1647.828118][T19860] [ 1647.850402][T19860] dump_stack_lvl+0xcd/0x134 [ 1647.855031][T19860] should_fail.cold+0x5/0xa [ 1647.859581][T19860] _copy_from_user+0x2a/0x170 [ 1647.864299][T19860] input_event_from_user+0x131/0x3a0 [ 1647.869617][T19860] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1647.875460][T19860] evdev_write+0x356/0x760 [ 1647.879914][T19860] ? evdev_read+0xe30/0xe30 [ 1647.884451][T19860] ? apparmor_file_permission+0x264/0x4e0 [ 1647.890213][T19860] ? security_file_permission+0xab/0xd0 [ 1647.895802][T19860] vfs_write+0x2d7/0xdd0 [ 1647.900072][T19860] ? evdev_read+0xe30/0xe30 [ 1647.904614][T19860] ? kernel_write+0x630/0x630 [ 1647.909318][T19860] ? __fget_files+0x26a/0x440 [ 1647.914039][T19860] ? __fget_light+0xe5/0x270 [ 1647.918655][T19860] ksys_write+0x1e8/0x250 [ 1647.923013][T19860] ? __ia32_sys_read+0xb0/0xb0 [ 1647.927805][T19860] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1647.933736][T19860] ? syscall_enter_from_user_mode+0x22/0xb0 09:30:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdc8) [ 1647.939666][T19860] do_syscall_64+0x35/0xb0 [ 1647.944133][T19860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1647.950066][T19860] RIP: 0033:0x7fb3c24c45a9 [ 1647.954508][T19860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1647.974149][T19860] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 09:31:00 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xde0) [ 1647.982595][T19860] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1647.990589][T19860] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1647.998582][T19860] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.006577][T19860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1648.014587][T19860] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1648.022585][T19860] [ 1648.026022][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1648.338935][ T9824] usb 2-1: device descriptor read/64, error 18 [ 1648.418949][ T4134] usb 6-1: new high-speed USB device number 33 using dummy_hcd 09:31:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100cc70df046d4f8b2b13fcbef778860410000000800000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x2, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4000}}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x400000, 0x222902) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x1, 0xffffffff, 0x81}) [ 1648.472164][ T9824] usb usb2-port1: attempt power cycle [ 1648.889076][ T9824] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1648.969023][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1648.978204][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.986358][ T4134] usb 6-1: Product: syz [ 1648.990577][ T4134] usb 6-1: Manufacturer: syz [ 1648.995196][ T4134] usb 6-1: SerialNumber: syz [ 1649.000235][ T9824] usb 2-1: Invalid ep0 maxpacket: 109 [ 1649.079754][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1649.149093][ T9824] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1649.259284][ T9824] usb 2-1: Invalid ep0 maxpacket: 109 [ 1649.264918][ T9824] usb usb2-port1: unable to enumerate USB device [ 1649.669047][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1650.085130][ T9824] usb 6-1: USB disconnect, device number 33 09:31:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x4}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xde0) 09:31:02 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 93) 09:31:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdf8) 09:31:02 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0xe}}}}]}}, 0x0) [ 1650.631975][T19874] FAULT_INJECTION: forcing a failure. [ 1650.631975][T19874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.645146][T19874] CPU: 1 PID: 19874 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1650.655252][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1650.665341][T19874] Call Trace: [ 1650.668668][T19874] [ 1650.671617][T19874] dump_stack_lvl+0xcd/0x134 [ 1650.676241][T19874] should_fail.cold+0x5/0xa [ 1650.680789][T19874] _copy_from_user+0x2a/0x170 [ 1650.685529][T19874] input_event_from_user+0x131/0x3a0 [ 1650.690850][T19874] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1650.696694][T19874] evdev_write+0x356/0x760 [ 1650.701150][T19874] ? evdev_read+0xe30/0xe30 [ 1650.705692][T19874] ? apparmor_file_permission+0x264/0x4e0 [ 1650.711452][T19874] ? security_file_permission+0xab/0xd0 [ 1650.717032][T19874] vfs_write+0x2d7/0xdd0 [ 1650.721297][T19874] ? evdev_read+0xe30/0xe30 [ 1650.725841][T19874] ? kernel_write+0x630/0x630 [ 1650.730549][T19874] ? __fget_files+0x26a/0x440 [ 1650.735274][T19874] ? __fget_light+0xe5/0x270 [ 1650.740411][T19874] ksys_write+0x1e8/0x250 [ 1650.744772][T19874] ? __ia32_sys_read+0xb0/0xb0 [ 1650.749566][T19874] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1650.755506][T19874] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1650.761440][T19874] do_syscall_64+0x35/0xb0 [ 1650.765900][T19874] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1650.771832][T19874] RIP: 0033:0x7fb3c24c45a9 09:31:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe10) [ 1650.776267][T19874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1650.795963][T19874] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1650.804415][T19874] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1650.812419][T19874] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1650.820419][T19874] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:31:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe28) 09:31:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdf8) 09:31:02 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 94) [ 1650.828415][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.836410][T19874] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1650.844409][T19874] [ 1650.918967][ T4134] usb 6-1: Service connection timeout for: 256 [ 1650.925250][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1650.934114][T19886] FAULT_INJECTION: forcing a failure. [ 1650.934114][T19886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.947252][T19886] CPU: 0 PID: 19886 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1650.957346][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1650.967515][T19886] Call Trace: [ 1650.970808][T19886] [ 1650.973756][T19886] dump_stack_lvl+0xcd/0x134 [ 1650.978376][T19886] should_fail.cold+0x5/0xa [ 1650.982933][T19886] _copy_from_user+0x2a/0x170 [ 1650.987653][T19886] input_event_from_user+0x131/0x3a0 [ 1650.992975][T19886] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1650.998821][T19886] evdev_write+0x356/0x760 [ 1651.003282][T19886] ? evdev_read+0xe30/0xe30 [ 1651.007823][T19886] ? apparmor_file_permission+0x264/0x4e0 [ 1651.013586][T19886] ? security_file_permission+0xab/0xd0 [ 1651.019171][T19886] vfs_write+0x2d7/0xdd0 [ 1651.023445][T19886] ? evdev_read+0xe30/0xe30 [ 1651.027983][T19886] ? kernel_write+0x630/0x630 [ 1651.032690][T19886] ? __fget_files+0x26a/0x440 [ 1651.037412][T19886] ? __fget_light+0xe5/0x270 [ 1651.042031][T19886] ksys_write+0x1e8/0x250 [ 1651.046393][T19886] ? __ia32_sys_read+0xb0/0xb0 [ 1651.051192][T19886] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1651.057122][T19886] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1651.063051][T19886] do_syscall_64+0x35/0xb0 09:31:03 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe40) 09:31:03 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe10) [ 1651.067511][T19886] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1651.073435][T19886] RIP: 0033:0x7fb3c24c45a9 [ 1651.077872][T19886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1651.097515][T19886] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1651.105965][T19886] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1651.113967][T19886] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1651.121962][T19886] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.129955][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1651.137948][T19886] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1651.145947][T19886] [ 1651.157777][ T4134] ath9k_htc: Failed to initialize the device [ 1651.164340][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized 09:31:03 executing program 1: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x1, 0x3, 0xfffff88f, 0x4, 0x5}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400018fb6c4630904000009030000000981030000000000"], 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xa5, 0xf5, 0x87, 0x20, 0x93b, 0xa004, 0x834, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xc7, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xffffff13, {0xffffffffffffff8e, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8f}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0xc8, {0xc8, 0x9, "105fb586b6d18f7b727f56906ee8fa832c1cbbe4d4e45517d5117a2ad8fc5cb598393a5b3fe290871192313e36ad97bb0f8541241edf7ec960abc16e2a6829c8b926e44151ce59355ec7c162b76bd3e9946f1329f083c8bb935510f69b62f5f09eafd11cbe0e86de9d23f160fd2b7bf3e7d48593c52856111bdd53945030ed8525fc0c445cccf6017538abdb6bac92a5fe42cb66aef659151690ab00661df207873123852aee213fc5ae4f43f9b5783bec72fb21b1eb1887e0bfb9921c0722dc6abf1b6ca3c6"}}, &(0x7f0000000280)={0x0, 0x3, 0xca, @string={0xca, 0x3, "c789c513492f8bccdd488a6037976f69bae6f2cbfe20061b5a5d1bba1720f037b2c93135ec3fa5d3b42ea62381ab4fc989dbd0cf01de9dcb795bb7ff3b655dbd0da5248ff5656c6f74cd0f63f1ba0ddb15afe6adb0d73fe6c84cc8a66808634b8c3ac0934d6f46127018bdbaf964cd77d6e168e76cf28173abb521f8df670ea7becd87a79c92ceeaccd4ce72c016cf13f664c4c84577f6151419f58c27e4ae3dd65039b1f9505561648841e814517530ed6ae5a4aedb9b44444b9e3f5bbcbd63f8999e3f1ca37310"}}, &(0x7f0000000a40)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x0, 0x10, 0xa, 0x96, 0x0, 0x1f, 0xf000, 0x7, [0x7459e107d4d1b5de, 0xa0f0, 0xc000, 0xff00c0, 0xff00c0]}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x3, 0x0, "9e783323", "5f9b29da"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0xfc, 0x71, 0x0, 0x0, 0x2}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x97f1db51dc449d13, 0xd1, "d3865e89f2169c58a4f627fe31671b1346db696a9872c35cb77691c7f6c572cb3a483dde90f264594dcf16af7459b8b7c132194acc434279b77b165a7edab1e7f899b74d326df9e969cc3486c930fb07ed8f1f4fa6e022b7fc4754a19e6449e4406d6082df5f47f46233daeaf86f0d61395fd815d2adee49338bb0a14619c8faa682b3679a02a1b4331dbf6224c9679f067e2b8d60c366f84288b4617da637ac28cf4eedfb5d8688befae40b93699ce33269c3231b583fb040c0fabb399de66b58a00f0458baed292b012482df4c751e56"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xaf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xbf}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf0f0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xfffd}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "9014"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "bc00"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x21, 0x0, 0x1}}) [ 1651.518958][ T9824] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1651.978945][ T72] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1652.079016][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1652.088157][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.096258][ T9824] usb 6-1: Product: syz [ 1652.100470][ T9824] usb 6-1: Manufacturer: syz [ 1652.105085][ T9824] usb 6-1: SerialNumber: syz [ 1652.189649][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1652.409136][ T72] usb 2-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.421521][ T72] usb 2-1: config 143 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1652.434737][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1652.443829][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.700837][T19892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.711285][T19892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.759019][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1653.101854][ T72] usbhid 2-1:143.0: couldn't find an input interrupt endpoint [ 1653.111039][ T72] usb 2-1: USB disconnect, device number 54 [ 1653.175582][ T4134] usb 6-1: USB disconnect, device number 34 09:31:05 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe28) 09:31:05 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe58) 09:31:05 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 95) 09:31:05 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0xf}}}}]}}, 0x0) 09:31:05 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x5}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:05 executing program 1: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x1, 0x3, 0xfffff88f, 0x4, 0x5}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400018fb6c4630904000009030000000981030000000000"], 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xa5, 0xf5, 0x87, 0x20, 0x93b, 0xa004, 0x834, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xc7, 0x61}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xffffff13, {0xffffffffffffff8e, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8f}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x2, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0xc8, {0xc8, 0x9, "105fb586b6d18f7b727f56906ee8fa832c1cbbe4d4e45517d5117a2ad8fc5cb598393a5b3fe290871192313e36ad97bb0f8541241edf7ec960abc16e2a6829c8b926e44151ce59355ec7c162b76bd3e9946f1329f083c8bb935510f69b62f5f09eafd11cbe0e86de9d23f160fd2b7bf3e7d48593c52856111bdd53945030ed8525fc0c445cccf6017538abdb6bac92a5fe42cb66aef659151690ab00661df207873123852aee213fc5ae4f43f9b5783bec72fb21b1eb1887e0bfb9921c0722dc6abf1b6ca3c6"}}, &(0x7f0000000280)={0x0, 0x3, 0xca, @string={0xca, 0x3, "c789c513492f8bccdd488a6037976f69bae6f2cbfe20061b5a5d1bba1720f037b2c93135ec3fa5d3b42ea62381ab4fc989dbd0cf01de9dcb795bb7ff3b655dbd0da5248ff5656c6f74cd0f63f1ba0ddb15afe6adb0d73fe6c84cc8a66808634b8c3ac0934d6f46127018bdbaf964cd77d6e168e76cf28173abb521f8df670ea7becd87a79c92ceeaccd4ce72c016cf13f664c4c84577f6151419f58c27e4ae3dd65039b1f9505561648841e814517530ed6ae5a4aedb9b44444b9e3f5bbcbd63f8999e3f1ca37310"}}, &(0x7f0000000a40)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x0, 0x10, 0xa, 0x96, 0x0, 0x1f, 0xf000, 0x7, [0x7459e107d4d1b5de, 0xa0f0, 0xc000, 0xff00c0, 0xff00c0]}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x3, 0x0, "9e783323", "5f9b29da"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0xfc, 0x71, 0x0, 0x0, 0x2}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x97f1db51dc449d13, 0xd1, "d3865e89f2169c58a4f627fe31671b1346db696a9872c35cb77691c7f6c572cb3a483dde90f264594dcf16af7459b8b7c132194acc434279b77b165a7edab1e7f899b74d326df9e969cc3486c930fb07ed8f1f4fa6e022b7fc4754a19e6449e4406d6082df5f47f46233daeaf86f0d61395fd815d2adee49338bb0a14619c8faa682b3679a02a1b4331dbf6224c9679f067e2b8d60c366f84288b4617da637ac28cf4eedfb5d8688befae40b93699ce33269c3231b583fb040c0fabb399de66b58a00f0458baed292b012482df4c751e56"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xaf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xbf}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf0f0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xfffd}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "9014"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "bc00"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x21, 0x0, 0x1}}) [ 1653.715230][T19897] FAULT_INJECTION: forcing a failure. [ 1653.715230][T19897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.728414][T19897] CPU: 1 PID: 19897 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1653.738517][T19897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1653.748601][T19897] Call Trace: [ 1653.751900][T19897] [ 1653.754865][T19897] dump_stack_lvl+0xcd/0x134 [ 1653.759499][T19897] should_fail.cold+0x5/0xa [ 1653.764056][T19897] _copy_from_user+0x2a/0x170 [ 1653.768779][T19897] input_event_from_user+0x131/0x3a0 [ 1653.774101][T19897] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1653.779949][T19897] evdev_write+0x356/0x760 [ 1653.784489][T19897] ? evdev_read+0xe30/0xe30 [ 1653.789029][T19897] ? apparmor_file_permission+0x264/0x4e0 [ 1653.794791][T19897] ? security_file_permission+0xab/0xd0 [ 1653.800376][T19897] vfs_write+0x2d7/0xdd0 [ 1653.804646][T19897] ? evdev_read+0xe30/0xe30 [ 1653.809184][T19897] ? kernel_write+0x630/0x630 [ 1653.813894][T19897] ? __fget_files+0x26a/0x440 [ 1653.818625][T19897] ? __fget_light+0xe5/0x270 [ 1653.823246][T19897] ksys_write+0x1e8/0x250 [ 1653.827606][T19897] ? __ia32_sys_read+0xb0/0xb0 [ 1653.832401][T19897] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1653.838332][T19897] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1653.844263][T19897] do_syscall_64+0x35/0xb0 [ 1653.848725][T19897] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1653.854651][T19897] RIP: 0033:0x7fb3c24c45a9 [ 1653.859085][T19897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1653.878732][T19897] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1653.887183][T19897] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1653.895184][T19897] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1653.903191][T19897] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:31:05 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe70) 09:31:05 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe40) 09:31:05 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 96) [ 1653.911190][T19897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1653.919211][T19897] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1653.927214][T19897] [ 1653.988167][ T718] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1654.012376][T19911] FAULT_INJECTION: forcing a failure. [ 1654.012376][T19911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.025579][T19911] CPU: 1 PID: 19911 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1654.028958][ T9824] usb 6-1: Service connection timeout for: 256 [ 1654.035655][T19911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1654.035675][T19911] Call Trace: [ 1654.035684][T19911] [ 1654.041967][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1654.051871][T19911] dump_stack_lvl+0xcd/0x134 [ 1654.051905][T19911] should_fail.cold+0x5/0xa [ 1654.074835][ T9824] ath9k_htc: Failed to initialize the device [ 1654.074992][T19911] _copy_from_user+0x2a/0x170 [ 1654.085708][T19911] input_event_from_user+0x131/0x3a0 [ 1654.089172][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1654.091024][T19911] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1654.091063][T19911] evdev_write+0x356/0x760 [ 1654.107354][T19911] ? evdev_read+0xe30/0xe30 [ 1654.111895][T19911] ? apparmor_file_permission+0x264/0x4e0 [ 1654.117657][T19911] ? security_file_permission+0xab/0xd0 [ 1654.123238][T19911] vfs_write+0x2d7/0xdd0 [ 1654.127506][T19911] ? evdev_read+0xe30/0xe30 [ 1654.132043][T19911] ? kernel_write+0x630/0x630 [ 1654.136755][T19911] ? __fget_files+0x26a/0x440 [ 1654.141474][T19911] ? __fget_light+0xe5/0x270 [ 1654.146093][T19911] ksys_write+0x1e8/0x250 [ 1654.150458][T19911] ? __ia32_sys_read+0xb0/0xb0 [ 1654.155267][T19911] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1654.161199][T19911] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1654.167144][T19911] do_syscall_64+0x35/0xb0 [ 1654.171613][T19911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1654.177545][T19911] RIP: 0033:0x7fb3c24c45a9 [ 1654.181986][T19911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1654.201628][T19911] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1654.210074][T19911] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1654.218079][T19911] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1654.226074][T19911] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:31:06 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe58) 09:31:06 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe88) 09:31:06 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe70) 09:31:06 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 97) 09:31:06 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xea0) [ 1654.234071][T19911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1654.242068][T19911] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1654.250072][T19911] [ 1654.319428][T19918] FAULT_INJECTION: forcing a failure. [ 1654.319428][T19918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.332739][T19918] CPU: 1 PID: 19918 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1654.342838][T19918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1654.352931][T19918] Call Trace: [ 1654.356231][T19918] [ 1654.359182][T19918] dump_stack_lvl+0xcd/0x134 [ 1654.363813][T19918] should_fail.cold+0x5/0xa [ 1654.368360][T19918] _copy_from_user+0x2a/0x170 [ 1654.369112][ T718] usb 2-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.373062][T19918] input_event_from_user+0x131/0x3a0 [ 1654.373101][T19918] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1654.373134][T19918] evdev_write+0x356/0x760 [ 1654.396941][ T718] usb 2-1: config 143 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1654.399014][T19918] ? evdev_read+0xe30/0xe30 [ 1654.399052][T19918] ? apparmor_file_permission+0x264/0x4e0 [ 1654.399092][T19918] ? security_file_permission+0xab/0xd0 [ 1654.399125][T19918] vfs_write+0x2d7/0xdd0 [ 1654.412204][ T718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1654.416636][T19918] ? evdev_read+0xe30/0xe30 [ 1654.422385][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.427946][T19918] ? kernel_write+0x630/0x630 [ 1654.448964][ T4134] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1654.453752][T19918] ? __fget_files+0x26a/0x440 [ 1654.453805][T19918] ? __fget_light+0xe5/0x270 [ 1654.453829][T19918] ksys_write+0x1e8/0x250 [ 1654.479833][T19918] ? __ia32_sys_read+0xb0/0xb0 [ 1654.484639][T19918] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1654.490574][T19918] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1654.496512][T19918] do_syscall_64+0x35/0xb0 [ 1654.500976][T19918] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1654.506908][T19918] RIP: 0033:0x7fb3c24c45a9 [ 1654.511352][T19918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1654.531000][T19918] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1654.539452][T19918] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1654.547450][T19918] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1654.555451][T19918] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:31:06 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x10}}}}]}}, 0x0) 09:31:06 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xeb8) [ 1654.563451][T19918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1654.571453][T19918] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1654.579456][T19918] [ 1654.740178][T19901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.748768][T19901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.799146][ T718] usb 2-1: string descriptor 0 read error: -71 [ 1654.808437][ T718] usbhid 2-1:143.0: couldn't find an input interrupt endpoint [ 1654.820025][ T718] usb 2-1: USB disconnect, device number 55 [ 1654.989063][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1654.998184][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.006392][ T4134] usb 6-1: Product: syz [ 1655.010602][ T4134] usb 6-1: Manufacturer: syz [ 1655.015216][ T4134] usb 6-1: SerialNumber: syz [ 1655.099646][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1655.699042][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1656.107655][ T9824] usb 6-1: USB disconnect, device number 35 09:31:08 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x6}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:08 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xe88) 09:31:08 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 98) 09:31:08 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xed0) 09:31:08 executing program 1: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x1, 0x3, 0xfffff88f, 0x4, 0x5}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400018fb6c4630904000009030000000981030000000000"], 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xa5, 0xf5, 0x87, 0x20, 0x93b, 0xa004, 0x834, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xc7, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xffffff13, {0xffffffffffffff8e, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8f}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0xc8, {0xc8, 0x9, "105fb586b6d18f7b727f56906ee8fa832c1cbbe4d4e45517d5117a2ad8fc5cb598393a5b3fe290871192313e36ad97bb0f8541241edf7ec960abc16e2a6829c8b926e44151ce59355ec7c162b76bd3e9946f1329f083c8bb935510f69b62f5f09eafd11cbe0e86de9d23f160fd2b7bf3e7d48593c52856111bdd53945030ed8525fc0c445cccf6017538abdb6bac92a5fe42cb66aef659151690ab00661df207873123852aee213fc5ae4f43f9b5783bec72fb21b1eb1887e0bfb9921c0722dc6abf1b6ca3c6"}}, &(0x7f0000000280)={0x0, 0x3, 0xca, @string={0xca, 0x3, "c789c513492f8bccdd488a6037976f69bae6f2cbfe20061b5a5d1bba1720f037b2c93135ec3fa5d3b42ea62381ab4fc989dbd0cf01de9dcb795bb7ff3b655dbd0da5248ff5656c6f74cd0f63f1ba0ddb15afe6adb0d73fe6c84cc8a66808634b8c3ac0934d6f46127018bdbaf964cd77d6e168e76cf28173abb521f8df670ea7becd87a79c92ceeaccd4ce72c016cf13f664c4c84577f6151419f58c27e4ae3dd65039b1f9505561648841e814517530ed6ae5a4aedb9b44444b9e3f5bbcbd63f8999e3f1ca37310"}}, &(0x7f0000000a40)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x0, 0x10, 0xa, 0x96, 0x0, 0x1f, 0xf000, 0x7, [0x7459e107d4d1b5de, 0xa0f0, 0xc000, 0xff00c0, 0xff00c0]}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x3, 0x0, "9e783323", "5f9b29da"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0xfc, 0x71, 0x0, 0x0, 0x2}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x97f1db51dc449d13, 0xd1, "d3865e89f2169c58a4f627fe31671b1346db696a9872c35cb77691c7f6c572cb3a483dde90f264594dcf16af7459b8b7c132194acc434279b77b165a7edab1e7f899b74d326df9e969cc3486c930fb07ed8f1f4fa6e022b7fc4754a19e6449e4406d6082df5f47f46233daeaf86f0d61395fd815d2adee49338bb0a14619c8faa682b3679a02a1b4331dbf6224c9679f067e2b8d60c366f84288b4617da637ac28cf4eedfb5d8688befae40b93699ce33269c3231b583fb040c0fabb399de66b58a00f0458baed292b012482df4c751e56"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xaf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xbf}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf0f0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xfffd}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "9014"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "bc00"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x21, 0x0, 0x1}}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x1, 0x3, 0xfffff88f, 0x4, 0x5}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400018fb6c4630904000009030000000981030000000000"], 0x0) (async) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xa5, 0xf5, 0x87, 0x20, 0x93b, 0xa004, 0x834, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xc7, 0x61}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xffffff13, {0xffffffffffffff8e, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8f}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x2, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0xc8, {0xc8, 0x9, "105fb586b6d18f7b727f56906ee8fa832c1cbbe4d4e45517d5117a2ad8fc5cb598393a5b3fe290871192313e36ad97bb0f8541241edf7ec960abc16e2a6829c8b926e44151ce59355ec7c162b76bd3e9946f1329f083c8bb935510f69b62f5f09eafd11cbe0e86de9d23f160fd2b7bf3e7d48593c52856111bdd53945030ed8525fc0c445cccf6017538abdb6bac92a5fe42cb66aef659151690ab00661df207873123852aee213fc5ae4f43f9b5783bec72fb21b1eb1887e0bfb9921c0722dc6abf1b6ca3c6"}}, &(0x7f0000000280)={0x0, 0x3, 0xca, @string={0xca, 0x3, "c789c513492f8bccdd488a6037976f69bae6f2cbfe20061b5a5d1bba1720f037b2c93135ec3fa5d3b42ea62381ab4fc989dbd0cf01de9dcb795bb7ff3b655dbd0da5248ff5656c6f74cd0f63f1ba0ddb15afe6adb0d73fe6c84cc8a66808634b8c3ac0934d6f46127018bdbaf964cd77d6e168e76cf28173abb521f8df670ea7becd87a79c92ceeaccd4ce72c016cf13f664c4c84577f6151419f58c27e4ae3dd65039b1f9505561648841e814517530ed6ae5a4aedb9b44444b9e3f5bbcbd63f8999e3f1ca37310"}}, &(0x7f0000000a40)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x0, 0x10, 0xa, 0x96, 0x0, 0x1f, 0xf000, 0x7, [0x7459e107d4d1b5de, 0xa0f0, 0xc000, 0xff00c0, 0xff00c0]}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x3, 0x0, "9e783323", "5f9b29da"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0xfc, 0x71, 0x0, 0x0, 0x2}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x97f1db51dc449d13, 0xd1, "d3865e89f2169c58a4f627fe31671b1346db696a9872c35cb77691c7f6c572cb3a483dde90f264594dcf16af7459b8b7c132194acc434279b77b165a7edab1e7f899b74d326df9e969cc3486c930fb07ed8f1f4fa6e022b7fc4754a19e6449e4406d6082df5f47f46233daeaf86f0d61395fd815d2adee49338bb0a14619c8faa682b3679a02a1b4331dbf6224c9679f067e2b8d60c366f84288b4617da637ac28cf4eedfb5d8688befae40b93699ce33269c3231b583fb040c0fabb399de66b58a00f0458baed292b012482df4c751e56"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xaf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xbf}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf0f0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xfffd}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "9014"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "bc00"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x21, 0x0, 0x1}}) (async) 09:31:08 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x11}}}}]}}, 0x0) [ 1656.648724][T19935] FAULT_INJECTION: forcing a failure. [ 1656.648724][T19935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.661915][T19935] CPU: 1 PID: 19935 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1656.672018][T19935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1656.682096][T19935] Call Trace: [ 1656.685395][T19935] [ 1656.688342][T19935] dump_stack_lvl+0xcd/0x134 [ 1656.692970][T19935] should_fail.cold+0x5/0xa [ 1656.697521][T19935] _copy_from_user+0x2a/0x170 [ 1656.702250][T19935] input_event_from_user+0x131/0x3a0 [ 1656.707570][T19935] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1656.713419][T19935] evdev_write+0x356/0x760 [ 1656.717874][T19935] ? evdev_read+0xe30/0xe30 [ 1656.722410][T19935] ? apparmor_file_permission+0x264/0x4e0 [ 1656.728188][T19935] ? security_file_permission+0xab/0xd0 [ 1656.733770][T19935] vfs_write+0x2d7/0xdd0 [ 1656.738044][T19935] ? evdev_read+0xe30/0xe30 [ 1656.742668][T19935] ? kernel_write+0x630/0x630 [ 1656.747374][T19935] ? __fget_files+0x26a/0x440 [ 1656.752097][T19935] ? __fget_light+0xe5/0x270 [ 1656.756716][T19935] ksys_write+0x1e8/0x250 [ 1656.761141][T19935] ? __ia32_sys_read+0xb0/0xb0 [ 1656.765940][T19935] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1656.771870][T19935] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1656.777803][T19935] do_syscall_64+0x35/0xb0 [ 1656.782264][T19935] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1656.788193][T19935] RIP: 0033:0x7fb3c24c45a9 [ 1656.792635][T19935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1656.812270][T19935] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1656.820712][T19935] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1656.828710][T19935] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1656.836705][T19935] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 09:31:08 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 99) 09:31:08 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xee8) 09:31:08 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xea0) [ 1656.844701][T19935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1656.852696][T19935] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1656.860700][T19935] [ 1656.905718][T19944] FAULT_INJECTION: forcing a failure. [ 1656.905718][T19944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.918879][T19944] CPU: 1 PID: 19944 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1656.919614][ T718] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1656.929039][T19944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1656.929060][T19944] Call Trace: [ 1656.929071][T19944] [ 1656.929081][T19944] dump_stack_lvl+0xcd/0x134 [ 1656.929115][T19944] should_fail.cold+0x5/0xa [ 1656.962065][T19944] _copy_from_user+0x2a/0x170 [ 1656.966793][T19944] input_event_from_user+0x131/0x3a0 [ 1656.972113][T19944] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1656.977953][T19944] evdev_write+0x356/0x760 [ 1656.982409][T19944] ? evdev_read+0xe30/0xe30 [ 1656.986947][T19944] ? apparmor_file_permission+0x264/0x4e0 [ 1656.988930][ T4134] usb 6-1: Service connection timeout for: 256 [ 1656.992686][T19944] ? security_file_permission+0xab/0xd0 [ 1656.992726][T19944] vfs_write+0x2d7/0xdd0 [ 1656.992754][T19944] ? evdev_read+0xe30/0xe30 [ 1656.998938][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1657.004409][T19944] ? kernel_write+0x630/0x630 [ 1657.016438][ T4134] ath9k_htc: Failed to initialize the device [ 1657.020914][T19944] ? __fget_files+0x26a/0x440 [ 1657.020964][T19944] ? __fget_light+0xe5/0x270 [ 1657.020988][T19944] ksys_write+0x1e8/0x250 [ 1657.021015][T19944] ? __ia32_sys_read+0xb0/0xb0 [ 1657.031737][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1657.036339][T19944] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1657.036379][T19944] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1657.036412][T19944] do_syscall_64+0x35/0xb0 [ 1657.072413][T19944] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1657.078346][T19944] RIP: 0033:0x7fb3c24c45a9 [ 1657.082791][T19944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:31:09 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x12}}}}]}}, 0x0) [ 1657.102435][T19944] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1657.110886][T19944] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1657.118884][T19944] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1657.126880][T19944] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.134874][T19944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.142878][T19944] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1657.150886][T19944] 09:31:09 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) (fail_nth: 100) 09:31:09 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xeb8) [ 1657.215896][T19950] FAULT_INJECTION: forcing a failure. [ 1657.215896][T19950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.229147][T19950] CPU: 1 PID: 19950 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1657.239252][T19950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1657.249330][T19950] Call Trace: [ 1657.252627][T19950] [ 1657.255577][T19950] dump_stack_lvl+0xcd/0x134 [ 1657.260204][T19950] should_fail.cold+0x5/0xa [ 1657.264754][T19950] _copy_from_user+0x2a/0x170 [ 1657.269489][T19950] input_event_from_user+0x131/0x3a0 [ 1657.274833][T19950] ? input_ff_effect_from_user+0x2c0/0x2c0 [ 1657.280675][T19950] evdev_write+0x356/0x760 [ 1657.285128][T19950] ? evdev_read+0xe30/0xe30 [ 1657.289675][T19950] ? apparmor_file_permission+0x264/0x4e0 [ 1657.295523][T19950] ? security_file_permission+0xab/0xd0 [ 1657.301105][T19950] vfs_write+0x2d7/0xdd0 [ 1657.305374][T19950] ? evdev_read+0xe30/0xe30 [ 1657.309097][ T718] usb 2-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.309895][T19950] ? kernel_write+0x630/0x630 [ 1657.309928][T19950] ? __fget_files+0x26a/0x440 [ 1657.326937][ T718] usb 2-1: config 143 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1657.329505][T19950] ? __fget_light+0xe5/0x270 [ 1657.329536][T19950] ksys_write+0x1e8/0x250 [ 1657.329563][T19950] ? __ia32_sys_read+0xb0/0xb0 [ 1657.329590][T19950] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1657.342653][ T718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1657.347158][T19950] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1657.351505][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.356214][T19950] do_syscall_64+0x35/0xb0 [ 1657.389576][T19950] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1657.395519][T19950] RIP: 0033:0x7fb3c24c45a9 [ 1657.399962][T19950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1657.419627][T19950] RSP: 002b:00007fb3c1c38168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1657.428069][T19950] RAX: ffffffffffffffda RBX: 00007fb3c25e4f80 RCX: 00007fb3c24c45a9 [ 1657.429289][ T9824] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1657.436040][T19950] RDX: 0000000000002ad8 RSI: 0000000020000040 RDI: 0000000000000003 [ 1657.436062][T19950] RBP: 00007fb3c1c381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.436080][T19950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1657.467544][T19950] R13: 00007fff482e93df R14: 00007fb3c1c38300 R15: 0000000000022000 [ 1657.475548][T19950] [ 1657.650360][T19940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.663560][T19940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.989264][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1657.998388][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.006480][ T9824] usb 6-1: Product: syz [ 1658.010744][ T9824] usb 6-1: Manufacturer: syz [ 1658.015358][ T9824] usb 6-1: SerialNumber: syz [ 1658.023154][ T718] usbhid 2-1:143.0: couldn't find an input interrupt endpoint [ 1658.032139][ T718] usb 2-1: USB disconnect, device number 56 [ 1658.119687][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1658.689005][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1659.105673][ T72] usb 6-1: USB disconnect, device number 36 09:31:11 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x7}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf00) 09:31:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xed0) 09:31:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) 09:31:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x10, 0x31, {0x31, 0xd, "ed861ffef59f830940c917a7b84e7de2671dad7649d27e08cf1fdf01c14c78bacccf6b889a2aaebc31a97da95b6050"}}, &(0x7f0000000100)={0x0, 0x3, 0x39, @string={0x39, 0x3, "36a7232fe3944a15aaba5a13cfaf3376f759dcb33cce16363838928dffb633b2e722cd904c2ffa1302cde65dee4af770806b569949ddd0"}}, &(0x7f0000000140)={0x0, 0x22, 0x14, {[@local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x2, "d85f6a2d"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_4={0x3, 0x2, 0x5, "79d3a8bb"}, @main=@item_012={0x2, 0x0, 0xb, "be06"}, @local=@item_4={0x3, 0x2, 0x0, "12c14b15"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1f, 0x1, {0x22, 0x4f9}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0xfd, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x1, 0xee, "cfbc177d0ac1868651a156ce3dfd66ccc775775aba3cb777e3e5fd883dbf56d3692065795e047433bf0a96425e231cfead693176f720aa1e5539c75e9503d2eb90e988d7911cc482592b08ca4fb101227642c1d7bfc93e4daecf752ebf04a374f93111c07d0b1abd1625121da89c327d3e948dcef6b0594dea2426d5b3029f63efaef7f3306f978f9e733513867a9560d79298bfcad95788edfc2814511517e7ad1e1631a158ee4eae77a811d71bad0bb130b819602148403050b51700bd44e88371a1411bf2c439c61e565832cca9ac3dbf9afab025a1c2d3caf4bd52eef4197f0736459e00ddfbde6f242086d4"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:11 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x2}}}}]}}, 0x0) 09:31:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf18) 09:31:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xee8) 09:31:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18) 09:31:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf30) 09:31:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf00) 09:31:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x30) [ 1659.908967][ T718] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1659.949100][ T9824] usb 6-1: Service connection timeout for: 256 [ 1659.955336][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1659.966942][ T9824] ath9k_htc: Failed to initialize the device [ 1659.973234][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1660.329017][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.329053][ T72] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1660.340074][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.357366][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1660.370224][ T718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1660.379318][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.393394][ T718] usb 2-1: config 0 descriptor?? [ 1660.869096][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1660.878190][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.887275][ T72] usb 6-1: Product: syz [ 1660.891509][ T72] usb 6-1: Manufacturer: syz [ 1660.896123][ T72] usb 6-1: SerialNumber: syz [ 1660.930821][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.938267][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.945721][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.953169][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.960602][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.968011][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.975448][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.982881][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1660.989559][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1660.990293][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.005771][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.013215][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.020672][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.028087][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.035541][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.042987][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.050431][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.057841][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.065282][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.072717][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.080157][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.087564][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.095005][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.102450][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.109901][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.117309][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.124762][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.132199][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.139645][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.147044][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.154493][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.161930][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.169389][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.176902][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.184356][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.191791][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.199240][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.206648][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.214117][ T718] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1661.223756][ T718] plantronics 0003:047F:FFFF.00C6: No inputs registered, leaving [ 1661.233554][ T718] plantronics 0003:047F:FFFF.00C6: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1661.248041][ T718] usb 2-1: USB disconnect, device number 57 [ 1661.569088][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1661.985238][ T4035] usb 6-1: USB disconnect, device number 37 09:31:14 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x8}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf48) 09:31:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x48) 09:31:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf18) 09:31:14 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x3}}}}]}}, 0x0) 09:31:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x10, 0x31, {0x31, 0xd, "ed861ffef59f830940c917a7b84e7de2671dad7649d27e08cf1fdf01c14c78bacccf6b889a2aaebc31a97da95b6050"}}, &(0x7f0000000100)={0x0, 0x3, 0x39, @string={0x39, 0x3, "36a7232fe3944a15aaba5a13cfaf3376f759dcb33cce16363838928dffb633b2e722cd904c2ffa1302cde65dee4af770806b569949ddd0"}}, &(0x7f0000000140)={0x0, 0x22, 0x14, {[@local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x2, "d85f6a2d"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_4={0x3, 0x2, 0x5, "79d3a8bb"}, @main=@item_012={0x2, 0x0, 0xb, "be06"}, @local=@item_4={0x3, 0x2, 0x0, "12c14b15"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1f, 0x1, {0x22, 0x4f9}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0xfd, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x1, 0xee, "cfbc177d0ac1868651a156ce3dfd66ccc775775aba3cb777e3e5fd883dbf56d3692065795e047433bf0a96425e231cfead693176f720aa1e5539c75e9503d2eb90e988d7911cc482592b08ca4fb101227642c1d7bfc93e4daecf752ebf04a374f93111c07d0b1abd1625121da89c327d3e948dcef6b0594dea2426d5b3029f63efaef7f3306f978f9e733513867a9560d79298bfcad95788edfc2814511517e7ad1e1631a158ee4eae77a811d71bad0bb130b819602148403050b51700bd44e88371a1411bf2c439c61e565832cca9ac3dbf9afab025a1c2d3caf4bd52eef4197f0736459e00ddfbde6f242086d4"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf60) 09:31:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf30) 09:31:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x60) 09:31:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf48) 09:31:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf78) 09:31:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x78) [ 1662.789043][ T4043] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1662.829037][ T72] usb 6-1: Service connection timeout for: 256 [ 1662.835290][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1662.846105][ T72] ath9k_htc: Failed to initialize the device [ 1662.852562][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1663.159017][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.170013][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.179845][ T4043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1663.192847][ T4043] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1663.201964][ T4043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.210732][ T4035] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1663.232043][ T4043] usb 2-1: config 0 descriptor?? [ 1663.570747][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.578202][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.585668][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.593117][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.600587][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.608000][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.615466][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.622917][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.630405][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.637837][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.645296][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.652764][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.660239][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.667640][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.675076][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.682521][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.689998][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.697410][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.704889][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.712326][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.719805][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.727226][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.734704][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.742155][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.749706][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.757115][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.764604][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.772060][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.779544][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.786961][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.794425][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.801876][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.809341][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.816745][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.824197][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.831630][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.839124][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.846534][ T4043] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1663.854541][ T4043] plantronics 0003:047F:FFFF.00C7: No inputs registered, leaving [ 1663.875296][ T4043] plantronics 0003:047F:FFFF.00C7: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1663.891565][ T4043] usb 2-1: USB disconnect, device number 58 [ 1664.009179][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1664.018662][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.026731][ T4035] usb 6-1: Product: syz [ 1664.030942][ T4035] usb 6-1: Manufacturer: syz [ 1664.035559][ T4035] usb 6-1: SerialNumber: syz [ 1664.129529][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1664.699025][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1665.105856][ T72] usb 6-1: USB disconnect, device number 38 09:31:17 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x9}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:17 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf60) 09:31:17 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf90) 09:31:17 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x90) 09:31:17 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x5}}}}]}}, 0x0) 09:31:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x10, 0x31, {0x31, 0xd, "ed861ffef59f830940c917a7b84e7de2671dad7649d27e08cf1fdf01c14c78bacccf6b889a2aaebc31a97da95b6050"}}, &(0x7f0000000100)={0x0, 0x3, 0x39, @string={0x39, 0x3, "36a7232fe3944a15aaba5a13cfaf3376f759dcb33cce16363838928dffb633b2e722cd904c2ffa1302cde65dee4af770806b569949ddd0"}}, &(0x7f0000000140)={0x0, 0x22, 0x14, {[@local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x2, "d85f6a2d"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_4={0x3, 0x2, 0x5, "79d3a8bb"}, @main=@item_012={0x2, 0x0, 0xb, "be06"}, @local=@item_4={0x3, 0x2, 0x0, "12c14b15"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1f, 0x1, {0x22, 0x4f9}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0xfd, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x1, 0xee, "cfbc177d0ac1868651a156ce3dfd66ccc775775aba3cb777e3e5fd883dbf56d3692065795e047433bf0a96425e231cfead693176f720aa1e5539c75e9503d2eb90e988d7911cc482592b08ca4fb101227642c1d7bfc93e4daecf752ebf04a374f93111c07d0b1abd1625121da89c327d3e948dcef6b0594dea2426d5b3029f63efaef7f3306f978f9e733513867a9560d79298bfcad95788edfc2814511517e7ad1e1631a158ee4eae77a811d71bad0bb130b819602148403050b51700bd44e88371a1411bf2c439c61e565832cca9ac3dbf9afab025a1c2d3caf4bd52eef4197f0736459e00ddfbde6f242086d4"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:17 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa8) 09:31:17 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf78) 09:31:17 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xfa8) 09:31:17 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc0) 09:31:17 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf90) 09:31:17 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xfc0) [ 1665.918981][ T4043] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1665.948940][ T4035] usb 6-1: Service connection timeout for: 256 [ 1665.955144][ T4035] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1665.964094][ T4035] ath9k_htc: Failed to initialize the device [ 1665.970425][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1666.299081][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.310013][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.319823][ T4043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1666.332673][ T4043] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1666.341765][ T4043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.354151][ T72] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1666.370225][ T4043] usb 2-1: config 0 descriptor?? [ 1666.879026][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1666.888119][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.896269][ T72] usb 6-1: Product: syz [ 1666.900503][ T72] usb 6-1: Manufacturer: syz [ 1666.905119][ T72] usb 6-1: SerialNumber: syz [ 1666.911906][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.919375][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.926780][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.934241][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.941678][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.949332][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.956744][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.964185][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.971626][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.979068][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.986474][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1666.993936][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.001374][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.008779][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.016229][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.023662][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.031116][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.038517][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.045985][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.053430][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.060889][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.068304][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.075764][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.083203][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.090661][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.098064][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.105522][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.112982][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.120439][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.127843][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.135307][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.142749][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.150211][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.157615][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.165073][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.172503][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.179955][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.187357][ T4043] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1667.198640][ T4043] plantronics 0003:047F:FFFF.00C8: No inputs registered, leaving [ 1667.220111][ T4043] plantronics 0003:047F:FFFF.00C8: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1667.234944][ T4043] usb 2-1: USB disconnect, device number 59 [ 1667.269934][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1667.838995][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1668.246382][ T718] usb 6-1: USB disconnect, device number 39 09:31:20 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0xa}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:20 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd8) 09:31:20 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xfa8) 09:31:20 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xfd8) 09:31:20 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x6}}}}]}}, 0x0) 09:31:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0xaa5, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x74, 0xe5, 0x1d, 0x8, 0x851, 0x1543, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa93, 0x4, 0x7, 0x6c, 0xa0, 0xca, [{{0x9, 0x4, 0xc7, 0xc, 0x1, 0x41, 0x3e, 0x67, 0x1f, [@generic={0xe8, 0x24, "36a27b6cccb445ad65e817becdece978441f28d7c22f76c543556e5730313167a89744b93d0f5ff30885eddf4b6897f7bfd0a1add742b0f239915ee6508a0c949275aef0c3a5d928331dec333b6e895e2b6ad27cd88f36fb5e3e449ef7ba856cf8ba504af77b9a88941c59f1e5617f7b49303467443d5a9b9bad9902a45c8669aeda0856e31cf6066ba535b8a4dff14b342af969de3bcbf6e32acb953fbef193d18eb7707443c64f65c5987e3ad7a1b3fb5c48be1625de5d7845d4f5169e5d395e3877223938346d0241a7fbbd7d872058fd62c5d2c59598e19c1e22ed1e4e545d8c03305f6d"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "ef43466be2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x79d85783, 0x8, 0x1000, 0x1c}, {0x6, 0x24, 0x1a, 0xfff}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x8, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x40, 0xf256, [0x4, 0x7b1d, 0x96, 0x0, 0x2, 0x400]}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}]}], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x2, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x1}]}}]}}, {{0x9, 0x4, 0x6c, 0x2, 0x9, 0xe3, 0x1c, 0x1, 0x6d, [], [{{0x9, 0x5, 0xa, 0x4, 0x10, 0x72, 0x16, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x6, 0x7, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x9, 0xc4, 0x1}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x44, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x8, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8, 0x6, 0x80, [@generic={0x3d, 0x5, "bde1fc6e9bb896e25da9f88fb8642699478621908b27b2330fe8dca38c9518b7672f4e41219610bee41fe7a0c4115a667fefa06f0e4ddb07048386"}, @generic={0x53, 0x11, "df41c704eb2fe3ac7308281d4780595408c3d437f061ec5482b37d1eaed0633eb1fee9310be6f7a43c34b6dcf88128783a4c9635e5bde1c594b22b9725a5fe40f61e6c578fbc53aedc7bf52e6553a3d937"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x59, 0x1, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x6, 0x9, 0x35, [@generic={0x3a, 0xe, "9d56e6d0eb0fd59b9bdf78de61de2cdb2a9f2d7d76defd856f90285893b16d394cbb5cd3847587433f0bafaed6aa94f401be98284497f8f4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x1b05}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6e, 0x3, 0x4}}]}}, {{0x9, 0x4, 0xd9, 0x0, 0xa, 0x75, 0x8f, 0x21, 0x6, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x8, 0x0, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x4b}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x400}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x80, 0x0, 0x81, [@generic={0xcd, 0x21, "8567edb878647869a70286292c7326bd98e14d3bc6fb10a7715572b5c74ec0bbc9e9f0d2eeac3775ea1ffd78f9cb62c4d0ae023e8e3bbc71e7b2ea88b29c6be4954fd880dc43af9fc66dc0a2b9110225ac62623c14ceb38aa20812970aa45967269cf37a0fae849ab532fe2c74c0574d0a1b06ff85aab0257041308a2a6edb109d8857b73e8c60129943c340fc976031612c68378062be91189412df26cd2f634e320291186e074770c57eaae4af6ff7fcd763fb2291db0929a9d317ee831b6f0deba1b75de5678f10b0c7"}, @generic={0x2a, 0x21, "480e3b9e0a8a84dcad6a3610a235c1336c8159c87bafdab401a679c38b9bb64075bd2b53cd849ace"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x5}, @generic={0x1c, 0xc, "2ed16f915d96214994bbbed7da291a355048901764dd3b98620c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0xff, 0x4, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0xe5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x5}, @generic={0x1f, 0x3, "3b880b61b4a7166ba3633e90457279556364b4d6ec1bbcd96b06a4eb65"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x2, 0x9, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}, @generic={0x94, 0xc, "f38dc76ffc95e7a0e155fb1e565eee11f84af49d86115589b3e0d3279888c7b44de194b13ddaa62adcbe33961d2776cca57851b727803bb2cd63136caa5d9b9dd63d43cd87268d4e05cb4967166dec0f2bca0cd4f58715c60feac886a28cc1ff4fc4a6397eb57bd97e834ba101c36541466c9ee58ffb4ab8ab2e7bf64bc72cdb803d2299a7e643308c4d114d02dbda16b780"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x68, 0x67, 0x31, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x410, 0xff, 0x3f, 0xbd, [@generic={0xb6, 0x21, "6cd9b3b0a8d904152106509f97b40bcb2fa0ebbd29a9f94b16453467421044885d866fda3a8524a9da032e7d3dc76d51d65f2872f483434452e11c8a661787347d3c5d13c0f6aac434365d8f83615218ec83f6f33fdc7784c498f6fbe9679e51d91b9f873032b056d626c6f3ae54fcc35557b70f5d36bac615159f1eaba76e4b7096d48f5a0f902e94c95ef9f617a8b0da1a34cee0b08e0707bbe74b0eeccc49f9758d654ada7a28447a1e41f97bd1acc6e80b67"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6}]}}, {{0x9, 0x5, 0x6ff85adb346fb188, 0x0, 0x0, 0x6, 0x1, 0x3}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x7f, 0xd4, 0x1, [@generic={0x69, 0xd, "09c6d3c9d49387f7c19fa98e93c74dbbe6c1018e0ae57bf38afb652d8585f93a3a32e3f8e38c37016253bdaecdad2807502814c9edefe2f1182ae5333617a9bd767545768751b04607004de71630b61bea19cc3a658aa57cb71eaea1562a92078e141e7e94f13e"}]}}]}}, {{0x9, 0x4, 0x3, 0x7f, 0xc, 0x29, 0x58, 0x5, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x80, 0x8a}}, @hid_hid={0x9, 0x21, 0x1, 0xc7, 0x1, {0x22, 0xdc3}}], [{{0x9, 0x5, 0x2, 0x2, 0x50, 0x4, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x7e, 0xac, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x800}, @generic={0xe6, 0xc, "40f84f83919224eca4bb94b454402359189d10af474f2d7bdc43c8d4ba39b89d482ef7d7bc5a2c7b96e383e24ff9262f2bb55c28069e87ade5c2e71abab8f78f349fc8cd63e308993ad68fec9b8d59ce7763018df03720c7a1ccaa88f7889f897e2029af2931a548000cf79398b9af21d70e14cbdb52333687d2b191eda71d1fb780e429a2d782279a8c61894d2ac7125dfb30abeaa7e357ee340798553f568464bb63de150cebf1a7a05968811dc37ecbaa18077913b5dd871fa4fb761c6a3cb025ccbf23432654dd12c95f60a44e39b38c96ba3668be37e736bf30dae1c601d5323b7d"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xef, 0x1, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x82, 0x7, 0x21}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x4c, 0x2, 0x7f}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x0, 0x80, 0x0, [@generic={0xa4, 0x5, "7a974a0fe360494e0576823d091f0b5f68de0e61b3f283e95171ec7ecb5332c39b6f9e92caf901142e29a07f08e21c066a10e73a4f748142b09fcb68c4ea393268c20479f8f7f470b4bcfbb504e2fe27ce624f0daa2c3936772b89552556f7729c1630ad45617613648e45549f42cf9913895177aae001f67b29344777010fc79e9f32a84a56cbe9109dda37a1aa9051c6668871e3b509c3605d5641770e78ac396d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x31, 0x8bac}]}}, {{0x9, 0x5, 0xa6dfb0bfc1a75be8, 0x0, 0x200, 0xc, 0x40, 0x0, [@generic={0x33, 0x37, "e089fd0d6a38c18c97c6aff80b82c1af716e076910dbe0328959d2362f4f3614c40715ff3b9f69ab398ba636c3e2676264"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x4a, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xfb, 0x7f, 0xeb, [@generic={0xb7, 0x31, "7f66552d9444353c1f8d37ef2a83c18a86cd857483027d47b43547738969055b5565285cfbdf6d0285989391e20458cc5de24b29d2052c92f318f157a11c46c977b7c583b1d090ee896dc8e1244ebce5709d46a0fb31a03b510f34faf3caffcc94b7d7dbcc5580c6e4973907dc454684fea600e593c397875a51c839b9ecf9e31c9a9a1ad9420395ba499bf82678e0633506ffbd43d464c5ca3489db214e86d3d243ce8c3c9576a93f9d860e80dce006f5c2de7624"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x8, 0x6, 0x5a, [@generic={0x3a, 0xd, "b90a1304197aa769e5ee4e9da1558ef4ec456bffe858b379136bb54444e01de4c7b533f5a788ca2f06101e911309cc86dcb83a40461f759b"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x4, 0x80, 0x3f}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x8, 0x80, 0xc1, [@generic={0xfb, 0x21, "0a599633e68065e4402ddaeb911df94497cd02a07725089e4155c7647cee5b99643286be937653395202728a24d4e01b2022c0616fecbed5f09063b226b4362a833207b7a800d0f5e06e59bcf71f39646e660e06ceb93766e533dfbf760b7f737951627092254e4df7553ad2b466a240827c55aa0226b1a137692a5257c2ed95cedb53e302945a2161f71d3845cd1945a1d9b31185292a955fbda40b656ad41ecec4d11f8803b02830bc59441bbd4e73eebf9cdd4bad9768745b9489dd5ec2c8764f7d5381262fd62bdb53f1f4ecc2df42b7b9dceae9775380a9b626147e9e23a77e198ebd422ac2daec764df69280d83379e256c197044868"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x310, 0xd4, 0x1, 0x40, 0x40, 0xfe}, 0xc, &(0x7f0000001040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0xa, 0x4}]}, 0xa, [{0x5f, &(0x7f0000001080)=@string={0x5f, 0x3, "6017920be1108edd94237da05b2c7c6071449c408ae43bffe49bf2ba140dae3f88ea01529ef5c6bce76dcea93a9427ad865453b5662ad667e4a8eb7854fbaecbc7e16779d491fa7c09aa2bc684a20ff408b18213bd6607938068b3c474"}}, {0x4c, &(0x7f0000001100)=@string={0x4c, 0x3, "74a79df656b6e849aef6d6e35b316045cfd7c6f122fe441b01c4092290d7cd07d1aedf061ecc9332be47b4ceda02ad86c7a823d97c89a1bd1735b40d621def8bba21b2619cc6ef0797ed"}}, {0x96, &(0x7f0000001180)=@string={0x96, 0x3, "dc025a2c716233b438c7d5c009cda767ac9297404f6ac7860bcc193caaf83b2039f6c7e028f1f189cfcf6b1269a94ef77f6a0c7b72edba4c778332a0b40e73fef9bad3e1f9016c3bc8c56fb2fa310eaac7c644d65983ca76b2b249778d3f7f69d76acb5de3831901690398c17eeddecf5d0371301b48ee2599d21c3e461465e889baf6320c4f82b407a73318a1a22e7c3f8cba9b"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x820}}, {0x3f, &(0x7f0000001280)=@string={0x3f, 0x3, "5dec2fb47029cbcc31704c6b4900f7b9f62e63244a279059ea4356489250118a4ccdd6950994138ffbb662f497af976db68a6f653784962d63afef2092"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x457}}, {0xed, &(0x7f0000001380)=@string={0xed, 0x3, "1d7e6d0666007fe0ac038ab69e16bb914d8eb48ebbdbca762fc13d8f3d425455dad527894833d7ea7c3f225c65a9d655712dc5b8be188ba44cb58c4efcb83e3e305ffd282c07499c870fe3999b59f44f2abdb1548252f111fa6d972b756beea4ba9e6e908e1559481e4f2489144a49cac284b1cfc78531f0e7348b231f49778f0add78e9bc169585d0296925f703cd7317b099340e142f2d957e5d8dbad72a861eb4b6fa4ee022d46286d445ec22d490760194ceed8c028317b27cbe36eff811c5ff0660f0ae10a898c56069fe936eee08862674f5ddfe6a56408f99754d1f748bcf51fbfcca609d88bf5d"}}, {0x8, &(0x7f0000001480)=@string={0x8, 0x3, "8f0eeb7ad64f"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9}}, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x21, 0xfa, {0xfa, 0x9, "c350839bff0b6c5785d6a8e6faca908c7a9e876adbafce9b94ee05e030a869cc06400ecdf5d9c7d6b9691a6eb020ea9c61b5546d797af9c6c2fffc6ea42c92dbf7f8d8b841ddbe374d0c1912fe9344cbcb0a4c3d3e80d73f6f1b8d5a6dd4b75b3b1db9abf7f2bcbbadc7483ec090873ac0f6a4a5c49e00f2acd59b8dbda9c1bfac92924d437b67ad55b77f8da9593e2b04454ec8bf2adf1bd2fbba33f5d177a4ec4dc4f32b5a055956a31c3a2786f7a5c2fe189f15c0d4274e132a7fba09cecb071a4888c1e046604620f3083ef222fa719de46d415a0e58aa8d370bb023207788a5766d2e9a2e07d3224ddc9fb2ba32bbb3d0caea8a521a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x2, "264ea705"}, @local=@item_4={0x3, 0x2, 0x7, "c64914c7"}, @main=@item_012={0x2, 0x0, 0xc, "d628"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffb, 0xfa, 0x1, {0x22, 0x7eb}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0x31, 0xb, "47de9dc76a1e8631534e62"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x9c, "9ab3bd7de383a5448458650342e9b2438a4555a7e71443b4839465cc0b589134db5197f0b87598bf15358aa86770643d21edeafa3d6973a9a1f16a8c43bc9ccbc101c7938e4ab45149d48cd2b7246adbd5859234759867bf0edd04d743f7caf31c6b5ea0a88d647678c14cf68ca09aa28275ff1a4d0c3f11c3ed5854f053712ca0a633b2161ea0a9153e3fa1d978d98914e69c7397c712b4debe3b06"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) 09:31:20 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0) 09:31:20 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf0) 09:31:20 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xfc0) 09:31:20 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x108) 09:31:20 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1008) 09:31:20 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xfd8) [ 1669.068940][ T72] usb 6-1: Service connection timeout for: 256 [ 1669.075199][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1669.083375][ T25] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1669.091988][ T72] ath9k_htc: Failed to initialize the device [ 1669.098391][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1669.448965][ T718] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1669.499003][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.510007][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.519826][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1669.532675][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1669.541814][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.552750][ T25] usb 2-1: config 0 descriptor?? [ 1670.049069][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1670.058160][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.066237][ T718] usb 6-1: Product: syz [ 1670.070454][ T718] usb 6-1: Manufacturer: syz [ 1670.075063][ T718] usb 6-1: SerialNumber: syz [ 1670.179615][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1670.509009][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 1670.515063][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 1670.524158][ T25] usb 2-1: USB disconnect, device number 60 [ 1670.769000][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1671.177405][ T25] usb 6-1: USB disconnect, device number 40 09:31:23 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0xf}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:23 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x120) 09:31:23 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1020) 09:31:23 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0) 09:31:23 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x7}}}}]}}, 0x0) 09:31:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0xaa5, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x74, 0xe5, 0x1d, 0x8, 0x851, 0x1543, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa93, 0x4, 0x7, 0x6c, 0xa0, 0xca, [{{0x9, 0x4, 0xc7, 0xc, 0x1, 0x41, 0x3e, 0x67, 0x1f, [@generic={0xe8, 0x24, "36a27b6cccb445ad65e817becdece978441f28d7c22f76c543556e5730313167a89744b93d0f5ff30885eddf4b6897f7bfd0a1add742b0f239915ee6508a0c949275aef0c3a5d928331dec333b6e895e2b6ad27cd88f36fb5e3e449ef7ba856cf8ba504af77b9a88941c59f1e5617f7b49303467443d5a9b9bad9902a45c8669aeda0856e31cf6066ba535b8a4dff14b342af969de3bcbf6e32acb953fbef193d18eb7707443c64f65c5987e3ad7a1b3fb5c48be1625de5d7845d4f5169e5d395e3877223938346d0241a7fbbd7d872058fd62c5d2c59598e19c1e22ed1e4e545d8c03305f6d"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "ef43466be2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x79d85783, 0x8, 0x1000, 0x1c}, {0x6, 0x24, 0x1a, 0xfff}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x8, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x40, 0xf256, [0x4, 0x7b1d, 0x96, 0x0, 0x2, 0x400]}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}]}], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x2, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x1}]}}]}}, {{0x9, 0x4, 0x6c, 0x2, 0x9, 0xe3, 0x1c, 0x1, 0x6d, [], [{{0x9, 0x5, 0xa, 0x4, 0x10, 0x72, 0x16, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x6, 0x7, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x9, 0xc4, 0x1}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x44, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x8, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8, 0x6, 0x80, [@generic={0x3d, 0x5, "bde1fc6e9bb896e25da9f88fb8642699478621908b27b2330fe8dca38c9518b7672f4e41219610bee41fe7a0c4115a667fefa06f0e4ddb07048386"}, @generic={0x53, 0x11, "df41c704eb2fe3ac7308281d4780595408c3d437f061ec5482b37d1eaed0633eb1fee9310be6f7a43c34b6dcf88128783a4c9635e5bde1c594b22b9725a5fe40f61e6c578fbc53aedc7bf52e6553a3d937"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x59, 0x1, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x6, 0x9, 0x35, [@generic={0x3a, 0xe, "9d56e6d0eb0fd59b9bdf78de61de2cdb2a9f2d7d76defd856f90285893b16d394cbb5cd3847587433f0bafaed6aa94f401be98284497f8f4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x1b05}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6e, 0x3, 0x4}}]}}, {{0x9, 0x4, 0xd9, 0x0, 0xa, 0x75, 0x8f, 0x21, 0x6, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x8, 0x0, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x4b}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x400}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x80, 0x0, 0x81, [@generic={0xcd, 0x21, "8567edb878647869a70286292c7326bd98e14d3bc6fb10a7715572b5c74ec0bbc9e9f0d2eeac3775ea1ffd78f9cb62c4d0ae023e8e3bbc71e7b2ea88b29c6be4954fd880dc43af9fc66dc0a2b9110225ac62623c14ceb38aa20812970aa45967269cf37a0fae849ab532fe2c74c0574d0a1b06ff85aab0257041308a2a6edb109d8857b73e8c60129943c340fc976031612c68378062be91189412df26cd2f634e320291186e074770c57eaae4af6ff7fcd763fb2291db0929a9d317ee831b6f0deba1b75de5678f10b0c7"}, @generic={0x2a, 0x21, "480e3b9e0a8a84dcad6a3610a235c1336c8159c87bafdab401a679c38b9bb64075bd2b53cd849ace"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x5}, @generic={0x1c, 0xc, "2ed16f915d96214994bbbed7da291a355048901764dd3b98620c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0xff, 0x4, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0xe5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x5}, @generic={0x1f, 0x3, "3b880b61b4a7166ba3633e90457279556364b4d6ec1bbcd96b06a4eb65"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x2, 0x9, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}, @generic={0x94, 0xc, "f38dc76ffc95e7a0e155fb1e565eee11f84af49d86115589b3e0d3279888c7b44de194b13ddaa62adcbe33961d2776cca57851b727803bb2cd63136caa5d9b9dd63d43cd87268d4e05cb4967166dec0f2bca0cd4f58715c60feac886a28cc1ff4fc4a6397eb57bd97e834ba101c36541466c9ee58ffb4ab8ab2e7bf64bc72cdb803d2299a7e643308c4d114d02dbda16b780"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x68, 0x67, 0x31, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x410, 0xff, 0x3f, 0xbd, [@generic={0xb6, 0x21, "6cd9b3b0a8d904152106509f97b40bcb2fa0ebbd29a9f94b16453467421044885d866fda3a8524a9da032e7d3dc76d51d65f2872f483434452e11c8a661787347d3c5d13c0f6aac434365d8f83615218ec83f6f33fdc7784c498f6fbe9679e51d91b9f873032b056d626c6f3ae54fcc35557b70f5d36bac615159f1eaba76e4b7096d48f5a0f902e94c95ef9f617a8b0da1a34cee0b08e0707bbe74b0eeccc49f9758d654ada7a28447a1e41f97bd1acc6e80b67"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6}]}}, {{0x9, 0x5, 0x6ff85adb346fb188, 0x0, 0x0, 0x6, 0x1, 0x3}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x7f, 0xd4, 0x1, [@generic={0x69, 0xd, "09c6d3c9d49387f7c19fa98e93c74dbbe6c1018e0ae57bf38afb652d8585f93a3a32e3f8e38c37016253bdaecdad2807502814c9edefe2f1182ae5333617a9bd767545768751b04607004de71630b61bea19cc3a658aa57cb71eaea1562a92078e141e7e94f13e"}]}}]}}, {{0x9, 0x4, 0x3, 0x7f, 0xc, 0x29, 0x58, 0x5, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x80, 0x8a}}, @hid_hid={0x9, 0x21, 0x1, 0xc7, 0x1, {0x22, 0xdc3}}], [{{0x9, 0x5, 0x2, 0x2, 0x50, 0x4, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x7e, 0xac, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x800}, @generic={0xe6, 0xc, "40f84f83919224eca4bb94b454402359189d10af474f2d7bdc43c8d4ba39b89d482ef7d7bc5a2c7b96e383e24ff9262f2bb55c28069e87ade5c2e71abab8f78f349fc8cd63e308993ad68fec9b8d59ce7763018df03720c7a1ccaa88f7889f897e2029af2931a548000cf79398b9af21d70e14cbdb52333687d2b191eda71d1fb780e429a2d782279a8c61894d2ac7125dfb30abeaa7e357ee340798553f568464bb63de150cebf1a7a05968811dc37ecbaa18077913b5dd871fa4fb761c6a3cb025ccbf23432654dd12c95f60a44e39b38c96ba3668be37e736bf30dae1c601d5323b7d"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xef, 0x1, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x82, 0x7, 0x21}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x4c, 0x2, 0x7f}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x0, 0x80, 0x0, [@generic={0xa4, 0x5, "7a974a0fe360494e0576823d091f0b5f68de0e61b3f283e95171ec7ecb5332c39b6f9e92caf901142e29a07f08e21c066a10e73a4f748142b09fcb68c4ea393268c20479f8f7f470b4bcfbb504e2fe27ce624f0daa2c3936772b89552556f7729c1630ad45617613648e45549f42cf9913895177aae001f67b29344777010fc79e9f32a84a56cbe9109dda37a1aa9051c6668871e3b509c3605d5641770e78ac396d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x31, 0x8bac}]}}, {{0x9, 0x5, 0xa6dfb0bfc1a75be8, 0x0, 0x200, 0xc, 0x40, 0x0, [@generic={0x33, 0x37, "e089fd0d6a38c18c97c6aff80b82c1af716e076910dbe0328959d2362f4f3614c40715ff3b9f69ab398ba636c3e2676264"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x4a, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xfb, 0x7f, 0xeb, [@generic={0xb7, 0x31, "7f66552d9444353c1f8d37ef2a83c18a86cd857483027d47b43547738969055b5565285cfbdf6d0285989391e20458cc5de24b29d2052c92f318f157a11c46c977b7c583b1d090ee896dc8e1244ebce5709d46a0fb31a03b510f34faf3caffcc94b7d7dbcc5580c6e4973907dc454684fea600e593c397875a51c839b9ecf9e31c9a9a1ad9420395ba499bf82678e0633506ffbd43d464c5ca3489db214e86d3d243ce8c3c9576a93f9d860e80dce006f5c2de7624"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x8, 0x6, 0x5a, [@generic={0x3a, 0xd, "b90a1304197aa769e5ee4e9da1558ef4ec456bffe858b379136bb54444e01de4c7b533f5a788ca2f06101e911309cc86dcb83a40461f759b"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x4, 0x80, 0x3f}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x8, 0x80, 0xc1, [@generic={0xfb, 0x21, "0a599633e68065e4402ddaeb911df94497cd02a07725089e4155c7647cee5b99643286be937653395202728a24d4e01b2022c0616fecbed5f09063b226b4362a833207b7a800d0f5e06e59bcf71f39646e660e06ceb93766e533dfbf760b7f737951627092254e4df7553ad2b466a240827c55aa0226b1a137692a5257c2ed95cedb53e302945a2161f71d3845cd1945a1d9b31185292a955fbda40b656ad41ecec4d11f8803b02830bc59441bbd4e73eebf9cdd4bad9768745b9489dd5ec2c8764f7d5381262fd62bdb53f1f4ecc2df42b7b9dceae9775380a9b626147e9e23a77e198ebd422ac2daec764df69280d83379e256c197044868"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x310, 0xd4, 0x1, 0x40, 0x40, 0xfe}, 0xc, &(0x7f0000001040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0xa, 0x4}]}, 0xa, [{0x5f, &(0x7f0000001080)=@string={0x5f, 0x3, "6017920be1108edd94237da05b2c7c6071449c408ae43bffe49bf2ba140dae3f88ea01529ef5c6bce76dcea93a9427ad865453b5662ad667e4a8eb7854fbaecbc7e16779d491fa7c09aa2bc684a20ff408b18213bd6607938068b3c474"}}, {0x4c, &(0x7f0000001100)=@string={0x4c, 0x3, "74a79df656b6e849aef6d6e35b316045cfd7c6f122fe441b01c4092290d7cd07d1aedf061ecc9332be47b4ceda02ad86c7a823d97c89a1bd1735b40d621def8bba21b2619cc6ef0797ed"}}, {0x96, &(0x7f0000001180)=@string={0x96, 0x3, "dc025a2c716233b438c7d5c009cda767ac9297404f6ac7860bcc193caaf83b2039f6c7e028f1f189cfcf6b1269a94ef77f6a0c7b72edba4c778332a0b40e73fef9bad3e1f9016c3bc8c56fb2fa310eaac7c644d65983ca76b2b249778d3f7f69d76acb5de3831901690398c17eeddecf5d0371301b48ee2599d21c3e461465e889baf6320c4f82b407a73318a1a22e7c3f8cba9b"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x820}}, {0x3f, &(0x7f0000001280)=@string={0x3f, 0x3, "5dec2fb47029cbcc31704c6b4900f7b9f62e63244a279059ea4356489250118a4ccdd6950994138ffbb662f497af976db68a6f653784962d63afef2092"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x457}}, {0xed, &(0x7f0000001380)=@string={0xed, 0x3, "1d7e6d0666007fe0ac038ab69e16bb914d8eb48ebbdbca762fc13d8f3d425455dad527894833d7ea7c3f225c65a9d655712dc5b8be188ba44cb58c4efcb83e3e305ffd282c07499c870fe3999b59f44f2abdb1548252f111fa6d972b756beea4ba9e6e908e1559481e4f2489144a49cac284b1cfc78531f0e7348b231f49778f0add78e9bc169585d0296925f703cd7317b099340e142f2d957e5d8dbad72a861eb4b6fa4ee022d46286d445ec22d490760194ceed8c028317b27cbe36eff811c5ff0660f0ae10a898c56069fe936eee08862674f5ddfe6a56408f99754d1f748bcf51fbfcca609d88bf5d"}}, {0x8, &(0x7f0000001480)=@string={0x8, 0x3, "8f0eeb7ad64f"}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9}}, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x21, 0xfa, {0xfa, 0x9, "c350839bff0b6c5785d6a8e6faca908c7a9e876adbafce9b94ee05e030a869cc06400ecdf5d9c7d6b9691a6eb020ea9c61b5546d797af9c6c2fffc6ea42c92dbf7f8d8b841ddbe374d0c1912fe9344cbcb0a4c3d3e80d73f6f1b8d5a6dd4b75b3b1db9abf7f2bcbbadc7483ec090873ac0f6a4a5c49e00f2acd59b8dbda9c1bfac92924d437b67ad55b77f8da9593e2b04454ec8bf2adf1bd2fbba33f5d177a4ec4dc4f32b5a055956a31c3a2786f7a5c2fe189f15c0d4274e132a7fba09cecb071a4888c1e046604620f3083ef222fa719de46d415a0e58aa8d370bb023207788a5766d2e9a2e07d3224ddc9fb2ba32bbb3d0caea8a521a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x2, "264ea705"}, @local=@item_4={0x3, 0x2, 0x7, "c64914c7"}, @main=@item_012={0x2, 0x0, 0xc, "d628"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffb, 0xfa, 0x1, {0x22, 0x7eb}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0x31, 0xb, "47de9dc76a1e8631534e62"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x9c, "9ab3bd7de383a5448458650342e9b2438a4555a7e71443b4839465cc0b589134db5197f0b87598bf15358aa86770643d21edeafa3d6973a9a1f16a8c43bc9ccbc101c7938e4ab45149d48cd2b7246adbd5859234759867bf0edd04d743f7caf31c6b5ea0a88d647678c14cf68ca09aa28275ff1a4d0c3f11c3ed5854f053712ca0a633b2161ea0a9153e3fa1d978d98914e69c7397c712b4debe3b06"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) 09:31:23 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x138) 09:31:23 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1008) 09:31:23 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1038) 09:31:23 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x150) 09:31:23 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1020) 09:31:23 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1050) [ 1671.988947][ T72] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1672.028933][ T718] usb 6-1: Service connection timeout for: 256 [ 1672.035188][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1672.046809][ T718] ath9k_htc: Failed to initialize the device [ 1672.053195][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1672.349018][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.360019][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.369845][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1672.382693][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1672.391804][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.408954][ T25] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1672.417596][ T72] usb 2-1: config 0 descriptor?? [ 1672.759000][ T72] usbhid 2-1:0.0: can't add hid device: -71 [ 1672.765051][ T72] usbhid: probe of 2-1:0.0 failed with error -71 [ 1672.774138][ T72] usb 2-1: USB disconnect, device number 61 [ 1672.929131][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1672.938201][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.946264][ T25] usb 6-1: Product: syz [ 1672.950477][ T25] usb 6-1: Manufacturer: syz [ 1672.955091][ T25] usb 6-1: SerialNumber: syz [ 1673.059515][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1673.629065][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1674.035697][ T718] usb 6-1: USB disconnect, device number 41 09:31:26 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x18}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:26 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x168) 09:31:26 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) 09:31:26 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1038) 09:31:26 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0xf}}}}]}}, 0x0) 09:31:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0xaa5, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x74, 0xe5, 0x1d, 0x8, 0x851, 0x1543, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa93, 0x4, 0x7, 0x6c, 0xa0, 0xca, [{{0x9, 0x4, 0xc7, 0xc, 0x1, 0x41, 0x3e, 0x67, 0x1f, [@generic={0xe8, 0x24, "36a27b6cccb445ad65e817becdece978441f28d7c22f76c543556e5730313167a89744b93d0f5ff30885eddf4b6897f7bfd0a1add742b0f239915ee6508a0c949275aef0c3a5d928331dec333b6e895e2b6ad27cd88f36fb5e3e449ef7ba856cf8ba504af77b9a88941c59f1e5617f7b49303467443d5a9b9bad9902a45c8669aeda0856e31cf6066ba535b8a4dff14b342af969de3bcbf6e32acb953fbef193d18eb7707443c64f65c5987e3ad7a1b3fb5c48be1625de5d7845d4f5169e5d395e3877223938346d0241a7fbbd7d872058fd62c5d2c59598e19c1e22ed1e4e545d8c03305f6d"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "ef43466be2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x79d85783, 0x8, 0x1000, 0x1c}, {0x6, 0x24, 0x1a, 0xfff}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x8, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x40, 0xf256, [0x4, 0x7b1d, 0x96, 0x0, 0x2, 0x400]}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}]}], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x2, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x1}]}}]}}, {{0x9, 0x4, 0x6c, 0x2, 0x9, 0xe3, 0x1c, 0x1, 0x6d, [], [{{0x9, 0x5, 0xa, 0x4, 0x10, 0x72, 0x16, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x6, 0x7, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x9, 0xc4, 0x1}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x44, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x8, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8, 0x6, 0x80, [@generic={0x3d, 0x5, "bde1fc6e9bb896e25da9f88fb8642699478621908b27b2330fe8dca38c9518b7672f4e41219610bee41fe7a0c4115a667fefa06f0e4ddb07048386"}, @generic={0x53, 0x11, "df41c704eb2fe3ac7308281d4780595408c3d437f061ec5482b37d1eaed0633eb1fee9310be6f7a43c34b6dcf88128783a4c9635e5bde1c594b22b9725a5fe40f61e6c578fbc53aedc7bf52e6553a3d937"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x59, 0x1, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x6, 0x9, 0x35, [@generic={0x3a, 0xe, "9d56e6d0eb0fd59b9bdf78de61de2cdb2a9f2d7d76defd856f90285893b16d394cbb5cd3847587433f0bafaed6aa94f401be98284497f8f4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x1b05}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6e, 0x3, 0x4}}]}}, {{0x9, 0x4, 0xd9, 0x0, 0xa, 0x75, 0x8f, 0x21, 0x6, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x8, 0x0, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x4b}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x400}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x80, 0x0, 0x81, [@generic={0xcd, 0x21, "8567edb878647869a70286292c7326bd98e14d3bc6fb10a7715572b5c74ec0bbc9e9f0d2eeac3775ea1ffd78f9cb62c4d0ae023e8e3bbc71e7b2ea88b29c6be4954fd880dc43af9fc66dc0a2b9110225ac62623c14ceb38aa20812970aa45967269cf37a0fae849ab532fe2c74c0574d0a1b06ff85aab0257041308a2a6edb109d8857b73e8c60129943c340fc976031612c68378062be91189412df26cd2f634e320291186e074770c57eaae4af6ff7fcd763fb2291db0929a9d317ee831b6f0deba1b75de5678f10b0c7"}, @generic={0x2a, 0x21, "480e3b9e0a8a84dcad6a3610a235c1336c8159c87bafdab401a679c38b9bb64075bd2b53cd849ace"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x5}, @generic={0x1c, 0xc, "2ed16f915d96214994bbbed7da291a355048901764dd3b98620c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0xff, 0x4, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0xe5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x5}, @generic={0x1f, 0x3, "3b880b61b4a7166ba3633e90457279556364b4d6ec1bbcd96b06a4eb65"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x2, 0x9, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}, @generic={0x94, 0xc, "f38dc76ffc95e7a0e155fb1e565eee11f84af49d86115589b3e0d3279888c7b44de194b13ddaa62adcbe33961d2776cca57851b727803bb2cd63136caa5d9b9dd63d43cd87268d4e05cb4967166dec0f2bca0cd4f58715c60feac886a28cc1ff4fc4a6397eb57bd97e834ba101c36541466c9ee58ffb4ab8ab2e7bf64bc72cdb803d2299a7e643308c4d114d02dbda16b780"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x68, 0x67, 0x31, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x410, 0xff, 0x3f, 0xbd, [@generic={0xb6, 0x21, "6cd9b3b0a8d904152106509f97b40bcb2fa0ebbd29a9f94b16453467421044885d866fda3a8524a9da032e7d3dc76d51d65f2872f483434452e11c8a661787347d3c5d13c0f6aac434365d8f83615218ec83f6f33fdc7784c498f6fbe9679e51d91b9f873032b056d626c6f3ae54fcc35557b70f5d36bac615159f1eaba76e4b7096d48f5a0f902e94c95ef9f617a8b0da1a34cee0b08e0707bbe74b0eeccc49f9758d654ada7a28447a1e41f97bd1acc6e80b67"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6}]}}, {{0x9, 0x5, 0x6ff85adb346fb188, 0x0, 0x0, 0x6, 0x1, 0x3}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x7f, 0xd4, 0x1, [@generic={0x69, 0xd, "09c6d3c9d49387f7c19fa98e93c74dbbe6c1018e0ae57bf38afb652d8585f93a3a32e3f8e38c37016253bdaecdad2807502814c9edefe2f1182ae5333617a9bd767545768751b04607004de71630b61bea19cc3a658aa57cb71eaea1562a92078e141e7e94f13e"}]}}]}}, {{0x9, 0x4, 0x3, 0x7f, 0xc, 0x29, 0x58, 0x5, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x80, 0x8a}}, @hid_hid={0x9, 0x21, 0x1, 0xc7, 0x1, {0x22, 0xdc3}}], [{{0x9, 0x5, 0x2, 0x2, 0x50, 0x4, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x7e, 0xac, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x800}, @generic={0xe6, 0xc, "40f84f83919224eca4bb94b454402359189d10af474f2d7bdc43c8d4ba39b89d482ef7d7bc5a2c7b96e383e24ff9262f2bb55c28069e87ade5c2e71abab8f78f349fc8cd63e308993ad68fec9b8d59ce7763018df03720c7a1ccaa88f7889f897e2029af2931a548000cf79398b9af21d70e14cbdb52333687d2b191eda71d1fb780e429a2d782279a8c61894d2ac7125dfb30abeaa7e357ee340798553f568464bb63de150cebf1a7a05968811dc37ecbaa18077913b5dd871fa4fb761c6a3cb025ccbf23432654dd12c95f60a44e39b38c96ba3668be37e736bf30dae1c601d5323b7d"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xef, 0x1, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x82, 0x7, 0x21}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x4c, 0x2, 0x7f}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x0, 0x80, 0x0, [@generic={0xa4, 0x5, "7a974a0fe360494e0576823d091f0b5f68de0e61b3f283e95171ec7ecb5332c39b6f9e92caf901142e29a07f08e21c066a10e73a4f748142b09fcb68c4ea393268c20479f8f7f470b4bcfbb504e2fe27ce624f0daa2c3936772b89552556f7729c1630ad45617613648e45549f42cf9913895177aae001f67b29344777010fc79e9f32a84a56cbe9109dda37a1aa9051c6668871e3b509c3605d5641770e78ac396d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x31, 0x8bac}]}}, {{0x9, 0x5, 0xa6dfb0bfc1a75be8, 0x0, 0x200, 0xc, 0x40, 0x0, [@generic={0x33, 0x37, "e089fd0d6a38c18c97c6aff80b82c1af716e076910dbe0328959d2362f4f3614c40715ff3b9f69ab398ba636c3e2676264"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x4a, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xfb, 0x7f, 0xeb, [@generic={0xb7, 0x31, "7f66552d9444353c1f8d37ef2a83c18a86cd857483027d47b43547738969055b5565285cfbdf6d0285989391e20458cc5de24b29d2052c92f318f157a11c46c977b7c583b1d090ee896dc8e1244ebce5709d46a0fb31a03b510f34faf3caffcc94b7d7dbcc5580c6e4973907dc454684fea600e593c397875a51c839b9ecf9e31c9a9a1ad9420395ba499bf82678e0633506ffbd43d464c5ca3489db214e86d3d243ce8c3c9576a93f9d860e80dce006f5c2de7624"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x8, 0x6, 0x5a, [@generic={0x3a, 0xd, "b90a1304197aa769e5ee4e9da1558ef4ec456bffe858b379136bb54444e01de4c7b533f5a788ca2f06101e911309cc86dcb83a40461f759b"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x4, 0x80, 0x3f}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x8, 0x80, 0xc1, [@generic={0xfb, 0x21, "0a599633e68065e4402ddaeb911df94497cd02a07725089e4155c7647cee5b99643286be937653395202728a24d4e01b2022c0616fecbed5f09063b226b4362a833207b7a800d0f5e06e59bcf71f39646e660e06ceb93766e533dfbf760b7f737951627092254e4df7553ad2b466a240827c55aa0226b1a137692a5257c2ed95cedb53e302945a2161f71d3845cd1945a1d9b31185292a955fbda40b656ad41ecec4d11f8803b02830bc59441bbd4e73eebf9cdd4bad9768745b9489dd5ec2c8764f7d5381262fd62bdb53f1f4ecc2df42b7b9dceae9775380a9b626147e9e23a77e198ebd422ac2daec764df69280d83379e256c197044868"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x310, 0xd4, 0x1, 0x40, 0x40, 0xfe}, 0xc, &(0x7f0000001040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0xa, 0x4}]}, 0xa, [{0x5f, &(0x7f0000001080)=@string={0x5f, 0x3, "6017920be1108edd94237da05b2c7c6071449c408ae43bffe49bf2ba140dae3f88ea01529ef5c6bce76dcea93a9427ad865453b5662ad667e4a8eb7854fbaecbc7e16779d491fa7c09aa2bc684a20ff408b18213bd6607938068b3c474"}}, {0x4c, &(0x7f0000001100)=@string={0x4c, 0x3, "74a79df656b6e849aef6d6e35b316045cfd7c6f122fe441b01c4092290d7cd07d1aedf061ecc9332be47b4ceda02ad86c7a823d97c89a1bd1735b40d621def8bba21b2619cc6ef0797ed"}}, {0x96, &(0x7f0000001180)=@string={0x96, 0x3, "dc025a2c716233b438c7d5c009cda767ac9297404f6ac7860bcc193caaf83b2039f6c7e028f1f189cfcf6b1269a94ef77f6a0c7b72edba4c778332a0b40e73fef9bad3e1f9016c3bc8c56fb2fa310eaac7c644d65983ca76b2b249778d3f7f69d76acb5de3831901690398c17eeddecf5d0371301b48ee2599d21c3e461465e889baf6320c4f82b407a73318a1a22e7c3f8cba9b"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x820}}, {0x3f, &(0x7f0000001280)=@string={0x3f, 0x3, "5dec2fb47029cbcc31704c6b4900f7b9f62e63244a279059ea4356489250118a4ccdd6950994138ffbb662f497af976db68a6f653784962d63afef2092"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x457}}, {0xed, &(0x7f0000001380)=@string={0xed, 0x3, "1d7e6d0666007fe0ac038ab69e16bb914d8eb48ebbdbca762fc13d8f3d425455dad527894833d7ea7c3f225c65a9d655712dc5b8be188ba44cb58c4efcb83e3e305ffd282c07499c870fe3999b59f44f2abdb1548252f111fa6d972b756beea4ba9e6e908e1559481e4f2489144a49cac284b1cfc78531f0e7348b231f49778f0add78e9bc169585d0296925f703cd7317b099340e142f2d957e5d8dbad72a861eb4b6fa4ee022d46286d445ec22d490760194ceed8c028317b27cbe36eff811c5ff0660f0ae10a898c56069fe936eee08862674f5ddfe6a56408f99754d1f748bcf51fbfcca609d88bf5d"}}, {0x8, &(0x7f0000001480)=@string={0x8, 0x3, "8f0eeb7ad64f"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9}}, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x21, 0xfa, {0xfa, 0x9, "c350839bff0b6c5785d6a8e6faca908c7a9e876adbafce9b94ee05e030a869cc06400ecdf5d9c7d6b9691a6eb020ea9c61b5546d797af9c6c2fffc6ea42c92dbf7f8d8b841ddbe374d0c1912fe9344cbcb0a4c3d3e80d73f6f1b8d5a6dd4b75b3b1db9abf7f2bcbbadc7483ec090873ac0f6a4a5c49e00f2acd59b8dbda9c1bfac92924d437b67ad55b77f8da9593e2b04454ec8bf2adf1bd2fbba33f5d177a4ec4dc4f32b5a055956a31c3a2786f7a5c2fe189f15c0d4274e132a7fba09cecb071a4888c1e046604620f3083ef222fa719de46d415a0e58aa8d370bb023207788a5766d2e9a2e07d3224ddc9fb2ba32bbb3d0caea8a521a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x2, "264ea705"}, @local=@item_4={0x3, 0x2, 0x7, "c64914c7"}, @main=@item_012={0x2, 0x0, 0xc, "d628"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffb, 0xfa, 0x1, {0x22, 0x7eb}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0x31, 0xb, "47de9dc76a1e8631534e62"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x9c, "9ab3bd7de383a5448458650342e9b2438a4555a7e71443b4839465cc0b589134db5197f0b87598bf15358aa86770643d21edeafa3d6973a9a1f16a8c43bc9ccbc101c7938e4ab45149d48cd2b7246adbd5859234759867bf0edd04d743f7caf31c6b5ea0a88d647678c14cf68ca09aa28275ff1a4d0c3f11c3ed5854f053712ca0a633b2161ea0a9153e3fa1d978d98914e69c7397c712b4debe3b06"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) 09:31:26 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1080) 09:31:26 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1050) 09:31:26 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x180) 09:31:26 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) 09:31:26 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x198) 09:31:26 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1080) [ 1674.848993][ T9824] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1674.908938][ T25] usb 6-1: Service connection timeout for: 256 [ 1674.915217][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1674.923819][ T25] ath9k_htc: Failed to initialize the device [ 1674.933291][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1675.239145][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.250148][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1675.259954][ T9824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1675.272805][ T9824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1675.281895][ T9824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.292954][ T9824] usb 2-1: config 0 descriptor?? [ 1675.359045][ T718] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1675.889119][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1675.898263][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.906337][ T718] usb 6-1: Product: syz [ 1675.910549][ T718] usb 6-1: Manufacturer: syz [ 1675.915174][ T718] usb 6-1: SerialNumber: syz [ 1675.999768][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1676.239003][ T9824] usbhid 2-1:0.0: can't add hid device: -71 [ 1676.245043][ T9824] usbhid: probe of 2-1:0.0 failed with error -71 [ 1676.253541][ T9824] usb 2-1: USB disconnect, device number 62 [ 1676.569067][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1676.975490][ T25] usb 6-1: USB disconnect, device number 42 09:31:29 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x1d}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:29 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1098) 09:31:29 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b0) 09:31:29 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x10}}}}]}}, 0x0) 09:31:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1098) 09:31:29 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000001c0)={0x2, 0x2, 0x100000}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100407f04ffff0000f5ffff00090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0xffffffd7, 0x21, 0x4, 0x0, 0x1, {0x22, 0x1}}}}, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x325, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8, 0xb9, 0x1, {0x22, 0xaea}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x1, 0xe}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x4, 0x0, 0x0, 0x1f}, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x419}}, {0x6b, &(0x7f0000000380)=ANY=[@ANYRES32=r1]}]}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:31:29 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10b0) 09:31:29 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c8) 09:31:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10b0) 09:31:29 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1e0) 09:31:29 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10c8) 09:31:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10c8) [ 1677.788949][ T718] usb 6-1: Service connection timeout for: 256 [ 1677.795177][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1677.807819][ T9824] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1677.819965][ T718] ath9k_htc: Failed to initialize the device [ 1677.826916][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1678.099104][ T9824] usb 2-1: no configurations [ 1678.103753][ T9824] usb 2-1: can't read configurations, error -22 [ 1678.218990][ T25] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1678.259053][ T9824] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1678.539034][ T9824] usb 2-1: no configurations [ 1678.543691][ T9824] usb 2-1: can't read configurations, error -22 [ 1678.550557][ T9824] usb usb2-port1: attempt power cycle [ 1678.819147][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1678.828266][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.836319][ T25] usb 6-1: Product: syz [ 1678.840526][ T25] usb 6-1: Manufacturer: syz [ 1678.845137][ T25] usb 6-1: SerialNumber: syz [ 1678.959066][ T9824] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1678.979564][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1679.099032][ T9824] usb 2-1: no configurations [ 1679.103717][ T9824] usb 2-1: can't read configurations, error -22 [ 1679.259066][ T9824] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1679.409082][ T9824] usb 2-1: no configurations [ 1679.413727][ T9824] usb 2-1: can't read configurations, error -22 [ 1679.420758][ T9824] usb usb2-port1: unable to enumerate USB device [ 1679.599120][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1680.005496][ T72] usb 6-1: USB disconnect, device number 43 09:31:32 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x3e}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:32 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1f8) 09:31:32 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10e0) 09:31:32 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10e0) 09:31:32 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x12}}}}]}}, 0x0) 09:31:32 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000001c0)={0x2, 0x2, 0x100000}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100407f04ffff0000f5ffff00090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0xffffffd7, 0x21, 0x4, 0x0, 0x1, {0x22, 0x1}}}}, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x325, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8, 0xb9, 0x1, {0x22, 0xaea}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x1, 0xe}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x4, 0x0, 0x0, 0x1f}, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x419}}, {0x6b, &(0x7f0000000380)=ANY=[@ANYRES32=r1]}]}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) (async) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0) (async) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000001c0)={0x2, 0x2, 0x100000}) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100407f04ffff0000f5ffff00090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0xffffffd7, 0x21, 0x4, 0x0, 0x1, {0x22, 0x1}}}}, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x325, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8, 0xb9, 0x1, {0x22, 0xaea}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x1, 0xe}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x4, 0x0, 0x0, 0x1f}, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x419}}, {0x6b, &(0x7f0000000380)=ANY=[@ANYRES32=r1]}]}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) 09:31:32 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x210) 09:31:32 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10f8) 09:31:32 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x10f8) 09:31:32 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x228) 09:31:32 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1110) 09:31:32 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x240) [ 1680.838960][ T25] usb 6-1: Service connection timeout for: 256 [ 1680.845209][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1680.854017][ T25] ath9k_htc: Failed to initialize the device [ 1680.863456][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1680.968954][ T9824] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1681.248927][ T72] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1681.249027][ T9824] usb 2-1: no configurations [ 1681.261250][ T9824] usb 2-1: can't read configurations, error -22 [ 1681.408981][ T9824] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1681.689145][ T9824] usb 2-1: no configurations [ 1681.693773][ T9824] usb 2-1: can't read configurations, error -22 [ 1681.705008][ T9824] usb usb2-port1: attempt power cycle [ 1681.839045][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1681.848168][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.856366][ T72] usb 6-1: Product: syz [ 1681.860576][ T72] usb 6-1: Manufacturer: syz [ 1681.865194][ T72] usb 6-1: SerialNumber: syz [ 1681.959603][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1682.119006][ T9824] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1682.249104][ T9824] usb 2-1: no configurations [ 1682.253762][ T9824] usb 2-1: can't read configurations, error -22 [ 1682.408934][ T9824] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1682.559047][ T9824] usb 2-1: no configurations [ 1682.563784][ T9824] usb 2-1: can't read configurations, error -22 [ 1682.572144][ T9824] usb usb2-port1: unable to enumerate USB device [ 1682.598997][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1683.005667][ T25] usb 6-1: USB disconnect, device number 44 09:31:35 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x48}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:35 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1110) 09:31:35 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1128) 09:31:35 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x258) 09:31:35 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x0}}}}]}}, 0x0) 09:31:35 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0) (async, rerun: 32) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async, rerun: 32) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000001c0)={0x2, 0x2, 0x100000}) (async, rerun: 64) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100407f04ffff0000f5ffff00090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0xffffffd7, 0x21, 0x4, 0x0, 0x1, {0x22, 0x1}}}}, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x325, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8, 0xb9, 0x1, {0x22, 0xaea}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x1, 0xe}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x4, 0x0, 0x0, 0x1f}, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x419}}, {0x6b, &(0x7f0000000380)=ANY=[@ANYRES32=r1]}]}) (async, rerun: 64) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:31:35 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x270) 09:31:35 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1140) 09:31:35 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1128) 09:31:35 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x288) 09:31:35 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1140) 09:31:35 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1158) [ 1683.878956][ T72] usb 6-1: Service connection timeout for: 256 [ 1683.885171][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1683.893765][ T72] ath9k_htc: Failed to initialize the device [ 1683.901874][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1684.008947][ T9824] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1684.299040][ T9824] usb 2-1: no configurations [ 1684.303730][ T9824] usb 2-1: can't read configurations, error -22 [ 1684.308968][ T25] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1684.468928][ T9824] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1684.769044][ T9824] usb 2-1: no configurations [ 1684.773695][ T9824] usb 2-1: can't read configurations, error -22 [ 1684.780817][ T9824] usb usb2-port1: attempt power cycle [ 1684.829089][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1684.838187][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.846413][ T25] usb 6-1: Product: syz [ 1684.850724][ T25] usb 6-1: Manufacturer: syz [ 1684.855346][ T25] usb 6-1: SerialNumber: syz [ 1684.949496][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1685.219043][ T9824] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1685.359171][ T9824] usb 2-1: no configurations [ 1685.363828][ T9824] usb 2-1: can't read configurations, error -22 [ 1685.519042][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1685.538969][ T9824] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1685.679084][ T9824] usb 2-1: no configurations [ 1685.683738][ T9824] usb 2-1: can't read configurations, error -22 [ 1685.690709][ T9824] usb usb2-port1: unable to enumerate USB device [ 1685.925644][ T9824] usb 6-1: USB disconnect, device number 45 09:31:38 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x4c}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:38 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2a0) 09:31:38 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1158) 09:31:38 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1170) 09:31:38 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x2}}}}]}}, 0x0) 09:31:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x9, 0x7, {0x7, 0x8, "fe0d014a13"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xe, 0xe7, "954ccb5afc2afeb48e479191c01ff9741f390f39ad5d7af168b49e0c4993bf5c2058d5e7df76078db6fe3ccf2f5ba5a14857bf6f71961669c02c9bc6432a9136ef42346b5e9763d0eae86e6863c8e85075e8449e7686be969be5cc82b5283383fb14c07fe41a954709a3b44b66806d5ffa0be16edd821788a04bfe275dadb772103217f04a9feacc145d9b5e1dff766594baf3f19ae933d25b03316729e5bd3d67d0eef89d6ae0d64ceb0b3dd8abeacaf03b040d8ab5d4932082351548eb97bf888d74a789f63072e088bbeeb39d57b355ddef99408fabbcc01d0ed6f9ac09bb1a994aef0488df"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x81, 0x2, "db5a"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '9'}, &(0x7f0000000400)={0x20, 0x83, 0x3, "71d765"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "141e"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "c2502e"}}) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000cc0)={0x0, 0x2, 0x2b, {0x2b, 0x6, "2bebb32666138f841bc231a01ea58b5d3512df5780a5611a543e2dfff18193ed5a4679d340fdeb6706"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000d40)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x6, 0xd93}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x20, 0x3, "c1b2d298", '(%P\a'}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x9, 0x19, 0xb1, 0x1, 0x6}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e40)={0x0, 0x18, 0x4c, "74f299492fb74585577cd648bc5a902a6b101aad672cf497d66ef94cd8100ac0f4fb04b02e8e87f1b5f2bfbb6d0faf907b29dad0e734f9a5450e028e3438eb74e4834d7f78fd0a0f54566c92"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x60, 0x20, [0xff]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x3f8}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x3a}, &(0x7f0000001040)={0x40, 0xb, 0x2, ';['}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0xfffd}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001140)={0x40, 0x19, 0x2, "5483"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001200)={0x40, 0x1e, 0x1}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x1}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0xd, 0x99, {0x99, 0x24, "300c469822db27737265edf59d0de90c8c57a2bcc3de83db6723f2faa962c897c0a3e4c8d706ba36ae05c1bfa01d0a377b54bd7b2ea5d21f1931a5ee7572132071d05a87bf7055ab9b517f3759562c1023982bd7096573f68d170489fc42ab5d4136a17864ebcb80c8f01e76b3ee023d9fff06ae953618cc1b352ab7e8e26942a8e2e7b20e468b07ad65719ee7e9d6a208120508961ce2"}}, &(0x7f0000000600)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "2c33b4aac8bf0a41dff413f65f88e3a5c7033ec69b7a1fee0c2f3cf13b1cc5965eaf365c06fc797ce570c8c3f0cf9656ba1bf8a108e7d841ff333534eefc7ace8575acdad5e03ad1f341ecfb0206db323e48bef757eacbe47f43498ab191604955f10b6f87bb62fdfc9b23b25b180da09322d3457e7c063268fd0caeea5a63fbf7e821c4bf2dea0fe145c5532e350aaaeb86cbbcce303830943103e5356393095132dd2930ef74f68a68532f9a0a995a8d81bba7e0cef1b35da74fcbb328077d73"}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x1, 0x1, "e4add049", "db07e41c"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xe, 0x22, "3eb3e02b9d414125203e3d000ed9e2feca26240e77c8c7c6d91b1a4463496bdd0e32"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x120, 0x8, [0x0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "a0ab"}, &(0x7f0000000a00)={0x40, 0xf, 0x2}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "e808"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x7}}) 09:31:38 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1188) 09:31:38 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2b8) 09:31:38 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1170) 09:31:38 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d0) 09:31:38 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1188) 09:31:38 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11a0) [ 1686.748967][ T25] usb 6-1: Service connection timeout for: 256 [ 1686.755188][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1686.764153][ T25] ath9k_htc: Failed to initialize the device [ 1686.770592][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1687.068948][ T718] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1687.139097][ T9824] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1687.439171][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.450159][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.459955][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1687.472801][ T718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1687.481903][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.496449][ T718] usb 2-1: config 0 descriptor?? [ 1687.799116][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1687.808212][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.816418][ T9824] usb 6-1: Product: syz [ 1687.820630][ T9824] usb 6-1: Manufacturer: syz [ 1687.825250][ T9824] usb 6-1: SerialNumber: syz [ 1687.929578][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1687.990057][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1687.997469][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.005061][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.012518][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.020015][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.027431][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.034901][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.042437][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.049908][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.057324][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.064770][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.072228][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.079673][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.087075][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.094520][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.101972][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.109408][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.116820][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.124263][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.131719][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.139168][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.146582][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.154031][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.161494][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.168954][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.176370][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.183835][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.191294][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.198707][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.206172][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.213605][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.221059][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.228460][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.235913][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.243351][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.250823][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.258246][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.265701][ T718] plantronics 0003:047F:FFFF.00C9: unknown main item tag 0x0 [ 1688.273872][ T718] plantronics 0003:047F:FFFF.00C9: No inputs registered, leaving [ 1688.284021][ T718] plantronics 0003:047F:FFFF.00C9: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1688.748993][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1689.155425][ T25] usb 6-1: USB disconnect, device number 46 [ 1689.239058][ T4044] kworker/dying (4044) used greatest stack depth: 21128 bytes left 09:31:41 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x68}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:41 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e8) 09:31:41 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11a0) 09:31:41 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11b8) 09:31:41 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x3}}}}]}}, 0x0) 09:31:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x9, 0x7, {0x7, 0x8, "fe0d014a13"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xe, 0xe7, "954ccb5afc2afeb48e479191c01ff9741f390f39ad5d7af168b49e0c4993bf5c2058d5e7df76078db6fe3ccf2f5ba5a14857bf6f71961669c02c9bc6432a9136ef42346b5e9763d0eae86e6863c8e85075e8449e7686be969be5cc82b5283383fb14c07fe41a954709a3b44b66806d5ffa0be16edd821788a04bfe275dadb772103217f04a9feacc145d9b5e1dff766594baf3f19ae933d25b03316729e5bd3d67d0eef89d6ae0d64ceb0b3dd8abeacaf03b040d8ab5d4932082351548eb97bf888d74a789f63072e088bbeeb39d57b355ddef99408fabbcc01d0ed6f9ac09bb1a994aef0488df"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x81, 0x2, "db5a"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '9'}, &(0x7f0000000400)={0x20, 0x83, 0x3, "71d765"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "141e"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "c2502e"}}) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000cc0)={0x0, 0x2, 0x2b, {0x2b, 0x6, "2bebb32666138f841bc231a01ea58b5d3512df5780a5611a543e2dfff18193ed5a4679d340fdeb6706"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000d40)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x6, 0xd93}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x20, 0x3, "c1b2d298", '(%P\a'}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x9, 0x19, 0xb1, 0x1, 0x6}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e40)={0x0, 0x18, 0x4c, "74f299492fb74585577cd648bc5a902a6b101aad672cf497d66ef94cd8100ac0f4fb04b02e8e87f1b5f2bfbb6d0faf907b29dad0e734f9a5450e028e3438eb74e4834d7f78fd0a0f54566c92"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x60, 0x20, [0xff]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x3f8}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x3a}, &(0x7f0000001040)={0x40, 0xb, 0x2, ';['}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0xfffd}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001140)={0x40, 0x19, 0x2, "5483"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001200)={0x40, 0x1e, 0x1}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x1}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0xd, 0x99, {0x99, 0x24, "300c469822db27737265edf59d0de90c8c57a2bcc3de83db6723f2faa962c897c0a3e4c8d706ba36ae05c1bfa01d0a377b54bd7b2ea5d21f1931a5ee7572132071d05a87bf7055ab9b517f3759562c1023982bd7096573f68d170489fc42ab5d4136a17864ebcb80c8f01e76b3ee023d9fff06ae953618cc1b352ab7e8e26942a8e2e7b20e468b07ad65719ee7e9d6a208120508961ce2"}}, &(0x7f0000000600)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "2c33b4aac8bf0a41dff413f65f88e3a5c7033ec69b7a1fee0c2f3cf13b1cc5965eaf365c06fc797ce570c8c3f0cf9656ba1bf8a108e7d841ff333534eefc7ace8575acdad5e03ad1f341ecfb0206db323e48bef757eacbe47f43498ab191604955f10b6f87bb62fdfc9b23b25b180da09322d3457e7c063268fd0caeea5a63fbf7e821c4bf2dea0fe145c5532e350aaaeb86cbbcce303830943103e5356393095132dd2930ef74f68a68532f9a0a995a8d81bba7e0cef1b35da74fcbb328077d73"}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x1, 0x1, "e4add049", "db07e41c"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xe, 0x22, "3eb3e02b9d414125203e3d000ed9e2feca26240e77c8c7c6d91b1a4463496bdd0e32"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x120, 0x8, [0x0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "a0ab"}, &(0x7f0000000a00)={0x40, 0xf, 0x2}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "e808"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x9, 0x7, {0x7, 0x8, "fe0d014a13"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xe, 0xe7, "954ccb5afc2afeb48e479191c01ff9741f390f39ad5d7af168b49e0c4993bf5c2058d5e7df76078db6fe3ccf2f5ba5a14857bf6f71961669c02c9bc6432a9136ef42346b5e9763d0eae86e6863c8e85075e8449e7686be969be5cc82b5283383fb14c07fe41a954709a3b44b66806d5ffa0be16edd821788a04bfe275dadb772103217f04a9feacc145d9b5e1dff766594baf3f19ae933d25b03316729e5bd3d67d0eef89d6ae0d64ceb0b3dd8abeacaf03b040d8ab5d4932082351548eb97bf888d74a789f63072e088bbeeb39d57b355ddef99408fabbcc01d0ed6f9ac09bb1a994aef0488df"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x81, 0x2, "db5a"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '9'}, &(0x7f0000000400)={0x20, 0x83, 0x3, "71d765"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "141e"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "c2502e"}}) (async) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000cc0)={0x0, 0x2, 0x2b, {0x2b, 0x6, "2bebb32666138f841bc231a01ea58b5d3512df5780a5611a543e2dfff18193ed5a4679d340fdeb6706"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000d40)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x6, 0xd93}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x20, 0x3, "c1b2d298", '(%P\a'}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x9, 0x19, 0xb1, 0x1, 0x6}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e40)={0x0, 0x18, 0x4c, "74f299492fb74585577cd648bc5a902a6b101aad672cf497d66ef94cd8100ac0f4fb04b02e8e87f1b5f2bfbb6d0faf907b29dad0e734f9a5450e028e3438eb74e4834d7f78fd0a0f54566c92"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x60, 0x20, [0xff]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x3f8}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x3a}, &(0x7f0000001040)={0x40, 0xb, 0x2, ';['}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0xfffd}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001140)={0x40, 0x19, 0x2, "5483"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001200)={0x40, 0x1e, 0x1}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x1}}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0xd, 0x99, {0x99, 0x24, "300c469822db27737265edf59d0de90c8c57a2bcc3de83db6723f2faa962c897c0a3e4c8d706ba36ae05c1bfa01d0a377b54bd7b2ea5d21f1931a5ee7572132071d05a87bf7055ab9b517f3759562c1023982bd7096573f68d170489fc42ab5d4136a17864ebcb80c8f01e76b3ee023d9fff06ae953618cc1b352ab7e8e26942a8e2e7b20e468b07ad65719ee7e9d6a208120508961ce2"}}, &(0x7f0000000600)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "2c33b4aac8bf0a41dff413f65f88e3a5c7033ec69b7a1fee0c2f3cf13b1cc5965eaf365c06fc797ce570c8c3f0cf9656ba1bf8a108e7d841ff333534eefc7ace8575acdad5e03ad1f341ecfb0206db323e48bef757eacbe47f43498ab191604955f10b6f87bb62fdfc9b23b25b180da09322d3457e7c063268fd0caeea5a63fbf7e821c4bf2dea0fe145c5532e350aaaeb86cbbcce303830943103e5356393095132dd2930ef74f68a68532f9a0a995a8d81bba7e0cef1b35da74fcbb328077d73"}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x1, 0x1, "e4add049", "db07e41c"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xe, 0x22, "3eb3e02b9d414125203e3d000ed9e2feca26240e77c8c7c6d91b1a4463496bdd0e32"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x120, 0x8, [0x0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "a0ab"}, &(0x7f0000000a00)={0x40, 0xf, 0x2}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "e808"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x7}}) (async) [ 1689.631203][ T72] usb 2-1: USB disconnect, device number 75 09:31:41 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11d0) 09:31:41 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11b8) 09:31:41 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x300) 09:31:41 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11e8) 09:31:41 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x318) 09:31:41 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11d0) [ 1690.028922][ T9824] usb 6-1: Service connection timeout for: 256 [ 1690.035143][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1690.043396][ T9824] ath9k_htc: Failed to initialize the device [ 1690.051412][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1690.078951][ T72] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1690.408938][ T25] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1690.439006][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.450052][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.459863][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1690.472882][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1690.481987][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.492495][ T72] usb 2-1: config 0 descriptor?? [ 1690.970792][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1690.978243][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1690.985739][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1690.993203][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.000668][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.008078][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.015586][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.023037][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.030509][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.037914][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.045365][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.052823][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.060262][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.067664][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.075110][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.082572][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.090034][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.097443][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.104905][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.112343][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.119786][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.127201][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.134647][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.142142][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.149644][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.157053][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.164522][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.171964][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.179427][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.186843][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.194307][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.201841][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.209317][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.216728][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.224196][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.231640][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.239109][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.246515][ T72] plantronics 0003:047F:FFFF.00CA: unknown main item tag 0x0 [ 1691.254047][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1691.263172][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.271245][ T25] usb 6-1: Product: syz [ 1691.275425][ T25] usb 6-1: Manufacturer: syz [ 1691.280078][ T25] usb 6-1: SerialNumber: syz [ 1691.287112][ T72] plantronics 0003:047F:FFFF.00CA: No inputs registered, leaving [ 1691.296923][ T72] plantronics 0003:047F:FFFF.00CA: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1691.369588][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1691.938974][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1691.967601][ T72] usb 2-1: USB disconnect, device number 76 [ 1692.345712][ T72] usb 6-1: USB disconnect, device number 47 09:31:44 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x6c}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:44 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x330) 09:31:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x9, 0x7, {0x7, 0x8, "fe0d014a13"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xe, 0xe7, "954ccb5afc2afeb48e479191c01ff9741f390f39ad5d7af168b49e0c4993bf5c2058d5e7df76078db6fe3ccf2f5ba5a14857bf6f71961669c02c9bc6432a9136ef42346b5e9763d0eae86e6863c8e85075e8449e7686be969be5cc82b5283383fb14c07fe41a954709a3b44b66806d5ffa0be16edd821788a04bfe275dadb772103217f04a9feacc145d9b5e1dff766594baf3f19ae933d25b03316729e5bd3d67d0eef89d6ae0d64ceb0b3dd8abeacaf03b040d8ab5d4932082351548eb97bf888d74a789f63072e088bbeeb39d57b355ddef99408fabbcc01d0ed6f9ac09bb1a994aef0488df"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x81, 0x2, "db5a"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '9'}, &(0x7f0000000400)={0x20, 0x83, 0x3, "71d765"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "141e"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "c2502e"}}) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000cc0)={0x0, 0x2, 0x2b, {0x2b, 0x6, "2bebb32666138f841bc231a01ea58b5d3512df5780a5611a543e2dfff18193ed5a4679d340fdeb6706"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000d40)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x6, 0xd93}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x20, 0x3, "c1b2d298", '(%P\a'}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x9, 0x19, 0xb1, 0x1, 0x6}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e40)={0x0, 0x18, 0x4c, "74f299492fb74585577cd648bc5a902a6b101aad672cf497d66ef94cd8100ac0f4fb04b02e8e87f1b5f2bfbb6d0faf907b29dad0e734f9a5450e028e3438eb74e4834d7f78fd0a0f54566c92"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x60, 0x20, [0xff]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x3f8}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x3a}, &(0x7f0000001040)={0x40, 0xb, 0x2, ';['}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0xfffd}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001140)={0x40, 0x19, 0x2, "5483"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001200)={0x40, 0x1e, 0x1}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x1}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0xd, 0x99, {0x99, 0x24, "300c469822db27737265edf59d0de90c8c57a2bcc3de83db6723f2faa962c897c0a3e4c8d706ba36ae05c1bfa01d0a377b54bd7b2ea5d21f1931a5ee7572132071d05a87bf7055ab9b517f3759562c1023982bd7096573f68d170489fc42ab5d4136a17864ebcb80c8f01e76b3ee023d9fff06ae953618cc1b352ab7e8e26942a8e2e7b20e468b07ad65719ee7e9d6a208120508961ce2"}}, &(0x7f0000000600)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "2c33b4aac8bf0a41dff413f65f88e3a5c7033ec69b7a1fee0c2f3cf13b1cc5965eaf365c06fc797ce570c8c3f0cf9656ba1bf8a108e7d841ff333534eefc7ace8575acdad5e03ad1f341ecfb0206db323e48bef757eacbe47f43498ab191604955f10b6f87bb62fdfc9b23b25b180da09322d3457e7c063268fd0caeea5a63fbf7e821c4bf2dea0fe145c5532e350aaaeb86cbbcce303830943103e5356393095132dd2930ef74f68a68532f9a0a995a8d81bba7e0cef1b35da74fcbb328077d73"}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x1, 0x1, "e4add049", "db07e41c"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xe, 0x22, "3eb3e02b9d414125203e3d000ed9e2feca26240e77c8c7c6d91b1a4463496bdd0e32"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x120, 0x8, [0x0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "a0ab"}, &(0x7f0000000a00)={0x40, 0xf, 0x2}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "e808"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x9, 0x7, {0x7, 0x8, "fe0d014a13"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xe, 0xe7, "954ccb5afc2afeb48e479191c01ff9741f390f39ad5d7af168b49e0c4993bf5c2058d5e7df76078db6fe3ccf2f5ba5a14857bf6f71961669c02c9bc6432a9136ef42346b5e9763d0eae86e6863c8e85075e8449e7686be969be5cc82b5283383fb14c07fe41a954709a3b44b66806d5ffa0be16edd821788a04bfe275dadb772103217f04a9feacc145d9b5e1dff766594baf3f19ae933d25b03316729e5bd3d67d0eef89d6ae0d64ceb0b3dd8abeacaf03b040d8ab5d4932082351548eb97bf888d74a789f63072e088bbeeb39d57b355ddef99408fabbcc01d0ed6f9ac09bb1a994aef0488df"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x81, 0x2, "db5a"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '9'}, &(0x7f0000000400)={0x20, 0x83, 0x3, "71d765"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "141e"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "c2502e"}}) (async) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000cc0)={0x0, 0x2, 0x2b, {0x2b, 0x6, "2bebb32666138f841bc231a01ea58b5d3512df5780a5611a543e2dfff18193ed5a4679d340fdeb6706"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000d40)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x6, 0xd93}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x20, 0x3, "c1b2d298", '(%P\a'}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x9, 0x19, 0xb1, 0x1, 0x6}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e40)={0x0, 0x18, 0x4c, "74f299492fb74585577cd648bc5a902a6b101aad672cf497d66ef94cd8100ac0f4fb04b02e8e87f1b5f2bfbb6d0faf907b29dad0e734f9a5450e028e3438eb74e4834d7f78fd0a0f54566c92"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x60, 0x20, [0xff]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x3f8}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x3a}, &(0x7f0000001040)={0x40, 0xb, 0x2, ';['}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0xfffd}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001140)={0x40, 0x19, 0x2, "5483"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001200)={0x40, 0x1e, 0x1}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x1}}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0xd, 0x99, {0x99, 0x24, "300c469822db27737265edf59d0de90c8c57a2bcc3de83db6723f2faa962c897c0a3e4c8d706ba36ae05c1bfa01d0a377b54bd7b2ea5d21f1931a5ee7572132071d05a87bf7055ab9b517f3759562c1023982bd7096573f68d170489fc42ab5d4136a17864ebcb80c8f01e76b3ee023d9fff06ae953618cc1b352ab7e8e26942a8e2e7b20e468b07ad65719ee7e9d6a208120508961ce2"}}, &(0x7f0000000600)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "2c33b4aac8bf0a41dff413f65f88e3a5c7033ec69b7a1fee0c2f3cf13b1cc5965eaf365c06fc797ce570c8c3f0cf9656ba1bf8a108e7d841ff333534eefc7ace8575acdad5e03ad1f341ecfb0206db323e48bef757eacbe47f43498ab191604955f10b6f87bb62fdfc9b23b25b180da09322d3457e7c063268fd0caeea5a63fbf7e821c4bf2dea0fe145c5532e350aaaeb86cbbcce303830943103e5356393095132dd2930ef74f68a68532f9a0a995a8d81bba7e0cef1b35da74fcbb328077d73"}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x1, 0x1, "e4add049", "db07e41c"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xe, 0x22, "3eb3e02b9d414125203e3d000ed9e2feca26240e77c8c7c6d91b1a4463496bdd0e32"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x120, 0x8, [0x0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "a0ab"}, &(0x7f0000000a00)={0x40, 0xf, 0x2}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "e808"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x7}}) (async) 09:31:44 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1200) 09:31:44 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x11e8) 09:31:44 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x4}}}}]}}, 0x0) 09:31:44 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x348) 09:31:44 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1218) 09:31:44 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1200) 09:31:44 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x360) 09:31:45 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1230) 09:31:45 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1218) [ 1693.159073][ T4035] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1693.229933][ T25] usb 6-1: Service connection timeout for: 256 [ 1693.236178][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1693.245874][ T25] ath9k_htc: Failed to initialize the device [ 1693.252434][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1693.519308][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.530247][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.540048][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1693.552892][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1693.562000][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.573775][ T4035] usb 2-1: config 0 descriptor?? [ 1693.639009][ T72] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1694.050750][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.058201][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.065697][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.073374][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.080818][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.088403][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.095855][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.103555][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.111006][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.118417][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.125890][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.133349][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.140815][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.148231][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.155722][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.163188][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.170658][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.178077][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.185548][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.192990][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.200442][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.207850][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.215304][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.222732][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.230178][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.237590][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.245047][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.252490][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.259943][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.267354][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.274813][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.282256][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.289706][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.297114][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.304557][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.311991][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.319442][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.326846][ T4035] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 1694.337684][ T4035] plantronics 0003:047F:FFFF.00CB: No inputs registered, leaving [ 1694.347597][ T4035] plantronics 0003:047F:FFFF.00CB: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1694.469020][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1694.478116][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.486208][ T72] usb 6-1: Product: syz [ 1694.490417][ T72] usb 6-1: Manufacturer: syz [ 1694.495032][ T72] usb 6-1: SerialNumber: syz [ 1694.609530][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1694.969397][ T9824] usb 2-1: USB disconnect, device number 77 [ 1695.269164][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1695.675217][ T25] usb 6-1: USB disconnect, device number 48 09:31:48 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x74}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:48 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x378) 09:31:48 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1248) 09:31:48 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1230) 09:31:48 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x5}}}}]}}, 0x0) 09:31:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x10e0, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x28, 0x65, 0x70, 0x0, 0x547, 0x201, 0x9a8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10ce, 0x4, 0x0, 0x81, 0x0, 0x4, [{{0x9, 0x4, 0xf8, 0x81, 0xc, 0xaf, 0x28, 0x2d, 0x3f, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x37}, [@mixer_unit={0x7, 0x24, 0x4, 0x5, 0x0, "de10"}]}, @uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x4, 0x4, "bda2947d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffa, 0x5, 0x3f}]}], [{{0x9, 0x5, 0x4, 0x3, 0x40, 0x1f, 0x7, 0xc4, [@generic={0x39, 0x24, "8bc0268fe85e5d04d1c6986ff21f1daf6ac351881b847345501aa6a56cc4bbee0877d095535c0de6f24fe573a94411782b5c859f00b232"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x200}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x7, 0x5, 0x0, [@generic={0xbd, 0x9, "3c390f20cc58c6a71704a5d555e3f526b67fcf67f68b819aad720b6bbdf2c1f3a9c119e636f520a0b82164f175eaa8906caeb2e2b763894cf9b3ffbab20c0ffdda184eb4252eec45e110daec134d4a7e2c096f9601096518bd103e13d07a79b39f1b53649bd08b27b3a253c21fdce428aa84fd34230874498753f0fe951445e95f36b41543f2f112a1b098156eb0fff17c544f6eb06ba6693b9208344ce36f6677be79a1ca8378b960fb54c44507d5573f19997d3988af32ca955b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0xc1, 0x3f, [@generic={0x9c, 0x0, "66e4f275274da91db5b24b78d01d2a1317047079d248f64f0953ce511651bbd5162c041ad4851f74aa4ee26532392447a8554ba7a9e7fd07e8a8e9a15c3ae5f71ff977f9d0103e2256f8b1106e4f6a8efe9b54695cf587206764918549a303f2ea4ae446bbf6dea08e36f53e4bf7398dcef8adb185524920268afb2493975401e9f4382460ef59b1622a8ee285d4af20633066ae8591aaac8e5a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x3f, 0x0, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x1f, 0x4, 0x4, [@generic={0x92, 0x9, "26fac779aba0a8b729357b90abc1ef6ecf58f0e494d9181b8fd506cc2f55dc42593841fb5a62340172b2a31b86b8d7b4686b3b6f247c170708c8300062839e790e19032e666861181a90bcf0dff696f6b04ad81ece737ed898672f6ba12f77a53b92db5cfa73ec29535ac48b678c7344908a733a9633739deec405782c6a4dc5fbe0de1aba4ed4d150eac3a6fa9dcbbd"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x91, 0x0, 0x1, [@generic={0x2a, 0x9, "c74ccd6efbb5d3b5b6e6854056713cfa1a093bd758d213fb6747306eed0b3c4293681c3072c39f83"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x253}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x8, 0xff, [@generic={0x18, 0x30, "df235f2258f4b9f44a0cbd43321460c63cd4f2b298c8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0xc3, 0x8, [@generic={0xba, 0x7, "e400d195a58627b3cf450b90b80a99fdab4841291bf648e18a8349113a7762f139ca738ca92c18d089182e6e2f49abdc36c226f5bcac5fdedcc9e9966eed753452f6ae9c3c18ffb26dcd484abbd4e41cf4c36edf56d00e087c0c8eb3c3525647b12fa305191903c291e923658423696c5237804264b301da9c66a8675807ff07accb5196d0926f0a24cc90f673eac1f893997cedc11643898060d9722515de9b5439c21ad48a46b29f327bebb46705f525fac68e78984f5e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0x4, 0x3f, [@generic={0x39, 0x23, "00bacc302f0d32b8a4111863f18a0348dbe9b2f524d17fc853c52a81e9c5aa08d4393119192c0287086ec2fa90ba6556c621872224b70a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x3f, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xab, 0x81}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x4, 0x3, [@generic={0x32, 0x22, "a40e47fd25448ce01474be1f6481ceededc27e62148defece544e8f1ecafddb1e2c2f37dfae775778b2baedf85714dcc"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x2, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa6, 0x8001}]}}]}}, {{0x9, 0x4, 0xa9, 0x1f, 0x10, 0x2, 0xe, 0x0, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7f, 0x7f, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc8f4, 0x5, 0xec, "148c51ddc1ff7ed9"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x9, 0x1002}]}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}, @generic={0x22, 0x31, "39f25751a6d519160fd49876c355cd2a3d4506cf102926ae368155bb99617a6c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x5, 0x3f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x57, 0x100}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x6, 0x5, 0x7, [@generic={0x87, 0xe, "aca214d9efcf3cc5096076fd2ba998762faa7454b383bb23bd391af7dc4ab6276d1144e6472aeb9d933fea1ab71f60ed4e9748b382003621059bd5b6b142d655b26b0b1660640b3db5490525c530ba9f04c1a613022562a7341cecf6eac7c3a800ab9a7ebc8542a1195b3b0ec45b70cb68fb0035383f2556f2aea580a24eb7d61f26861c9e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x81, 0x1, [@generic={0x98, 0x24, "027039c7b613d2ecdd29341f5886cd3a3d60c853bea9d07bb96a0c6a6826522d108cca1108d76f29fb0df3fb9f215f6b3dfd122c242636109def096680fe9ccf3b37de0c54a713fd156b7abd9f6001f4e9721dcb168d4eb1c2a01eefe1819bffec51eaa45273e2fd35e4b7362bb535814c5f52eedec2a47ff873cdbcf1ba51620442c524dbd9b2c7d76e799ec8dd96828be66b583031"}, @generic={0x46, 0x21, "55dbfda98ea81ec7c874a31bc5dbade064cc5839ab985d3bec20f65192ba024e848d3cd995e0e083fd41031ef6833adde1ad72cee271f869d1593fba01ce6f5078caa9da"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x0, 0xff, 0x20, [@generic={0x2e, 0x31, "8539cfa569bff4ef89a88204e23c4e4ce4461f44c5ffe2780879b61cf5146efb872fb234615d77388094c64b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x0, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xeae}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x2, 0x7, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x2a, 0x9, 0x3e, [@generic={0x15, 0x37, "a466d83a2b01152da95b237ccb64b52808caa6"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x7, 0x4, 0x51, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x8}, @generic={0xdc, 0x8, "330c6218c789e640df1e11f687dc3311cfab932efe3006ed129e0d74fb57ddbd3381d6ae9bfacae5d730b30b58391a57e76ccf0272ffb6c595235b84bbcfc5b2e8e7dc8132661927ea865bc48834538e3e63e6a09f894ac7ba5a083830889dbd9fe91e66d4ca9723b88aea3b4ed684af595f0e9bffde3509dcc3af7d08567bfee7bfcb9e3eadbe9d3f32e73c43b9a53e21fd13bd41f190560db57efe1c8fd525f20439635c15a5b69141e1ef4085e7c9ca1d36890bb0a8c36d8ccfdd3a399f7ceb178aaf7c299e2c11d2ed7a584bdd88fcf1c383e2a196c54632"}]}}, {{0x9, 0x5, 0xc3, 0x4, 0x400, 0x8, 0xd0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x70}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0x61, 0x1, [@generic={0xf9, 0x6, "eb4b938f0c0ac4d301d48a403262a7492f7a8d395bcac8c742600d6f938f867c5a72b70015f9d1ab76816e8ce207df27b8d401a2bba6d09f94b87f9b6fc63e74ad2a53c90c39f203887a136e13e6a0d12b47c8613f6ff3c75f9dc1c35541d57ce5a71d280557a3d8d800a9d2869855cdc13d07fa1e14e19d49bdfe4df7a0e850ad0ee745f46cc8269bf1f8fc81f9727f819313589b09300106d8533116f7ab2d4cc0142cf991aa2a582f9d51b8e7bf418674f4fda21be5d716a446fffe665911a14b753f7c93ab4a9dbaa097943eb12eabef2cb0de948010d419df190ffbdc27c9d0df31eb9262cfb53e039b9229c7043d81965f55fd25"}]}}, {{0x9, 0x5, 0x4, 0x6, 0x10, 0x7, 0x16, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x4, 0x8, 0x600, 0x2, 0xe8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0xfb, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xee, 0x348b}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}]}}, {{0x9, 0x4, 0xab, 0x1, 0x4, 0x5a, 0x7, 0xc0, 0x7, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8ae4b0f54c2d"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0xff80, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x0, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x83}, @generic={0x3d, 0x1, "c9671e3b5ed179ca289b5eedd7b926e75108fff905e71d305f1fa6e1031f0fdc759c3b096c72dcce31771f2b98ba195da6edb074a52da97c763d04"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xff, 0x41, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x210, 0x5, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x6}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x1f, 0x9, 0x40, [@generic={0xcc, 0x22, "a5abdb75c78e568f1d0458ce0ac2e68beb0b0c03fb8f68d6d077c409a212f1ed503874d6be4931558c256604263b37428d0bb83f43c8aefa64fc03f8e03a7fa621d7f1fb40cf661cf44c2cb74bed90b714cf487a244265ac192ea4e450b3234d6e9e864d68309f7c1dce7daddf5586529dc66f464c03dd7e75fbd6f5f7f5ce162245546b6d6d38cce94046e8fd887bd8f43a0af672339ce1c3b22c0bf9584dbbae6f8eef503e385f9d75be6a156a5f592540abd02cd56a4805ca5fa2c43833ed2c1f2b8be188fa21404e"}]}}]}}, {{0x9, 0x4, 0x6c, 0x1, 0xf, 0x86, 0xfb, 0x80, 0x9f, [@uac_control={{0xa, 0x24, 0x1, 0x3f, 0x6}, [@selector_unit={0x9, 0x24, 0x5, 0x4, 0x80, "6a0346d5"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x4, 0x1, "d9ff80f0e1"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x6, 0x8, 0x40, 0xa8, 0x7}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x3, 0x5, [0x1, 0x1, 0x9, 0x9, 0x9], 0x7}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x7, 0x80, '%'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x304, 0x1, 0x1, 0x9, 0x2, 0x81}]}, @hid_hid={0x9, 0x21, 0x20, 0x7, 0x1, {0x22, 0xe2a}}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x20, 0xff, [@generic={0x2f, 0x4, "3b70ddde203731094f7c6e7b1dd6c2e57f3981b7cc66268b47cf3f11e17b30d06572a89b21759bed0ae028accc"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xff, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xfffb}, @generic={0x92, 0xa, "b36d55aa866d14b998c77e2a70b4fda1dd6aec05231d396b919be3474b9283b42170d8d971eda49ad45a7b3e0435e166efffeefa25c072d05ab21ccabd9c4425567d7cbb3ef3ac89c711bba4e402f5af6eb38cc0457c3275066f709756b89a6d99352b24e84f4bdf62ddb2ca1bedb1f7697d6de01274c8571f92ae2f005bd513454db119a4728d874ad52cb320421108"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0xa1, 0x40, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xad, 0x4b3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x0, 0x8, [@generic={0x1c, 0x2, "26f4b18798de39c0dee0df66f90c2937929f77bc6484e12f8383"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x2, 0x2, 0x0, [@generic={0x93, 0xf, "f669e4e8e1e5ae68834cb5eb972c1a583382d1f500951e68110aa15141821dd44909a71d1677740f519ac77ec5acb4cd7f2bc520223cc6d591e26f17fd853906b6173085599836a4de372d4e9bdf8b9789544f90cb6cc00949625c649fcfcf8f4a42763474b96835d4924bbdd146c9f6c24f8f3dd6fa0cee0c99aa490ae9f8026bf89a9682ec944b5e9142622f414ac4d9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x2, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xf3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x6, 0x6, 0x1, [@generic={0x37, 0x0, "dc47fad820e060c34ea42d115500224141b3876dec1a99732b05d365b3e70c3d46a63b0eb49b42015dc3069205bb38569f1da1721a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x40, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0xdae7}, @generic={0x7e, 0x0, "cbc2182d45b1ecf02072d78f1449e5bd5261392c55b22c64e3e8fc5b344d10e60ab0567d140f777cd0571eed184d5bd2492510ef09de5bd7b1ea1ce5d9e9a393a423221a443a4a7fa0badf36052d2a1af457eea97447704edefd83b768e124c05ff84eb159094d9d209275d83766d2c55d4ab54478087d1b3535adf9"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xba, 0x7, 0x20, [@generic={0xba, 0x11, "7286cb9a656fcdf45dfd06f87416896a6a424f812373ede8dd18de10516a60ec6d9860fa5a780fe2779d8ccaeb5ea1635d7052c8508cda1f9eef24d7e5b0510116091cf66ad861cea04912920f345e5569dd5f5d191b61bb97c0f12d9dc3af4307c2d4a8b676a8dd0f1b00adeff1b284fb4871c57c56ca274ec0736fa0e16f11a1f1049916bc75c7404d9b2a03dc5a2981e5ca377c444c0e1b14f034e1441e22d862e6ea16cc67705b3327cfd2eb0e8c3fbaa406d986a911"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x80, 0x1, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x41, 0xfc00}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x5, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x81, 0x1, 0x9, [@generic={0xc4, 0x6, "35ca43275e35e9b32ca0af7e21f758ea6a3af5dde9951c4f3eceb4f98bca8d1f25822d023d74e9dabb6e98503ffa3f4f9f1a72668ad7469d148e3a9dfde664fa86bfd545528701116c6c7383ea12cb3fb6d0a46cff56f3c9a71be87231585c0d43654377d59fe2fcfd39c88ff6f2854c0f6c08a5d30bcb114867501fd46ad7f94e9c0c471cee908bd00af35d7a05e52d70f0872d12e9960e6b5ce71ba5c31cadbd166b0d2e8a84457456f48d97e9efd959d22ab3024d8ffb47864b73b80a268266eb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0xf6, 0x1f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xf38}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x9, 0x2, [@generic={0x8a, 0x2, "8c4af8a84d4ba85cb8abe34e2f9da408f7d1c3a4f2a759ab4e2bcb9aaa143d8e81a9ee09fda9ef7c887331da047ec3b11916317bacbef0f6db5be1d139cb1fe5574810ec5c58c33d8763b9facfe0759051d3dc504f1720647c4054b5aef51c27fff23233bbf8fc2c3e1a2d4df0f3b9afaa2c33ec6f3f1f4e79f692f6b420b7089658c3c5a4d611a7"}, @generic={0xe6, 0xd, "91250798c59f2d794268efdf0f9d7ebefdf8b441d8e5ab86fa760eb955f4a9ad1b18bfa562a60813ec68269c29e4b6abc431614d1fe7f93e4213ce2cf0069fe5390829a809ab9fcd1db611620511f5efc20688e7dc53badce1dc64134791f0486667dc47b9c47a85834da45af38ebc9185dde812b8bf278f9eef3f5cdd991c3deb0992f4e68b605e093f051c9972b095b4d68ee3c5a00ed07b66bc16d9dfde81b5dfded8bd2a4a9efaaa6b8ac46eb8b98f03ab4ecaeb8da5ef66266ff15f4e4de794bcfac617c75c8dc65ef94a6efae7f7dcaa23ee63a55a017a27b8af35b4f16c527a34"}]}}]}}]}}]}}, &(0x7f0000002100)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x250, 0xfe, 0xc3, 0x20, 0x0, 0x9}, 0x4d, &(0x7f0000001bc0)={0x5, 0xf, 0x4d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1a, 0x5, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0x0, 0x3, [0xc000, 0x3f0f, 0xff3f, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x3d, 0x9, 0x1000, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7fffff9, 0x8800, 0x1fca, [0x30]}]}, 0x8, [{0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x44e}}, {0x84, &(0x7f0000001c80)=@string={0x84, 0x3, "5c68be8f696602b580e9ca7182beeccc81bcf585397e394da13ec9d42db910c26ce7a0768f5d0e1a7294d21b7ce6c187e06302ef917a7cb861bda53b5688cfd7eb6891ca6aefa0d41b58d1ca755231b6d0d5642afad5229097336871a78ab8babc81018efa737b22618650fafdb6e02ad6af4ae75ddb4129865e935f164560ddd572"}}, {0x29, &(0x7f0000001d40)=@string={0x29, 0x3, "4edef7f55ce6452a2c114086d43fe10c5dcab512acab0d6a8a6e164ab24de8a8011f52504bd851"}}, {0x40, &(0x7f0000001d80)=@string={0x40, 0x3, "5141a4bc40e947f68d6cc9663bbd1db43b6b5086e429d42396a6cd7dbe0d8daf0047842cc8479e453dd9188a5a43e2eeb0ab6e7915793319a228d29e9850"}}, {0x4e, &(0x7f0000001dc0)=@string={0x4e, 0x3, "09e7e0209cf01a724bfd9c8a126ee70a70c572008b1f6cc6e16d5e9ce954cb63a686461025a4e48f2473fce5a57cb671e6f28bf86d91c9a3398456e6094f13abff9239df35d089eedadc2735"}}, {0xdd, &(0x7f0000001e40)=@string={0xdd, 0x3, "fd6ffd72237902cd7f7266155820ea8025f1cf20727f295e4e638c25f88f2f0fef3114bb685d3f2206551c05aca1826632692875d0d52e8940298fe22375bda96ba04f9828bd199c812bf0421ee31e4b893f9f3e0782482747281bea63f7ac83b1ad31cbab86a1bfc1550ed017c6f7280d0965a7e26739619992df834930e6eaeb8398a760e217619e5c1820293e75654c75bbd173923bbd19e92bfa826cfe1f4d590fa205911469673ee529fba5f333ec9450ae05046c6fb1ace14f12f0dad6930a1d1eede12ae2becabe732c618182e507a6af0ad18fe045e9de"}}, {0xd3, &(0x7f0000001f40)=@string={0xd3, 0x3, "42556041c6adf0ebf384ab3f11b6716a79a7814de7704cc56e911e655918819f6b8973e05e0e1b7796243e7ea4be6caeb7c6400055c722ffe164bd627072c0df79ea8cf485a05c499ae10d4f59a6b484b5496d6a615da627134fc066df719342f9f5907742e764a84a0627ea16c38777ac3be51d07f9e56255f309fbc72e8775e9b578e0745a6054129d995ad1bb395bd77d86d0c163deef13674b0dc98d99c786238084870869b7345e50730a5af87ace47c7c4c12ebf757778e4bdf5f59bfe1bc935c499c869ef220344153d3a08403e"}}, {0x93, &(0x7f0000002040)=@string={0x93, 0x3, "57183dc077d2c854404557411b95967000565044c1872b7efa63327e92d4f464147b4ef449f987dc2767ccd108c9317bd2a0775c5e04f66b222ac7c76f1da7df0cebc9047edfee2200671cd9f3bdfa81011274970d2a6ed121b8b1a9536a947d4e288ec393c0c89112a6771e7d39408c7534e9e14fc2594cc53d2486ff309d192985eb6e0ddef2f4d65d256ba7d566d8f3"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000022c0)={0x24, &(0x7f0000002180)={0x20, 0x8, 0x78, {0x78, 0x22, "83262d5d9ba29c70741b38584081fcb2e2c7591f53e818089adb859952f383bea27529bf5260ea494b089242381fa201f5688351b96a10fffaef4bf6555d37f3f85eed32977f17a2e66f965fec7f485bf7a36927dbd914e7875b6974cc1c1191364b1e2e7934e68cf1ec33266360f9d7ff1585a2e01a"}}, &(0x7f0000002200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000002240)={0x0, 0x22, 0x11, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "ed50611a"}, @local=@item_012={0x2, 0x2, 0x9, "0d0e"}, @local=@item_4={0x3, 0x2, 0x5, "15217ebf"}, @global=@item_012={0x2, 0x1, 0xa, "c7f4"}]}}, &(0x7f0000002280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x9c}}}}, &(0x7f0000002480)={0x2c, &(0x7f0000002300)={0x40, 0x0, 0x66, "33f4f293285c2623e94b5e04152eca2d3684cc088079e640f74a0a157870194df0a96640d7cdecf5bdd724b995db7ffdffbef1cff1c8b56d8d7fc88b0777c2a5d21c08515437b51c8e1f6380de179f2aca9114c792f226cf0a39af3d1ea0afc5826506e59f93"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002400)={0x20, 0x1, 0xf, "09f58b678eddb90681f91f4804f51e"}, &(0x7f0000002440)={0x20, 0x3, 0x1, 0x8a}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000027c0)={0x2c, &(0x7f00000024c0)={0x0, 0xf, 0x6b, {0x6b, 0x23, "89424f0c3e4a234f2f79e2be91e5cf0945e18e6f173a4bab646d2ab095e5c6ecaa14bca455d20d570f4d19b9964e0b5d640efc3161d55bc7388218604c6fd95817c5aee1cc030bb8492f1f36b69e03b46c57d7b244ac706c74e4f47a2119a7d59dfdae6d5446152f5b"}}, &(0x7f0000002540)={0x0, 0x3, 0xca, @string={0xca, 0x3, "579ebcebd5617332c19959ae94cfef978d200436d419f650076ff111831aca8ae677bee99951a205edce2176a27844334aeadba7564e9b388a36e4c27f70d171f6a903544c612dd9f9768fce384d9223c3e934bf9bac2c7fa2ba58c22c5047681f4be8c728a94ef75c3f93488cef9624fb14a24e0d8aa8277de4a7928f6cdf1524cd1f5584c464a820f1196e6be9d921998ed151eb1399578ff751d5fcdac69cbaf6142c434575c29cdcba4079dcaddddb25677dd487cd046de22b7b0f101f2c44b36bf26fb347bf"}}, &(0x7f0000002640)={0x0, 0xf, 0xd4, {0x5, 0xf, 0xd4, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x3, 0x0, 0x7000, [0xc000, 0xf0, 0x0, 0xc000, 0xc000, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0xf8, 0x5}, @generic={0xa1, 0x10, 0x2, "05e72cb5bbcc4a54b2a3dbed6b7f2978eadc97f55a410708697b2c5a107d43984fb133d21b0ef349370bc6796f4b21999af93d3d26f670a15d04294bf71b30623955a503b17add2d55844c4ef999edf8e6c621fca44431a0339b638e73b106e0005d10a92bd33d0f708cc35edaf4fe37748f9339915bd55ce294fb44265f2a67496f68146bb9df6dffcea716096200223fedddabcb9e854d90beb4e6f04e"}]}}, &(0x7f0000002740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x81, 0x0, "741f7e08", "19a1d665"}}, &(0x7f0000002780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x27, 0x7, 0x2, 0x20, 0x4}}}, &(0x7f0000002c80)={0x84, &(0x7f0000002800)={0x40, 0x0, 0xae, "bd89db4519cac66eff400756096713a321561c622c8bc2633ed4deb06c06fef45385982601d48b58caf8c107e9f11cc7dce8dd1c02ee94162ddd69dcaeeef3692bd8683e49c1f31f44c8632e5bcee9615da5b3648423b4e5e009f3000a171a1892d3db7e88efee8d22347bf1bcd785de5b6d69b83718a5a8987d0261755d0503803e2e9281d4926092d8bb9c0b651933b72b87bcf8b3847923fd05308b5883b9a8b757e09364290d07ecf8a7f524"}, &(0x7f00000028c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000002900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002940)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002980)={0x20, 0x0, 0x8, {0x200, 0x12, [0x0]}}, &(0x7f00000029c0)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000002a00)={0x40, 0x9, 0x1}, &(0x7f0000002a40)={0x40, 0xb, 0x2, "9f32"}, &(0x7f0000002a80)={0x40, 0xf, 0x2}, &(0x7f0000002ac0)={0x40, 0x13, 0x6, @random="f43bf6a33380"}, &(0x7f0000002b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002b40)={0x40, 0x19, 0x2, "4803"}, &(0x7f0000002b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000002c00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002c40)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x10, 0xb7, {0xb7, 0xe, "63832e4af3516f58f33a1102ea0371d9f83fe7fe83cd7b3bf1c25a9ecaed27523f0545691e36c80086fdbda146bbcde678b68ed5170784ea7cb18e5ccdc91ed41d4fec778b558f1cd999ba7776b31eec1852eebf4159dc907f3724671e855b535b2bd273cbe9299eee232b5e21cd25586ebe55d078e408ea511cde821e721648d92c2a5208d102e9e3e6c39167d18926da6d8d84ad78a4c2f581a56aa00b312b75508d2c97adbb06296f3cd9566507fc82b28aa8e8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000003680)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x8, "7ac9ccc9"}, @global=@item_012={0x2, 0x1, 0x4, "8f5a"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x5, "f1cd7110"}, @main=@item_4={0x3, 0x0, 0x9, "faca9f62"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x1, "4b250fd4"}, @main=@item_4={0x3, 0x0, 0xa, "a3e68569"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xeb73, 0x4d, 0x1, {0x22, 0xd94}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0x13, 0xe3, "dd5945efdf08273029b7b9e0b1f0ab7979a6bea06a3d39689e4981b487b42198e7290a34b880fe4468de8e04df93511d52575df5db42d17cfceaa7e6d35f1eefbfe68bd78a9c95e55499e82bad07521a78d84ceb76ec77fdf879cf5b85d84258269417407c65a0d300cfc35089a30bb55340a50f1f1b1cf63b6eabcfc4c51144e27c77cbcdce08a8ec0e294eecb9b23a33341527df942e84d57935128dbf5cfa2abb59703b1f495a75d7e24b7a82afe88864826b0720ce68865fe3a5a2f66bcb5bb85c6cadc082afe0f150898c22fde48df697c1ea9124d4ae298a50ab2d114aa8ba8b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000000480)={0x20, 0x1, 0xe7, "c60c9c60b4a9fde2ab262cc191ba603ea54ee8502121fff6514e48c9c3a9720d521b82990fad1ac2f3957dea80b7e0513bbd3619857276e253ec860f7c493afde91d7b31df15029d3498d8203dd6ac6917e88381d4239762bcebb9ddbaa9277713213be4b5c1c4687ec9ce96c5643d65abb856d40a4f92aa3f61dd81e8736c4ed96cbd296eb273b4022d83789813ce74eb95da4458fceba3472fb6f9c551f7f821117aeef80c34b04a1a0cbc5af0956d19dbfd7a3b2b943229fd055ce7cfc1c84ce10831de0cbab65b054d8f60041d92c9b7404d7d170548f16ffbe213d8fa97635da8388bf99e"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xc6}}) r3 = syz_usb_connect(0x3, 0x287, &(0x7f0000002d40)={{0x12, 0x1, 0x301, 0x2c, 0x59, 0x42, 0x40, 0x2019, 0x1201, 0xa39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x275, 0x2, 0x8, 0x20, 0x60, 0x0, [{{0x9, 0x4, 0x29, 0x80, 0x4, 0x32, 0xec, 0x4f, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x80}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x5, 0x2, 0x8}]}], [{{0x9, 0x5, 0xf, 0x3, 0x8, 0x2, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x2, 0x0, 0xfd, [@generic={0x4d, 0x0, "d64f34d2bfd97bf1c33f409bdfb501bfb719a4179d7c94b73477de9c9c305e4a66e4163238d085879c79e7174a85b89b64ee44eedb2a65682273933d273f3d61514e8e57aad7e18090d501"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x3f}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x20, 0x40, 0x26, [@generic={0x10, 0x11, "afee0621030e392359bc284f0ef9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x35}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x7, 0x2, [@generic={0xbe, 0xd, "f47af08826aa333e4380f40aac61c0bbd3eb5fe1a15a7f9cd71a40e25e2b8605420e46f66cf6e6c1486df552354baacd8403b7a71573e973b92ab40bdef64d6085b5679c6fb65ff4e1b0099a5333c21c46d52f187c0da59b972e52fb896583c99709079efcf5e4d79fb87743ca4d4e0a620c45c568000b4f14cd3a87d4d13286a0c55750c3eb5ed2b383e92e4c2af28e98b54acf867b837ca051000666ce82e9971d59945a7aabc85fc8e33153ac67bf2ac5239b0c0062b13958bf74"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}]}}, {{0x9, 0x4, 0xa7, 0x0, 0x2, 0x18, 0x6e, 0xbf, 0x36, [@hid_hid={0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xd92}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "120e2d"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xd60a, 0x8001, 0xffff, 0x5c}, {0x6, 0x24, 0x1a, 0x200, 0x18}, [@acm={0x4, 0x24, 0x2, 0xf}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x0, 0xdb}, @mbim={0xc, 0x24, 0x1b, 0xc00, 0x1, 0x81, 0x1, 0x80, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x20, 0x81, 0x1}]}], [{{0x9, 0x5, 0xa, 0x4, 0x0, 0x3f, 0x8, 0x80, [@generic={0x82, 0x1, "2c25004200dafcd26d67244f4057d02e04949440802fe81aa54e1ff4f51f4cf196868370825d013de606d4fe27a413a475a05bfed954762d3c5ab3d4572946a6c15bc2eb0384c9abf61bbec9d9f48eb3f47ce4469e0fef5c0e3662184d05e0e6c58145112e9b2ddf56ebbde15f73001a9592de7a02f6fc3e6c78b2e070b7b444"}]}}, {{0x9, 0x5, 0xa, 0x14, 0x208, 0x7, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x3}]}}]}}]}}]}}, &(0x7f0000003140)={0xa, &(0x7f0000003000)={0xa, 0x6, 0x310, 0x5, 0x8, 0x3f, 0x8, 0x1}, 0x16, &(0x7f0000003040)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x64, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x9}]}, 0x2, [{0x4, &(0x7f0000003080)=@lang_id={0x4, 0x3, 0xf0c6}}, {0x56, &(0x7f00000030c0)=@string={0x56, 0x3, "7650200962de98d9a020bdeef1542b04e50c5d2504fdd73d6d3522fa43b51f83d1772bb7d2b8d8907253aa01b2157f86e036e4e2daa4d3b7714f0a3d4a394080c1e2f998d9787c6837982951d0f5df83ab8e7388"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000003380)={0x24, &(0x7f0000003180)={0x20, 0x11, 0x8b, {0x8b, 0x23, "ea9a5ff0c5b2bcf1b0fce974e9d94a26954eb43b9d8be46676bcc1cbfea762c28a9a14633b5a7e66ec151b510978a41620032914d857d18493706009899d28a3b27688ffa81000c16445167d753a631f47b1dcf5c45169029242776b4e703e1c0e6bb2ad6737f73e8bd5b361077660db7920992aa95b9ca2c5f7fa0887a5c2ab217d766d6886caf6df"}}, &(0x7f0000003240)={0x0, 0x3, 0x80, @string={0x80, 0x3, "5cf7b295be687b14a48458c9ecb6a724b91ee15b1a11f8b075bbd01488ce204e0df673d95ad009d894407320fa05594ebb8a8147bfcb3760e0498a1dab758bd02c7214d66ac6c9d73e0cc953de097d8ba33567bfbbf518b63466f7095ab570ac8c555dc307478885600758f7d1b16e594d51098d4dab558af56aa0920cf9"}}, &(0x7f0000003300)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "34a3906c"}]}}, &(0x7f0000003340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x7f, 0x1, {0x22, 0x907}}}}, &(0x7f0000003640)={0x2c, &(0x7f00000033c0)={0x40, 0x0, 0xf7, "bf213e8b7d381f5871b67e33642e1231c06797a3abdf7bfe08fa360da96ef3041037ff3194c389d372a3369eac87dca5ccf9e02c34d748bbfb1f1922976140e95dacf0a3b91dab0de953e352edfcf00f69c82f7110dfac9dccd3c252be09896084c564b32189a4b64692b004991a1ef95b29bd05b27f6972ec1e7b23a87b4427b484c3309574366505f2808befd9629b6ba823e0a2120c1f11ab2235e4a9f2764dc568d46af6a127f082ff2f408a18333696766bbd4f9ebb99fe6c62f8ad6e597abfd28a252efee3c5367ada8c0c3e042ed67257248e77c36fa6994015ed710a38b0b5aadc1bdcb846579f199eba83c7518303d2e1a6c7"}, &(0x7f00000034c0)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000003500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003540)={0x20, 0x1, 0xa4, "b9f9dcbd4089b7052448f202079c494803113561e411b4f5082f60228e463e6cc3bab627bda55868edea8226c6e277c571fe889c146949a7a3745ca3b7ceecabf7559e800ead7d91f2d65107c4bd47bfe5402467e65d5dfa9906f1d2248667ac46dcd483b6042007d6bf2983fad265997b97fbb397dc918a48cc68da141e3217da2316b9ae7e2ea52e2be49ea9b60d600f618f2251e6d36b22116bce0220887987977518"}, &(0x7f0000003600)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, &(0x7f0000000600)={0x40, 0x1, 0x1c, {0x1c, 0x1, "77cd95299959b7d90e717aa2d5f398cf2b0f30b52add074ec2c9"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0e}}, &(0x7f0000000740)={0x0, 0x22, 0x21, {[@local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "e24fa543"}, @global=@item_4={0x3, 0x1, 0x9, "f112398d"}, @local=@item_012={0x1, 0x2, 0xa, "cd"}, @main=@item_4={0x3, 0x0, 0x9, "b270e1f8"}, @global=@item_4={0x3, 0x1, 0xb, "d7899203"}, @global=@item_4={0x3, 0x1, 0xa, "92424b4c"}, @global=@item_4={0x3, 0x1, 0x1, "74569ff1"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0xca72, 0x2, 0x1, {0x22, 0xc69}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000800)={0x0, 0x34, 0x5b, "1d9c6434629c4cb0cb8268b0c66cae45f29f7f1f3a880425eb1c42dc168cd4eb72ade1a7033f4f6bd18678b2510f7f2cecfac947f4a7c98fdbc2bda66c744caa0bc2f33bc77e73c6a3a2f23f4f8bab2221e2d5b6f702df16bcb313"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7a}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000900)={0x20, 0x1, 0xeb, "fb088b13ad5c39e62ed270089a398f61ce3a76d54367d09bb659f956f8ba934a06769b7c5597852b23df2823a6bb3670f9bd9fbd2b0caf63bac4fdf097e0edc58561366308a73fa704692ad6e7a1df29a5055fe2f0441781dd350363864a007457a0ca360732f09edc880e732a6130ea7a5daa75c1b71ade6d88756954a6c18e18f54ce4d1ebf8c601ae195a6024df0e93509958b8bce63688c4c1e6601b696b423868d27a9008b30ece59761e7ef51cb2f3ef27de066df40acf63497de807e5244643cdb0c4a5d9c914b93e64debb28fc6c1b3c87dc8f3660d0a444cb0657f0d0697aa892da84bc87a986"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x1}}) 09:31:48 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x390) 09:31:48 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1260) 09:31:48 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1248) 09:31:48 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1278) 09:31:48 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a8) 09:31:48 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1260) [ 1696.488959][ T4035] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1696.519028][ T72] usb 6-1: Service connection timeout for: 256 [ 1696.525240][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1696.538592][ T72] ath9k_htc: Failed to initialize the device [ 1696.545295][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1696.909130][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.920092][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.929890][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1696.942740][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1696.951825][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.959932][ T25] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1696.978623][ T4035] usb 2-1: config 0 descriptor?? [ 1697.471478][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.478994][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.486406][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.494101][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.501561][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.509023][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.516432][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.523906][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.531353][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.538762][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.546229][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.553672][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.561134][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.568551][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.576012][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.583467][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.590921][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.598342][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.605813][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.613265][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.620738][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.628143][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.635605][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.643051][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.650519][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.657927][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.665393][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.672836][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.680293][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.687879][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.695357][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.700339][T20283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.702785][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.718516][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.719174][T20283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.725998][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.741107][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.748513][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.755986][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.756837][T20283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.763407][ T4035] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 1697.780246][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1697.788675][T20283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.789341][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.805049][ T25] usb 6-1: Product: syz [ 1697.809281][ T25] usb 6-1: Manufacturer: syz [ 1697.813894][ T25] usb 6-1: SerialNumber: syz [ 1697.821017][ T4035] plantronics 0003:047F:FFFF.00CC: No inputs registered, leaving [ 1697.830898][ T4035] plantronics 0003:047F:FFFF.00CC: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1697.845507][ T4035] usb 2-1: USB disconnect, device number 78 [ 1697.899521][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1698.519003][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1698.925833][ T4035] usb 6-1: USB disconnect, device number 49 09:31:51 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x7a}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:51 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1290) 09:31:51 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c0) 09:31:51 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1278) 09:31:51 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0xf}}}}]}}, 0x0) 09:31:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x10e0, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x28, 0x65, 0x70, 0x0, 0x547, 0x201, 0x9a8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10ce, 0x4, 0x0, 0x81, 0x0, 0x4, [{{0x9, 0x4, 0xf8, 0x81, 0xc, 0xaf, 0x28, 0x2d, 0x3f, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x37}, [@mixer_unit={0x7, 0x24, 0x4, 0x5, 0x0, "de10"}]}, @uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x4, 0x4, "bda2947d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffa, 0x5, 0x3f}]}], [{{0x9, 0x5, 0x4, 0x3, 0x40, 0x1f, 0x7, 0xc4, [@generic={0x39, 0x24, "8bc0268fe85e5d04d1c6986ff21f1daf6ac351881b847345501aa6a56cc4bbee0877d095535c0de6f24fe573a94411782b5c859f00b232"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x200}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x7, 0x5, 0x0, [@generic={0xbd, 0x9, "3c390f20cc58c6a71704a5d555e3f526b67fcf67f68b819aad720b6bbdf2c1f3a9c119e636f520a0b82164f175eaa8906caeb2e2b763894cf9b3ffbab20c0ffdda184eb4252eec45e110daec134d4a7e2c096f9601096518bd103e13d07a79b39f1b53649bd08b27b3a253c21fdce428aa84fd34230874498753f0fe951445e95f36b41543f2f112a1b098156eb0fff17c544f6eb06ba6693b9208344ce36f6677be79a1ca8378b960fb54c44507d5573f19997d3988af32ca955b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0xc1, 0x3f, [@generic={0x9c, 0x0, "66e4f275274da91db5b24b78d01d2a1317047079d248f64f0953ce511651bbd5162c041ad4851f74aa4ee26532392447a8554ba7a9e7fd07e8a8e9a15c3ae5f71ff977f9d0103e2256f8b1106e4f6a8efe9b54695cf587206764918549a303f2ea4ae446bbf6dea08e36f53e4bf7398dcef8adb185524920268afb2493975401e9f4382460ef59b1622a8ee285d4af20633066ae8591aaac8e5a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x3f, 0x0, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x1f, 0x4, 0x4, [@generic={0x92, 0x9, "26fac779aba0a8b729357b90abc1ef6ecf58f0e494d9181b8fd506cc2f55dc42593841fb5a62340172b2a31b86b8d7b4686b3b6f247c170708c8300062839e790e19032e666861181a90bcf0dff696f6b04ad81ece737ed898672f6ba12f77a53b92db5cfa73ec29535ac48b678c7344908a733a9633739deec405782c6a4dc5fbe0de1aba4ed4d150eac3a6fa9dcbbd"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x91, 0x0, 0x1, [@generic={0x2a, 0x9, "c74ccd6efbb5d3b5b6e6854056713cfa1a093bd758d213fb6747306eed0b3c4293681c3072c39f83"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x253}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x8, 0xff, [@generic={0x18, 0x30, "df235f2258f4b9f44a0cbd43321460c63cd4f2b298c8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0xc3, 0x8, [@generic={0xba, 0x7, "e400d195a58627b3cf450b90b80a99fdab4841291bf648e18a8349113a7762f139ca738ca92c18d089182e6e2f49abdc36c226f5bcac5fdedcc9e9966eed753452f6ae9c3c18ffb26dcd484abbd4e41cf4c36edf56d00e087c0c8eb3c3525647b12fa305191903c291e923658423696c5237804264b301da9c66a8675807ff07accb5196d0926f0a24cc90f673eac1f893997cedc11643898060d9722515de9b5439c21ad48a46b29f327bebb46705f525fac68e78984f5e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0x4, 0x3f, [@generic={0x39, 0x23, "00bacc302f0d32b8a4111863f18a0348dbe9b2f524d17fc853c52a81e9c5aa08d4393119192c0287086ec2fa90ba6556c621872224b70a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x3f, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xab, 0x81}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x4, 0x3, [@generic={0x32, 0x22, "a40e47fd25448ce01474be1f6481ceededc27e62148defece544e8f1ecafddb1e2c2f37dfae775778b2baedf85714dcc"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x2, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa6, 0x8001}]}}]}}, {{0x9, 0x4, 0xa9, 0x1f, 0x10, 0x2, 0xe, 0x0, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7f, 0x7f, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc8f4, 0x5, 0xec, "148c51ddc1ff7ed9"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x9, 0x1002}]}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}, @generic={0x22, 0x31, "39f25751a6d519160fd49876c355cd2a3d4506cf102926ae368155bb99617a6c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x5, 0x3f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x57, 0x100}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x6, 0x5, 0x7, [@generic={0x87, 0xe, "aca214d9efcf3cc5096076fd2ba998762faa7454b383bb23bd391af7dc4ab6276d1144e6472aeb9d933fea1ab71f60ed4e9748b382003621059bd5b6b142d655b26b0b1660640b3db5490525c530ba9f04c1a613022562a7341cecf6eac7c3a800ab9a7ebc8542a1195b3b0ec45b70cb68fb0035383f2556f2aea580a24eb7d61f26861c9e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x81, 0x1, [@generic={0x98, 0x24, "027039c7b613d2ecdd29341f5886cd3a3d60c853bea9d07bb96a0c6a6826522d108cca1108d76f29fb0df3fb9f215f6b3dfd122c242636109def096680fe9ccf3b37de0c54a713fd156b7abd9f6001f4e9721dcb168d4eb1c2a01eefe1819bffec51eaa45273e2fd35e4b7362bb535814c5f52eedec2a47ff873cdbcf1ba51620442c524dbd9b2c7d76e799ec8dd96828be66b583031"}, @generic={0x46, 0x21, "55dbfda98ea81ec7c874a31bc5dbade064cc5839ab985d3bec20f65192ba024e848d3cd995e0e083fd41031ef6833adde1ad72cee271f869d1593fba01ce6f5078caa9da"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x0, 0xff, 0x20, [@generic={0x2e, 0x31, "8539cfa569bff4ef89a88204e23c4e4ce4461f44c5ffe2780879b61cf5146efb872fb234615d77388094c64b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x0, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xeae}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x2, 0x7, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x2a, 0x9, 0x3e, [@generic={0x15, 0x37, "a466d83a2b01152da95b237ccb64b52808caa6"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x7, 0x4, 0x51, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x8}, @generic={0xdc, 0x8, "330c6218c789e640df1e11f687dc3311cfab932efe3006ed129e0d74fb57ddbd3381d6ae9bfacae5d730b30b58391a57e76ccf0272ffb6c595235b84bbcfc5b2e8e7dc8132661927ea865bc48834538e3e63e6a09f894ac7ba5a083830889dbd9fe91e66d4ca9723b88aea3b4ed684af595f0e9bffde3509dcc3af7d08567bfee7bfcb9e3eadbe9d3f32e73c43b9a53e21fd13bd41f190560db57efe1c8fd525f20439635c15a5b69141e1ef4085e7c9ca1d36890bb0a8c36d8ccfdd3a399f7ceb178aaf7c299e2c11d2ed7a584bdd88fcf1c383e2a196c54632"}]}}, {{0x9, 0x5, 0xc3, 0x4, 0x400, 0x8, 0xd0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x70}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0x61, 0x1, [@generic={0xf9, 0x6, "eb4b938f0c0ac4d301d48a403262a7492f7a8d395bcac8c742600d6f938f867c5a72b70015f9d1ab76816e8ce207df27b8d401a2bba6d09f94b87f9b6fc63e74ad2a53c90c39f203887a136e13e6a0d12b47c8613f6ff3c75f9dc1c35541d57ce5a71d280557a3d8d800a9d2869855cdc13d07fa1e14e19d49bdfe4df7a0e850ad0ee745f46cc8269bf1f8fc81f9727f819313589b09300106d8533116f7ab2d4cc0142cf991aa2a582f9d51b8e7bf418674f4fda21be5d716a446fffe665911a14b753f7c93ab4a9dbaa097943eb12eabef2cb0de948010d419df190ffbdc27c9d0df31eb9262cfb53e039b9229c7043d81965f55fd25"}]}}, {{0x9, 0x5, 0x4, 0x6, 0x10, 0x7, 0x16, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x4, 0x8, 0x600, 0x2, 0xe8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0xfb, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xee, 0x348b}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}]}}, {{0x9, 0x4, 0xab, 0x1, 0x4, 0x5a, 0x7, 0xc0, 0x7, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8ae4b0f54c2d"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0xff80, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x0, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x83}, @generic={0x3d, 0x1, "c9671e3b5ed179ca289b5eedd7b926e75108fff905e71d305f1fa6e1031f0fdc759c3b096c72dcce31771f2b98ba195da6edb074a52da97c763d04"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xff, 0x41, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x210, 0x5, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x6}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x1f, 0x9, 0x40, [@generic={0xcc, 0x22, "a5abdb75c78e568f1d0458ce0ac2e68beb0b0c03fb8f68d6d077c409a212f1ed503874d6be4931558c256604263b37428d0bb83f43c8aefa64fc03f8e03a7fa621d7f1fb40cf661cf44c2cb74bed90b714cf487a244265ac192ea4e450b3234d6e9e864d68309f7c1dce7daddf5586529dc66f464c03dd7e75fbd6f5f7f5ce162245546b6d6d38cce94046e8fd887bd8f43a0af672339ce1c3b22c0bf9584dbbae6f8eef503e385f9d75be6a156a5f592540abd02cd56a4805ca5fa2c43833ed2c1f2b8be188fa21404e"}]}}]}}, {{0x9, 0x4, 0x6c, 0x1, 0xf, 0x86, 0xfb, 0x80, 0x9f, [@uac_control={{0xa, 0x24, 0x1, 0x3f, 0x6}, [@selector_unit={0x9, 0x24, 0x5, 0x4, 0x80, "6a0346d5"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x4, 0x1, "d9ff80f0e1"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x6, 0x8, 0x40, 0xa8, 0x7}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x3, 0x5, [0x1, 0x1, 0x9, 0x9, 0x9], 0x7}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x7, 0x80, '%'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x304, 0x1, 0x1, 0x9, 0x2, 0x81}]}, @hid_hid={0x9, 0x21, 0x20, 0x7, 0x1, {0x22, 0xe2a}}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x20, 0xff, [@generic={0x2f, 0x4, "3b70ddde203731094f7c6e7b1dd6c2e57f3981b7cc66268b47cf3f11e17b30d06572a89b21759bed0ae028accc"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xff, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xfffb}, @generic={0x92, 0xa, "b36d55aa866d14b998c77e2a70b4fda1dd6aec05231d396b919be3474b9283b42170d8d971eda49ad45a7b3e0435e166efffeefa25c072d05ab21ccabd9c4425567d7cbb3ef3ac89c711bba4e402f5af6eb38cc0457c3275066f709756b89a6d99352b24e84f4bdf62ddb2ca1bedb1f7697d6de01274c8571f92ae2f005bd513454db119a4728d874ad52cb320421108"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0xa1, 0x40, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xad, 0x4b3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x0, 0x8, [@generic={0x1c, 0x2, "26f4b18798de39c0dee0df66f90c2937929f77bc6484e12f8383"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x2, 0x2, 0x0, [@generic={0x93, 0xf, "f669e4e8e1e5ae68834cb5eb972c1a583382d1f500951e68110aa15141821dd44909a71d1677740f519ac77ec5acb4cd7f2bc520223cc6d591e26f17fd853906b6173085599836a4de372d4e9bdf8b9789544f90cb6cc00949625c649fcfcf8f4a42763474b96835d4924bbdd146c9f6c24f8f3dd6fa0cee0c99aa490ae9f8026bf89a9682ec944b5e9142622f414ac4d9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x2, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xf3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x6, 0x6, 0x1, [@generic={0x37, 0x0, "dc47fad820e060c34ea42d115500224141b3876dec1a99732b05d365b3e70c3d46a63b0eb49b42015dc3069205bb38569f1da1721a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x40, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0xdae7}, @generic={0x7e, 0x0, "cbc2182d45b1ecf02072d78f1449e5bd5261392c55b22c64e3e8fc5b344d10e60ab0567d140f777cd0571eed184d5bd2492510ef09de5bd7b1ea1ce5d9e9a393a423221a443a4a7fa0badf36052d2a1af457eea97447704edefd83b768e124c05ff84eb159094d9d209275d83766d2c55d4ab54478087d1b3535adf9"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xba, 0x7, 0x20, [@generic={0xba, 0x11, "7286cb9a656fcdf45dfd06f87416896a6a424f812373ede8dd18de10516a60ec6d9860fa5a780fe2779d8ccaeb5ea1635d7052c8508cda1f9eef24d7e5b0510116091cf66ad861cea04912920f345e5569dd5f5d191b61bb97c0f12d9dc3af4307c2d4a8b676a8dd0f1b00adeff1b284fb4871c57c56ca274ec0736fa0e16f11a1f1049916bc75c7404d9b2a03dc5a2981e5ca377c444c0e1b14f034e1441e22d862e6ea16cc67705b3327cfd2eb0e8c3fbaa406d986a911"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x80, 0x1, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x41, 0xfc00}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x5, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x81, 0x1, 0x9, [@generic={0xc4, 0x6, "35ca43275e35e9b32ca0af7e21f758ea6a3af5dde9951c4f3eceb4f98bca8d1f25822d023d74e9dabb6e98503ffa3f4f9f1a72668ad7469d148e3a9dfde664fa86bfd545528701116c6c7383ea12cb3fb6d0a46cff56f3c9a71be87231585c0d43654377d59fe2fcfd39c88ff6f2854c0f6c08a5d30bcb114867501fd46ad7f94e9c0c471cee908bd00af35d7a05e52d70f0872d12e9960e6b5ce71ba5c31cadbd166b0d2e8a84457456f48d97e9efd959d22ab3024d8ffb47864b73b80a268266eb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0xf6, 0x1f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xf38}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x9, 0x2, [@generic={0x8a, 0x2, "8c4af8a84d4ba85cb8abe34e2f9da408f7d1c3a4f2a759ab4e2bcb9aaa143d8e81a9ee09fda9ef7c887331da047ec3b11916317bacbef0f6db5be1d139cb1fe5574810ec5c58c33d8763b9facfe0759051d3dc504f1720647c4054b5aef51c27fff23233bbf8fc2c3e1a2d4df0f3b9afaa2c33ec6f3f1f4e79f692f6b420b7089658c3c5a4d611a7"}, @generic={0xe6, 0xd, "91250798c59f2d794268efdf0f9d7ebefdf8b441d8e5ab86fa760eb955f4a9ad1b18bfa562a60813ec68269c29e4b6abc431614d1fe7f93e4213ce2cf0069fe5390829a809ab9fcd1db611620511f5efc20688e7dc53badce1dc64134791f0486667dc47b9c47a85834da45af38ebc9185dde812b8bf278f9eef3f5cdd991c3deb0992f4e68b605e093f051c9972b095b4d68ee3c5a00ed07b66bc16d9dfde81b5dfded8bd2a4a9efaaa6b8ac46eb8b98f03ab4ecaeb8da5ef66266ff15f4e4de794bcfac617c75c8dc65ef94a6efae7f7dcaa23ee63a55a017a27b8af35b4f16c527a34"}]}}]}}]}}]}}, &(0x7f0000002100)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x250, 0xfe, 0xc3, 0x20, 0x0, 0x9}, 0x4d, &(0x7f0000001bc0)={0x5, 0xf, 0x4d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1a, 0x5, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0x0, 0x3, [0xc000, 0x3f0f, 0xff3f, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x3d, 0x9, 0x1000, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7fffff9, 0x8800, 0x1fca, [0x30]}]}, 0x8, [{0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x44e}}, {0x84, &(0x7f0000001c80)=@string={0x84, 0x3, "5c68be8f696602b580e9ca7182beeccc81bcf585397e394da13ec9d42db910c26ce7a0768f5d0e1a7294d21b7ce6c187e06302ef917a7cb861bda53b5688cfd7eb6891ca6aefa0d41b58d1ca755231b6d0d5642afad5229097336871a78ab8babc81018efa737b22618650fafdb6e02ad6af4ae75ddb4129865e935f164560ddd572"}}, {0x29, &(0x7f0000001d40)=@string={0x29, 0x3, "4edef7f55ce6452a2c114086d43fe10c5dcab512acab0d6a8a6e164ab24de8a8011f52504bd851"}}, {0x40, &(0x7f0000001d80)=@string={0x40, 0x3, "5141a4bc40e947f68d6cc9663bbd1db43b6b5086e429d42396a6cd7dbe0d8daf0047842cc8479e453dd9188a5a43e2eeb0ab6e7915793319a228d29e9850"}}, {0x4e, &(0x7f0000001dc0)=@string={0x4e, 0x3, "09e7e0209cf01a724bfd9c8a126ee70a70c572008b1f6cc6e16d5e9ce954cb63a686461025a4e48f2473fce5a57cb671e6f28bf86d91c9a3398456e6094f13abff9239df35d089eedadc2735"}}, {0xdd, &(0x7f0000001e40)=@string={0xdd, 0x3, "fd6ffd72237902cd7f7266155820ea8025f1cf20727f295e4e638c25f88f2f0fef3114bb685d3f2206551c05aca1826632692875d0d52e8940298fe22375bda96ba04f9828bd199c812bf0421ee31e4b893f9f3e0782482747281bea63f7ac83b1ad31cbab86a1bfc1550ed017c6f7280d0965a7e26739619992df834930e6eaeb8398a760e217619e5c1820293e75654c75bbd173923bbd19e92bfa826cfe1f4d590fa205911469673ee529fba5f333ec9450ae05046c6fb1ace14f12f0dad6930a1d1eede12ae2becabe732c618182e507a6af0ad18fe045e9de"}}, {0xd3, &(0x7f0000001f40)=@string={0xd3, 0x3, "42556041c6adf0ebf384ab3f11b6716a79a7814de7704cc56e911e655918819f6b8973e05e0e1b7796243e7ea4be6caeb7c6400055c722ffe164bd627072c0df79ea8cf485a05c499ae10d4f59a6b484b5496d6a615da627134fc066df719342f9f5907742e764a84a0627ea16c38777ac3be51d07f9e56255f309fbc72e8775e9b578e0745a6054129d995ad1bb395bd77d86d0c163deef13674b0dc98d99c786238084870869b7345e50730a5af87ace47c7c4c12ebf757778e4bdf5f59bfe1bc935c499c869ef220344153d3a08403e"}}, {0x93, &(0x7f0000002040)=@string={0x93, 0x3, "57183dc077d2c854404557411b95967000565044c1872b7efa63327e92d4f464147b4ef449f987dc2767ccd108c9317bd2a0775c5e04f66b222ac7c76f1da7df0cebc9047edfee2200671cd9f3bdfa81011274970d2a6ed121b8b1a9536a947d4e288ec393c0c89112a6771e7d39408c7534e9e14fc2594cc53d2486ff309d192985eb6e0ddef2f4d65d256ba7d566d8f3"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000022c0)={0x24, &(0x7f0000002180)={0x20, 0x8, 0x78, {0x78, 0x22, "83262d5d9ba29c70741b38584081fcb2e2c7591f53e818089adb859952f383bea27529bf5260ea494b089242381fa201f5688351b96a10fffaef4bf6555d37f3f85eed32977f17a2e66f965fec7f485bf7a36927dbd914e7875b6974cc1c1191364b1e2e7934e68cf1ec33266360f9d7ff1585a2e01a"}}, &(0x7f0000002200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000002240)={0x0, 0x22, 0x11, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "ed50611a"}, @local=@item_012={0x2, 0x2, 0x9, "0d0e"}, @local=@item_4={0x3, 0x2, 0x5, "15217ebf"}, @global=@item_012={0x2, 0x1, 0xa, "c7f4"}]}}, &(0x7f0000002280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x9c}}}}, &(0x7f0000002480)={0x2c, &(0x7f0000002300)={0x40, 0x0, 0x66, "33f4f293285c2623e94b5e04152eca2d3684cc088079e640f74a0a157870194df0a96640d7cdecf5bdd724b995db7ffdffbef1cff1c8b56d8d7fc88b0777c2a5d21c08515437b51c8e1f6380de179f2aca9114c792f226cf0a39af3d1ea0afc5826506e59f93"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002400)={0x20, 0x1, 0xf, "09f58b678eddb90681f91f4804f51e"}, &(0x7f0000002440)={0x20, 0x3, 0x1, 0x8a}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, &(0x7f00000027c0)={0x2c, &(0x7f00000024c0)={0x0, 0xf, 0x6b, {0x6b, 0x23, "89424f0c3e4a234f2f79e2be91e5cf0945e18e6f173a4bab646d2ab095e5c6ecaa14bca455d20d570f4d19b9964e0b5d640efc3161d55bc7388218604c6fd95817c5aee1cc030bb8492f1f36b69e03b46c57d7b244ac706c74e4f47a2119a7d59dfdae6d5446152f5b"}}, &(0x7f0000002540)={0x0, 0x3, 0xca, @string={0xca, 0x3, "579ebcebd5617332c19959ae94cfef978d200436d419f650076ff111831aca8ae677bee99951a205edce2176a27844334aeadba7564e9b388a36e4c27f70d171f6a903544c612dd9f9768fce384d9223c3e934bf9bac2c7fa2ba58c22c5047681f4be8c728a94ef75c3f93488cef9624fb14a24e0d8aa8277de4a7928f6cdf1524cd1f5584c464a820f1196e6be9d921998ed151eb1399578ff751d5fcdac69cbaf6142c434575c29cdcba4079dcaddddb25677dd487cd046de22b7b0f101f2c44b36bf26fb347bf"}}, &(0x7f0000002640)={0x0, 0xf, 0xd4, {0x5, 0xf, 0xd4, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x3, 0x0, 0x7000, [0xc000, 0xf0, 0x0, 0xc000, 0xc000, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0xf8, 0x5}, @generic={0xa1, 0x10, 0x2, "05e72cb5bbcc4a54b2a3dbed6b7f2978eadc97f55a410708697b2c5a107d43984fb133d21b0ef349370bc6796f4b21999af93d3d26f670a15d04294bf71b30623955a503b17add2d55844c4ef999edf8e6c621fca44431a0339b638e73b106e0005d10a92bd33d0f708cc35edaf4fe37748f9339915bd55ce294fb44265f2a67496f68146bb9df6dffcea716096200223fedddabcb9e854d90beb4e6f04e"}]}}, &(0x7f0000002740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x81, 0x0, "741f7e08", "19a1d665"}}, &(0x7f0000002780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x27, 0x7, 0x2, 0x20, 0x4}}}, &(0x7f0000002c80)={0x84, &(0x7f0000002800)={0x40, 0x0, 0xae, "bd89db4519cac66eff400756096713a321561c622c8bc2633ed4deb06c06fef45385982601d48b58caf8c107e9f11cc7dce8dd1c02ee94162ddd69dcaeeef3692bd8683e49c1f31f44c8632e5bcee9615da5b3648423b4e5e009f3000a171a1892d3db7e88efee8d22347bf1bcd785de5b6d69b83718a5a8987d0261755d0503803e2e9281d4926092d8bb9c0b651933b72b87bcf8b3847923fd05308b5883b9a8b757e09364290d07ecf8a7f524"}, &(0x7f00000028c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000002900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002940)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002980)={0x20, 0x0, 0x8, {0x200, 0x12, [0x0]}}, &(0x7f00000029c0)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000002a00)={0x40, 0x9, 0x1}, &(0x7f0000002a40)={0x40, 0xb, 0x2, "9f32"}, &(0x7f0000002a80)={0x40, 0xf, 0x2}, &(0x7f0000002ac0)={0x40, 0x13, 0x6, @random="f43bf6a33380"}, &(0x7f0000002b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002b40)={0x40, 0x19, 0x2, "4803"}, &(0x7f0000002b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000002c00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002c40)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x10, 0xb7, {0xb7, 0xe, "63832e4af3516f58f33a1102ea0371d9f83fe7fe83cd7b3bf1c25a9ecaed27523f0545691e36c80086fdbda146bbcde678b68ed5170784ea7cb18e5ccdc91ed41d4fec778b558f1cd999ba7776b31eec1852eebf4159dc907f3724671e855b535b2bd273cbe9299eee232b5e21cd25586ebe55d078e408ea511cde821e721648d92c2a5208d102e9e3e6c39167d18926da6d8d84ad78a4c2f581a56aa00b312b75508d2c97adbb06296f3cd9566507fc82b28aa8e8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000003680)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x8, "7ac9ccc9"}, @global=@item_012={0x2, 0x1, 0x4, "8f5a"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x5, "f1cd7110"}, @main=@item_4={0x3, 0x0, 0x9, "faca9f62"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x1, "4b250fd4"}, @main=@item_4={0x3, 0x0, 0xa, "a3e68569"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xeb73, 0x4d, 0x1, {0x22, 0xd94}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0x13, 0xe3, "dd5945efdf08273029b7b9e0b1f0ab7979a6bea06a3d39689e4981b487b42198e7290a34b880fe4468de8e04df93511d52575df5db42d17cfceaa7e6d35f1eefbfe68bd78a9c95e55499e82bad07521a78d84ceb76ec77fdf879cf5b85d84258269417407c65a0d300cfc35089a30bb55340a50f1f1b1cf63b6eabcfc4c51144e27c77cbcdce08a8ec0e294eecb9b23a33341527df942e84d57935128dbf5cfa2abb59703b1f495a75d7e24b7a82afe88864826b0720ce68865fe3a5a2f66bcb5bb85c6cadc082afe0f150898c22fde48df697c1ea9124d4ae298a50ab2d114aa8ba8b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000000480)={0x20, 0x1, 0xe7, "c60c9c60b4a9fde2ab262cc191ba603ea54ee8502121fff6514e48c9c3a9720d521b82990fad1ac2f3957dea80b7e0513bbd3619857276e253ec860f7c493afde91d7b31df15029d3498d8203dd6ac6917e88381d4239762bcebb9ddbaa9277713213be4b5c1c4687ec9ce96c5643d65abb856d40a4f92aa3f61dd81e8736c4ed96cbd296eb273b4022d83789813ce74eb95da4458fceba3472fb6f9c551f7f821117aeef80c34b04a1a0cbc5af0956d19dbfd7a3b2b943229fd055ce7cfc1c84ce10831de0cbab65b054d8f60041d92c9b7404d7d170548f16ffbe213d8fa97635da8388bf99e"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xc6}}) (async) r3 = syz_usb_connect(0x3, 0x287, &(0x7f0000002d40)={{0x12, 0x1, 0x301, 0x2c, 0x59, 0x42, 0x40, 0x2019, 0x1201, 0xa39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x275, 0x2, 0x8, 0x20, 0x60, 0x0, [{{0x9, 0x4, 0x29, 0x80, 0x4, 0x32, 0xec, 0x4f, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x80}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x5, 0x2, 0x8}]}], [{{0x9, 0x5, 0xf, 0x3, 0x8, 0x2, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x2, 0x0, 0xfd, [@generic={0x4d, 0x0, "d64f34d2bfd97bf1c33f409bdfb501bfb719a4179d7c94b73477de9c9c305e4a66e4163238d085879c79e7174a85b89b64ee44eedb2a65682273933d273f3d61514e8e57aad7e18090d501"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x3f}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x20, 0x40, 0x26, [@generic={0x10, 0x11, "afee0621030e392359bc284f0ef9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x35}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x7, 0x2, [@generic={0xbe, 0xd, "f47af08826aa333e4380f40aac61c0bbd3eb5fe1a15a7f9cd71a40e25e2b8605420e46f66cf6e6c1486df552354baacd8403b7a71573e973b92ab40bdef64d6085b5679c6fb65ff4e1b0099a5333c21c46d52f187c0da59b972e52fb896583c99709079efcf5e4d79fb87743ca4d4e0a620c45c568000b4f14cd3a87d4d13286a0c55750c3eb5ed2b383e92e4c2af28e98b54acf867b837ca051000666ce82e9971d59945a7aabc85fc8e33153ac67bf2ac5239b0c0062b13958bf74"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}]}}, {{0x9, 0x4, 0xa7, 0x0, 0x2, 0x18, 0x6e, 0xbf, 0x36, [@hid_hid={0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xd92}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "120e2d"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xd60a, 0x8001, 0xffff, 0x5c}, {0x6, 0x24, 0x1a, 0x200, 0x18}, [@acm={0x4, 0x24, 0x2, 0xf}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x0, 0xdb}, @mbim={0xc, 0x24, 0x1b, 0xc00, 0x1, 0x81, 0x1, 0x80, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x20, 0x81, 0x1}]}], [{{0x9, 0x5, 0xa, 0x4, 0x0, 0x3f, 0x8, 0x80, [@generic={0x82, 0x1, "2c25004200dafcd26d67244f4057d02e04949440802fe81aa54e1ff4f51f4cf196868370825d013de606d4fe27a413a475a05bfed954762d3c5ab3d4572946a6c15bc2eb0384c9abf61bbec9d9f48eb3f47ce4469e0fef5c0e3662184d05e0e6c58145112e9b2ddf56ebbde15f73001a9592de7a02f6fc3e6c78b2e070b7b444"}]}}, {{0x9, 0x5, 0xa, 0x14, 0x208, 0x7, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x3}]}}]}}]}}]}}, &(0x7f0000003140)={0xa, &(0x7f0000003000)={0xa, 0x6, 0x310, 0x5, 0x8, 0x3f, 0x8, 0x1}, 0x16, &(0x7f0000003040)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x64, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x9}]}, 0x2, [{0x4, &(0x7f0000003080)=@lang_id={0x4, 0x3, 0xf0c6}}, {0x56, &(0x7f00000030c0)=@string={0x56, 0x3, "7650200962de98d9a020bdeef1542b04e50c5d2504fdd73d6d3522fa43b51f83d1772bb7d2b8d8907253aa01b2157f86e036e4e2daa4d3b7714f0a3d4a394080c1e2f998d9787c6837982951d0f5df83ab8e7388"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000003380)={0x24, &(0x7f0000003180)={0x20, 0x11, 0x8b, {0x8b, 0x23, "ea9a5ff0c5b2bcf1b0fce974e9d94a26954eb43b9d8be46676bcc1cbfea762c28a9a14633b5a7e66ec151b510978a41620032914d857d18493706009899d28a3b27688ffa81000c16445167d753a631f47b1dcf5c45169029242776b4e703e1c0e6bb2ad6737f73e8bd5b361077660db7920992aa95b9ca2c5f7fa0887a5c2ab217d766d6886caf6df"}}, &(0x7f0000003240)={0x0, 0x3, 0x80, @string={0x80, 0x3, "5cf7b295be687b14a48458c9ecb6a724b91ee15b1a11f8b075bbd01488ce204e0df673d95ad009d894407320fa05594ebb8a8147bfcb3760e0498a1dab758bd02c7214d66ac6c9d73e0cc953de097d8ba33567bfbbf518b63466f7095ab570ac8c555dc307478885600758f7d1b16e594d51098d4dab558af56aa0920cf9"}}, &(0x7f0000003300)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "34a3906c"}]}}, &(0x7f0000003340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x7f, 0x1, {0x22, 0x907}}}}, &(0x7f0000003640)={0x2c, &(0x7f00000033c0)={0x40, 0x0, 0xf7, "bf213e8b7d381f5871b67e33642e1231c06797a3abdf7bfe08fa360da96ef3041037ff3194c389d372a3369eac87dca5ccf9e02c34d748bbfb1f1922976140e95dacf0a3b91dab0de953e352edfcf00f69c82f7110dfac9dccd3c252be09896084c564b32189a4b64692b004991a1ef95b29bd05b27f6972ec1e7b23a87b4427b484c3309574366505f2808befd9629b6ba823e0a2120c1f11ab2235e4a9f2764dc568d46af6a127f082ff2f408a18333696766bbd4f9ebb99fe6c62f8ad6e597abfd28a252efee3c5367ada8c0c3e042ed67257248e77c36fa6994015ed710a38b0b5aadc1bdcb846579f199eba83c7518303d2e1a6c7"}, &(0x7f00000034c0)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000003500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003540)={0x20, 0x1, 0xa4, "b9f9dcbd4089b7052448f202079c494803113561e411b4f5082f60228e463e6cc3bab627bda55868edea8226c6e277c571fe889c146949a7a3745ca3b7ceecabf7559e800ead7d91f2d65107c4bd47bfe5402467e65d5dfa9906f1d2248667ac46dcd483b6042007d6bf2983fad265997b97fbb397dc918a48cc68da141e3217da2316b9ae7e2ea52e2be49ea9b60d600f618f2251e6d36b22116bce0220887987977518"}, &(0x7f0000003600)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, &(0x7f0000000600)={0x40, 0x1, 0x1c, {0x1c, 0x1, "77cd95299959b7d90e717aa2d5f398cf2b0f30b52add074ec2c9"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0e}}, &(0x7f0000000740)={0x0, 0x22, 0x21, {[@local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "e24fa543"}, @global=@item_4={0x3, 0x1, 0x9, "f112398d"}, @local=@item_012={0x1, 0x2, 0xa, "cd"}, @main=@item_4={0x3, 0x0, 0x9, "b270e1f8"}, @global=@item_4={0x3, 0x1, 0xb, "d7899203"}, @global=@item_4={0x3, 0x1, 0xa, "92424b4c"}, @global=@item_4={0x3, 0x1, 0x1, "74569ff1"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0xca72, 0x2, 0x1, {0x22, 0xc69}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000800)={0x0, 0x34, 0x5b, "1d9c6434629c4cb0cb8268b0c66cae45f29f7f1f3a880425eb1c42dc168cd4eb72ade1a7033f4f6bd18678b2510f7f2cecfac947f4a7c98fdbc2bda66c744caa0bc2f33bc77e73c6a3a2f23f4f8bab2221e2d5b6f702df16bcb313"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7a}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000900)={0x20, 0x1, 0xeb, "fb088b13ad5c39e62ed270089a398f61ce3a76d54367d09bb659f956f8ba934a06769b7c5597852b23df2823a6bb3670f9bd9fbd2b0caf63bac4fdf097e0edc58561366308a73fa704692ad6e7a1df29a5055fe2f0441781dd350363864a007457a0ca360732f09edc880e732a6130ea7a5daa75c1b71ade6d88756954a6c18e18f54ce4d1ebf8c601ae195a6024df0e93509958b8bce63688c4c1e6601b696b423868d27a9008b30ece59761e7ef51cb2f3ef27de066df40acf63497de807e5244643cdb0c4a5d9c914b93e64debb28fc6c1b3c87dc8f3660d0a444cb0657f0d0697aa892da84bc87a986"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x1}}) 09:31:51 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d8) 09:31:51 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1290) 09:31:51 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12a8) 09:31:51 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f0) 09:31:51 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12c0) 09:31:51 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12a8) [ 1699.738920][ T72] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1699.788997][ T25] usb 6-1: Service connection timeout for: 256 [ 1699.795210][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1699.805974][ T25] ath9k_htc: Failed to initialize the device [ 1699.812293][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1700.099007][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.110045][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.119853][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1700.132697][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1700.141794][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.152616][ T72] usb 2-1: config 0 descriptor?? [ 1700.219064][ T4035] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1700.611329][T20321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.624916][T20321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.634755][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.642300][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.649791][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.657202][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.664684][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.672167][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.679717][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.687231][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.694723][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.702164][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.709634][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.717047][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.724534][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.732006][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.739473][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.746890][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.754357][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.761914][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.769375][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.776785][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.784270][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.791720][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.799186][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.806611][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.814088][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.821539][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.828987][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.829988][T20322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.836375][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.852242][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.859152][T20322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.859679][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.874796][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.882347][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.889793][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.897202][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.904662][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.912121][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.919588][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.927000][ T72] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1700.935077][ T72] plantronics 0003:047F:FFFF.00CD: No inputs registered, leaving [ 1700.944976][ T72] plantronics 0003:047F:FFFF.00CD: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1700.959712][ T72] usb 2-1: USB disconnect, device number 79 [ 1701.009216][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1701.018324][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.026558][ T4035] usb 6-1: Product: syz [ 1701.030779][ T4035] usb 6-1: Manufacturer: syz [ 1701.035396][ T4035] usb 6-1: SerialNumber: syz [ 1701.119526][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1701.749090][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1702.154992][ T9824] usb 6-1: USB disconnect, device number 50 09:31:54 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x2}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:54 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x408) 09:31:54 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 09:31:54 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12c0) 09:31:54 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 09:31:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x10e0, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x28, 0x65, 0x70, 0x0, 0x547, 0x201, 0x9a8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10ce, 0x4, 0x0, 0x81, 0x0, 0x4, [{{0x9, 0x4, 0xf8, 0x81, 0xc, 0xaf, 0x28, 0x2d, 0x3f, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x37}, [@mixer_unit={0x7, 0x24, 0x4, 0x5, 0x0, "de10"}]}, @uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x4, 0x4, "bda2947d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffa, 0x5, 0x3f}]}], [{{0x9, 0x5, 0x4, 0x3, 0x40, 0x1f, 0x7, 0xc4, [@generic={0x39, 0x24, "8bc0268fe85e5d04d1c6986ff21f1daf6ac351881b847345501aa6a56cc4bbee0877d095535c0de6f24fe573a94411782b5c859f00b232"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x200}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x7, 0x5, 0x0, [@generic={0xbd, 0x9, "3c390f20cc58c6a71704a5d555e3f526b67fcf67f68b819aad720b6bbdf2c1f3a9c119e636f520a0b82164f175eaa8906caeb2e2b763894cf9b3ffbab20c0ffdda184eb4252eec45e110daec134d4a7e2c096f9601096518bd103e13d07a79b39f1b53649bd08b27b3a253c21fdce428aa84fd34230874498753f0fe951445e95f36b41543f2f112a1b098156eb0fff17c544f6eb06ba6693b9208344ce36f6677be79a1ca8378b960fb54c44507d5573f19997d3988af32ca955b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0xc1, 0x3f, [@generic={0x9c, 0x0, "66e4f275274da91db5b24b78d01d2a1317047079d248f64f0953ce511651bbd5162c041ad4851f74aa4ee26532392447a8554ba7a9e7fd07e8a8e9a15c3ae5f71ff977f9d0103e2256f8b1106e4f6a8efe9b54695cf587206764918549a303f2ea4ae446bbf6dea08e36f53e4bf7398dcef8adb185524920268afb2493975401e9f4382460ef59b1622a8ee285d4af20633066ae8591aaac8e5a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x3f, 0x0, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x1f, 0x4, 0x4, [@generic={0x92, 0x9, "26fac779aba0a8b729357b90abc1ef6ecf58f0e494d9181b8fd506cc2f55dc42593841fb5a62340172b2a31b86b8d7b4686b3b6f247c170708c8300062839e790e19032e666861181a90bcf0dff696f6b04ad81ece737ed898672f6ba12f77a53b92db5cfa73ec29535ac48b678c7344908a733a9633739deec405782c6a4dc5fbe0de1aba4ed4d150eac3a6fa9dcbbd"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x91, 0x0, 0x1, [@generic={0x2a, 0x9, "c74ccd6efbb5d3b5b6e6854056713cfa1a093bd758d213fb6747306eed0b3c4293681c3072c39f83"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x253}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x8, 0xff, [@generic={0x18, 0x30, "df235f2258f4b9f44a0cbd43321460c63cd4f2b298c8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0xc3, 0x8, [@generic={0xba, 0x7, "e400d195a58627b3cf450b90b80a99fdab4841291bf648e18a8349113a7762f139ca738ca92c18d089182e6e2f49abdc36c226f5bcac5fdedcc9e9966eed753452f6ae9c3c18ffb26dcd484abbd4e41cf4c36edf56d00e087c0c8eb3c3525647b12fa305191903c291e923658423696c5237804264b301da9c66a8675807ff07accb5196d0926f0a24cc90f673eac1f893997cedc11643898060d9722515de9b5439c21ad48a46b29f327bebb46705f525fac68e78984f5e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0x4, 0x3f, [@generic={0x39, 0x23, "00bacc302f0d32b8a4111863f18a0348dbe9b2f524d17fc853c52a81e9c5aa08d4393119192c0287086ec2fa90ba6556c621872224b70a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x3f, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xab, 0x81}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x4, 0x3, [@generic={0x32, 0x22, "a40e47fd25448ce01474be1f6481ceededc27e62148defece544e8f1ecafddb1e2c2f37dfae775778b2baedf85714dcc"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x2, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa6, 0x8001}]}}]}}, {{0x9, 0x4, 0xa9, 0x1f, 0x10, 0x2, 0xe, 0x0, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7f, 0x7f, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc8f4, 0x5, 0xec, "148c51ddc1ff7ed9"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x9, 0x1002}]}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}, @generic={0x22, 0x31, "39f25751a6d519160fd49876c355cd2a3d4506cf102926ae368155bb99617a6c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x5, 0x3f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x57, 0x100}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x6, 0x5, 0x7, [@generic={0x87, 0xe, "aca214d9efcf3cc5096076fd2ba998762faa7454b383bb23bd391af7dc4ab6276d1144e6472aeb9d933fea1ab71f60ed4e9748b382003621059bd5b6b142d655b26b0b1660640b3db5490525c530ba9f04c1a613022562a7341cecf6eac7c3a800ab9a7ebc8542a1195b3b0ec45b70cb68fb0035383f2556f2aea580a24eb7d61f26861c9e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x81, 0x1, [@generic={0x98, 0x24, "027039c7b613d2ecdd29341f5886cd3a3d60c853bea9d07bb96a0c6a6826522d108cca1108d76f29fb0df3fb9f215f6b3dfd122c242636109def096680fe9ccf3b37de0c54a713fd156b7abd9f6001f4e9721dcb168d4eb1c2a01eefe1819bffec51eaa45273e2fd35e4b7362bb535814c5f52eedec2a47ff873cdbcf1ba51620442c524dbd9b2c7d76e799ec8dd96828be66b583031"}, @generic={0x46, 0x21, "55dbfda98ea81ec7c874a31bc5dbade064cc5839ab985d3bec20f65192ba024e848d3cd995e0e083fd41031ef6833adde1ad72cee271f869d1593fba01ce6f5078caa9da"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x0, 0xff, 0x20, [@generic={0x2e, 0x31, "8539cfa569bff4ef89a88204e23c4e4ce4461f44c5ffe2780879b61cf5146efb872fb234615d77388094c64b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x0, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xeae}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x2, 0x7, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x2a, 0x9, 0x3e, [@generic={0x15, 0x37, "a466d83a2b01152da95b237ccb64b52808caa6"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x7, 0x4, 0x51, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x8}, @generic={0xdc, 0x8, "330c6218c789e640df1e11f687dc3311cfab932efe3006ed129e0d74fb57ddbd3381d6ae9bfacae5d730b30b58391a57e76ccf0272ffb6c595235b84bbcfc5b2e8e7dc8132661927ea865bc48834538e3e63e6a09f894ac7ba5a083830889dbd9fe91e66d4ca9723b88aea3b4ed684af595f0e9bffde3509dcc3af7d08567bfee7bfcb9e3eadbe9d3f32e73c43b9a53e21fd13bd41f190560db57efe1c8fd525f20439635c15a5b69141e1ef4085e7c9ca1d36890bb0a8c36d8ccfdd3a399f7ceb178aaf7c299e2c11d2ed7a584bdd88fcf1c383e2a196c54632"}]}}, {{0x9, 0x5, 0xc3, 0x4, 0x400, 0x8, 0xd0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x70}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0x61, 0x1, [@generic={0xf9, 0x6, "eb4b938f0c0ac4d301d48a403262a7492f7a8d395bcac8c742600d6f938f867c5a72b70015f9d1ab76816e8ce207df27b8d401a2bba6d09f94b87f9b6fc63e74ad2a53c90c39f203887a136e13e6a0d12b47c8613f6ff3c75f9dc1c35541d57ce5a71d280557a3d8d800a9d2869855cdc13d07fa1e14e19d49bdfe4df7a0e850ad0ee745f46cc8269bf1f8fc81f9727f819313589b09300106d8533116f7ab2d4cc0142cf991aa2a582f9d51b8e7bf418674f4fda21be5d716a446fffe665911a14b753f7c93ab4a9dbaa097943eb12eabef2cb0de948010d419df190ffbdc27c9d0df31eb9262cfb53e039b9229c7043d81965f55fd25"}]}}, {{0x9, 0x5, 0x4, 0x6, 0x10, 0x7, 0x16, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x4, 0x8, 0x600, 0x2, 0xe8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0xfb, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xee, 0x348b}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}]}}, {{0x9, 0x4, 0xab, 0x1, 0x4, 0x5a, 0x7, 0xc0, 0x7, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8ae4b0f54c2d"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0xff80, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x0, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x83}, @generic={0x3d, 0x1, "c9671e3b5ed179ca289b5eedd7b926e75108fff905e71d305f1fa6e1031f0fdc759c3b096c72dcce31771f2b98ba195da6edb074a52da97c763d04"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xff, 0x41, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x210, 0x5, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x6}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x1f, 0x9, 0x40, [@generic={0xcc, 0x22, "a5abdb75c78e568f1d0458ce0ac2e68beb0b0c03fb8f68d6d077c409a212f1ed503874d6be4931558c256604263b37428d0bb83f43c8aefa64fc03f8e03a7fa621d7f1fb40cf661cf44c2cb74bed90b714cf487a244265ac192ea4e450b3234d6e9e864d68309f7c1dce7daddf5586529dc66f464c03dd7e75fbd6f5f7f5ce162245546b6d6d38cce94046e8fd887bd8f43a0af672339ce1c3b22c0bf9584dbbae6f8eef503e385f9d75be6a156a5f592540abd02cd56a4805ca5fa2c43833ed2c1f2b8be188fa21404e"}]}}]}}, {{0x9, 0x4, 0x6c, 0x1, 0xf, 0x86, 0xfb, 0x80, 0x9f, [@uac_control={{0xa, 0x24, 0x1, 0x3f, 0x6}, [@selector_unit={0x9, 0x24, 0x5, 0x4, 0x80, "6a0346d5"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x4, 0x1, "d9ff80f0e1"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x6, 0x8, 0x40, 0xa8, 0x7}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x3, 0x5, [0x1, 0x1, 0x9, 0x9, 0x9], 0x7}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x7, 0x80, '%'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x304, 0x1, 0x1, 0x9, 0x2, 0x81}]}, @hid_hid={0x9, 0x21, 0x20, 0x7, 0x1, {0x22, 0xe2a}}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x20, 0xff, [@generic={0x2f, 0x4, "3b70ddde203731094f7c6e7b1dd6c2e57f3981b7cc66268b47cf3f11e17b30d06572a89b21759bed0ae028accc"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xff, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xfffb}, @generic={0x92, 0xa, "b36d55aa866d14b998c77e2a70b4fda1dd6aec05231d396b919be3474b9283b42170d8d971eda49ad45a7b3e0435e166efffeefa25c072d05ab21ccabd9c4425567d7cbb3ef3ac89c711bba4e402f5af6eb38cc0457c3275066f709756b89a6d99352b24e84f4bdf62ddb2ca1bedb1f7697d6de01274c8571f92ae2f005bd513454db119a4728d874ad52cb320421108"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0xa1, 0x40, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xad, 0x4b3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x0, 0x8, [@generic={0x1c, 0x2, "26f4b18798de39c0dee0df66f90c2937929f77bc6484e12f8383"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x2, 0x2, 0x0, [@generic={0x93, 0xf, "f669e4e8e1e5ae68834cb5eb972c1a583382d1f500951e68110aa15141821dd44909a71d1677740f519ac77ec5acb4cd7f2bc520223cc6d591e26f17fd853906b6173085599836a4de372d4e9bdf8b9789544f90cb6cc00949625c649fcfcf8f4a42763474b96835d4924bbdd146c9f6c24f8f3dd6fa0cee0c99aa490ae9f8026bf89a9682ec944b5e9142622f414ac4d9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x2, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xf3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x6, 0x6, 0x1, [@generic={0x37, 0x0, "dc47fad820e060c34ea42d115500224141b3876dec1a99732b05d365b3e70c3d46a63b0eb49b42015dc3069205bb38569f1da1721a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x40, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0xdae7}, @generic={0x7e, 0x0, "cbc2182d45b1ecf02072d78f1449e5bd5261392c55b22c64e3e8fc5b344d10e60ab0567d140f777cd0571eed184d5bd2492510ef09de5bd7b1ea1ce5d9e9a393a423221a443a4a7fa0badf36052d2a1af457eea97447704edefd83b768e124c05ff84eb159094d9d209275d83766d2c55d4ab54478087d1b3535adf9"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xba, 0x7, 0x20, [@generic={0xba, 0x11, "7286cb9a656fcdf45dfd06f87416896a6a424f812373ede8dd18de10516a60ec6d9860fa5a780fe2779d8ccaeb5ea1635d7052c8508cda1f9eef24d7e5b0510116091cf66ad861cea04912920f345e5569dd5f5d191b61bb97c0f12d9dc3af4307c2d4a8b676a8dd0f1b00adeff1b284fb4871c57c56ca274ec0736fa0e16f11a1f1049916bc75c7404d9b2a03dc5a2981e5ca377c444c0e1b14f034e1441e22d862e6ea16cc67705b3327cfd2eb0e8c3fbaa406d986a911"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x80, 0x1, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x41, 0xfc00}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x5, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x81, 0x1, 0x9, [@generic={0xc4, 0x6, "35ca43275e35e9b32ca0af7e21f758ea6a3af5dde9951c4f3eceb4f98bca8d1f25822d023d74e9dabb6e98503ffa3f4f9f1a72668ad7469d148e3a9dfde664fa86bfd545528701116c6c7383ea12cb3fb6d0a46cff56f3c9a71be87231585c0d43654377d59fe2fcfd39c88ff6f2854c0f6c08a5d30bcb114867501fd46ad7f94e9c0c471cee908bd00af35d7a05e52d70f0872d12e9960e6b5ce71ba5c31cadbd166b0d2e8a84457456f48d97e9efd959d22ab3024d8ffb47864b73b80a268266eb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0xf6, 0x1f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xf38}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x9, 0x2, [@generic={0x8a, 0x2, "8c4af8a84d4ba85cb8abe34e2f9da408f7d1c3a4f2a759ab4e2bcb9aaa143d8e81a9ee09fda9ef7c887331da047ec3b11916317bacbef0f6db5be1d139cb1fe5574810ec5c58c33d8763b9facfe0759051d3dc504f1720647c4054b5aef51c27fff23233bbf8fc2c3e1a2d4df0f3b9afaa2c33ec6f3f1f4e79f692f6b420b7089658c3c5a4d611a7"}, @generic={0xe6, 0xd, "91250798c59f2d794268efdf0f9d7ebefdf8b441d8e5ab86fa760eb955f4a9ad1b18bfa562a60813ec68269c29e4b6abc431614d1fe7f93e4213ce2cf0069fe5390829a809ab9fcd1db611620511f5efc20688e7dc53badce1dc64134791f0486667dc47b9c47a85834da45af38ebc9185dde812b8bf278f9eef3f5cdd991c3deb0992f4e68b605e093f051c9972b095b4d68ee3c5a00ed07b66bc16d9dfde81b5dfded8bd2a4a9efaaa6b8ac46eb8b98f03ab4ecaeb8da5ef66266ff15f4e4de794bcfac617c75c8dc65ef94a6efae7f7dcaa23ee63a55a017a27b8af35b4f16c527a34"}]}}]}}]}}]}}, &(0x7f0000002100)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x250, 0xfe, 0xc3, 0x20, 0x0, 0x9}, 0x4d, &(0x7f0000001bc0)={0x5, 0xf, 0x4d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1a, 0x5, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0x0, 0x3, [0xc000, 0x3f0f, 0xff3f, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x3d, 0x9, 0x1000, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7fffff9, 0x8800, 0x1fca, [0x30]}]}, 0x8, [{0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x44e}}, {0x84, &(0x7f0000001c80)=@string={0x84, 0x3, "5c68be8f696602b580e9ca7182beeccc81bcf585397e394da13ec9d42db910c26ce7a0768f5d0e1a7294d21b7ce6c187e06302ef917a7cb861bda53b5688cfd7eb6891ca6aefa0d41b58d1ca755231b6d0d5642afad5229097336871a78ab8babc81018efa737b22618650fafdb6e02ad6af4ae75ddb4129865e935f164560ddd572"}}, {0x29, &(0x7f0000001d40)=@string={0x29, 0x3, "4edef7f55ce6452a2c114086d43fe10c5dcab512acab0d6a8a6e164ab24de8a8011f52504bd851"}}, {0x40, &(0x7f0000001d80)=@string={0x40, 0x3, "5141a4bc40e947f68d6cc9663bbd1db43b6b5086e429d42396a6cd7dbe0d8daf0047842cc8479e453dd9188a5a43e2eeb0ab6e7915793319a228d29e9850"}}, {0x4e, &(0x7f0000001dc0)=@string={0x4e, 0x3, "09e7e0209cf01a724bfd9c8a126ee70a70c572008b1f6cc6e16d5e9ce954cb63a686461025a4e48f2473fce5a57cb671e6f28bf86d91c9a3398456e6094f13abff9239df35d089eedadc2735"}}, {0xdd, &(0x7f0000001e40)=@string={0xdd, 0x3, "fd6ffd72237902cd7f7266155820ea8025f1cf20727f295e4e638c25f88f2f0fef3114bb685d3f2206551c05aca1826632692875d0d52e8940298fe22375bda96ba04f9828bd199c812bf0421ee31e4b893f9f3e0782482747281bea63f7ac83b1ad31cbab86a1bfc1550ed017c6f7280d0965a7e26739619992df834930e6eaeb8398a760e217619e5c1820293e75654c75bbd173923bbd19e92bfa826cfe1f4d590fa205911469673ee529fba5f333ec9450ae05046c6fb1ace14f12f0dad6930a1d1eede12ae2becabe732c618182e507a6af0ad18fe045e9de"}}, {0xd3, &(0x7f0000001f40)=@string={0xd3, 0x3, "42556041c6adf0ebf384ab3f11b6716a79a7814de7704cc56e911e655918819f6b8973e05e0e1b7796243e7ea4be6caeb7c6400055c722ffe164bd627072c0df79ea8cf485a05c499ae10d4f59a6b484b5496d6a615da627134fc066df719342f9f5907742e764a84a0627ea16c38777ac3be51d07f9e56255f309fbc72e8775e9b578e0745a6054129d995ad1bb395bd77d86d0c163deef13674b0dc98d99c786238084870869b7345e50730a5af87ace47c7c4c12ebf757778e4bdf5f59bfe1bc935c499c869ef220344153d3a08403e"}}, {0x93, &(0x7f0000002040)=@string={0x93, 0x3, "57183dc077d2c854404557411b95967000565044c1872b7efa63327e92d4f464147b4ef449f987dc2767ccd108c9317bd2a0775c5e04f66b222ac7c76f1da7df0cebc9047edfee2200671cd9f3bdfa81011274970d2a6ed121b8b1a9536a947d4e288ec393c0c89112a6771e7d39408c7534e9e14fc2594cc53d2486ff309d192985eb6e0ddef2f4d65d256ba7d566d8f3"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000022c0)={0x24, &(0x7f0000002180)={0x20, 0x8, 0x78, {0x78, 0x22, "83262d5d9ba29c70741b38584081fcb2e2c7591f53e818089adb859952f383bea27529bf5260ea494b089242381fa201f5688351b96a10fffaef4bf6555d37f3f85eed32977f17a2e66f965fec7f485bf7a36927dbd914e7875b6974cc1c1191364b1e2e7934e68cf1ec33266360f9d7ff1585a2e01a"}}, &(0x7f0000002200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000002240)={0x0, 0x22, 0x11, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "ed50611a"}, @local=@item_012={0x2, 0x2, 0x9, "0d0e"}, @local=@item_4={0x3, 0x2, 0x5, "15217ebf"}, @global=@item_012={0x2, 0x1, 0xa, "c7f4"}]}}, &(0x7f0000002280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x9c}}}}, &(0x7f0000002480)={0x2c, &(0x7f0000002300)={0x40, 0x0, 0x66, "33f4f293285c2623e94b5e04152eca2d3684cc088079e640f74a0a157870194df0a96640d7cdecf5bdd724b995db7ffdffbef1cff1c8b56d8d7fc88b0777c2a5d21c08515437b51c8e1f6380de179f2aca9114c792f226cf0a39af3d1ea0afc5826506e59f93"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002400)={0x20, 0x1, 0xf, "09f58b678eddb90681f91f4804f51e"}, &(0x7f0000002440)={0x20, 0x3, 0x1, 0x8a}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000027c0)={0x2c, &(0x7f00000024c0)={0x0, 0xf, 0x6b, {0x6b, 0x23, "89424f0c3e4a234f2f79e2be91e5cf0945e18e6f173a4bab646d2ab095e5c6ecaa14bca455d20d570f4d19b9964e0b5d640efc3161d55bc7388218604c6fd95817c5aee1cc030bb8492f1f36b69e03b46c57d7b244ac706c74e4f47a2119a7d59dfdae6d5446152f5b"}}, &(0x7f0000002540)={0x0, 0x3, 0xca, @string={0xca, 0x3, "579ebcebd5617332c19959ae94cfef978d200436d419f650076ff111831aca8ae677bee99951a205edce2176a27844334aeadba7564e9b388a36e4c27f70d171f6a903544c612dd9f9768fce384d9223c3e934bf9bac2c7fa2ba58c22c5047681f4be8c728a94ef75c3f93488cef9624fb14a24e0d8aa8277de4a7928f6cdf1524cd1f5584c464a820f1196e6be9d921998ed151eb1399578ff751d5fcdac69cbaf6142c434575c29cdcba4079dcaddddb25677dd487cd046de22b7b0f101f2c44b36bf26fb347bf"}}, &(0x7f0000002640)={0x0, 0xf, 0xd4, {0x5, 0xf, 0xd4, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x3, 0x0, 0x7000, [0xc000, 0xf0, 0x0, 0xc000, 0xc000, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0xf8, 0x5}, @generic={0xa1, 0x10, 0x2, "05e72cb5bbcc4a54b2a3dbed6b7f2978eadc97f55a410708697b2c5a107d43984fb133d21b0ef349370bc6796f4b21999af93d3d26f670a15d04294bf71b30623955a503b17add2d55844c4ef999edf8e6c621fca44431a0339b638e73b106e0005d10a92bd33d0f708cc35edaf4fe37748f9339915bd55ce294fb44265f2a67496f68146bb9df6dffcea716096200223fedddabcb9e854d90beb4e6f04e"}]}}, &(0x7f0000002740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x81, 0x0, "741f7e08", "19a1d665"}}, &(0x7f0000002780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x27, 0x7, 0x2, 0x20, 0x4}}}, &(0x7f0000002c80)={0x84, &(0x7f0000002800)={0x40, 0x0, 0xae, "bd89db4519cac66eff400756096713a321561c622c8bc2633ed4deb06c06fef45385982601d48b58caf8c107e9f11cc7dce8dd1c02ee94162ddd69dcaeeef3692bd8683e49c1f31f44c8632e5bcee9615da5b3648423b4e5e009f3000a171a1892d3db7e88efee8d22347bf1bcd785de5b6d69b83718a5a8987d0261755d0503803e2e9281d4926092d8bb9c0b651933b72b87bcf8b3847923fd05308b5883b9a8b757e09364290d07ecf8a7f524"}, &(0x7f00000028c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000002900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002940)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002980)={0x20, 0x0, 0x8, {0x200, 0x12, [0x0]}}, &(0x7f00000029c0)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000002a00)={0x40, 0x9, 0x1}, &(0x7f0000002a40)={0x40, 0xb, 0x2, "9f32"}, &(0x7f0000002a80)={0x40, 0xf, 0x2}, &(0x7f0000002ac0)={0x40, 0x13, 0x6, @random="f43bf6a33380"}, &(0x7f0000002b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002b40)={0x40, 0x19, 0x2, "4803"}, &(0x7f0000002b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000002c00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002c40)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x10, 0xb7, {0xb7, 0xe, "63832e4af3516f58f33a1102ea0371d9f83fe7fe83cd7b3bf1c25a9ecaed27523f0545691e36c80086fdbda146bbcde678b68ed5170784ea7cb18e5ccdc91ed41d4fec778b558f1cd999ba7776b31eec1852eebf4159dc907f3724671e855b535b2bd273cbe9299eee232b5e21cd25586ebe55d078e408ea511cde821e721648d92c2a5208d102e9e3e6c39167d18926da6d8d84ad78a4c2f581a56aa00b312b75508d2c97adbb06296f3cd9566507fc82b28aa8e8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000003680)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x8, "7ac9ccc9"}, @global=@item_012={0x2, 0x1, 0x4, "8f5a"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x5, "f1cd7110"}, @main=@item_4={0x3, 0x0, 0x9, "faca9f62"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x1, "4b250fd4"}, @main=@item_4={0x3, 0x0, 0xa, "a3e68569"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xeb73, 0x4d, 0x1, {0x22, 0xd94}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0x13, 0xe3, "dd5945efdf08273029b7b9e0b1f0ab7979a6bea06a3d39689e4981b487b42198e7290a34b880fe4468de8e04df93511d52575df5db42d17cfceaa7e6d35f1eefbfe68bd78a9c95e55499e82bad07521a78d84ceb76ec77fdf879cf5b85d84258269417407c65a0d300cfc35089a30bb55340a50f1f1b1cf63b6eabcfc4c51144e27c77cbcdce08a8ec0e294eecb9b23a33341527df942e84d57935128dbf5cfa2abb59703b1f495a75d7e24b7a82afe88864826b0720ce68865fe3a5a2f66bcb5bb85c6cadc082afe0f150898c22fde48df697c1ea9124d4ae298a50ab2d114aa8ba8b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000000480)={0x20, 0x1, 0xe7, "c60c9c60b4a9fde2ab262cc191ba603ea54ee8502121fff6514e48c9c3a9720d521b82990fad1ac2f3957dea80b7e0513bbd3619857276e253ec860f7c493afde91d7b31df15029d3498d8203dd6ac6917e88381d4239762bcebb9ddbaa9277713213be4b5c1c4687ec9ce96c5643d65abb856d40a4f92aa3f61dd81e8736c4ed96cbd296eb273b4022d83789813ce74eb95da4458fceba3472fb6f9c551f7f821117aeef80c34b04a1a0cbc5af0956d19dbfd7a3b2b943229fd055ce7cfc1c84ce10831de0cbab65b054d8f60041d92c9b7404d7d170548f16ffbe213d8fa97635da8388bf99e"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xc6}}) (async) r3 = syz_usb_connect(0x3, 0x287, &(0x7f0000002d40)={{0x12, 0x1, 0x301, 0x2c, 0x59, 0x42, 0x40, 0x2019, 0x1201, 0xa39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x275, 0x2, 0x8, 0x20, 0x60, 0x0, [{{0x9, 0x4, 0x29, 0x80, 0x4, 0x32, 0xec, 0x4f, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x80}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x5, 0x2, 0x8}]}], [{{0x9, 0x5, 0xf, 0x3, 0x8, 0x2, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x2, 0x0, 0xfd, [@generic={0x4d, 0x0, "d64f34d2bfd97bf1c33f409bdfb501bfb719a4179d7c94b73477de9c9c305e4a66e4163238d085879c79e7174a85b89b64ee44eedb2a65682273933d273f3d61514e8e57aad7e18090d501"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x3f}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x20, 0x40, 0x26, [@generic={0x10, 0x11, "afee0621030e392359bc284f0ef9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x35}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x7, 0x2, [@generic={0xbe, 0xd, "f47af08826aa333e4380f40aac61c0bbd3eb5fe1a15a7f9cd71a40e25e2b8605420e46f66cf6e6c1486df552354baacd8403b7a71573e973b92ab40bdef64d6085b5679c6fb65ff4e1b0099a5333c21c46d52f187c0da59b972e52fb896583c99709079efcf5e4d79fb87743ca4d4e0a620c45c568000b4f14cd3a87d4d13286a0c55750c3eb5ed2b383e92e4c2af28e98b54acf867b837ca051000666ce82e9971d59945a7aabc85fc8e33153ac67bf2ac5239b0c0062b13958bf74"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}]}}, {{0x9, 0x4, 0xa7, 0x0, 0x2, 0x18, 0x6e, 0xbf, 0x36, [@hid_hid={0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xd92}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "120e2d"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xd60a, 0x8001, 0xffff, 0x5c}, {0x6, 0x24, 0x1a, 0x200, 0x18}, [@acm={0x4, 0x24, 0x2, 0xf}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x0, 0xdb}, @mbim={0xc, 0x24, 0x1b, 0xc00, 0x1, 0x81, 0x1, 0x80, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x20, 0x81, 0x1}]}], [{{0x9, 0x5, 0xa, 0x4, 0x0, 0x3f, 0x8, 0x80, [@generic={0x82, 0x1, "2c25004200dafcd26d67244f4057d02e04949440802fe81aa54e1ff4f51f4cf196868370825d013de606d4fe27a413a475a05bfed954762d3c5ab3d4572946a6c15bc2eb0384c9abf61bbec9d9f48eb3f47ce4469e0fef5c0e3662184d05e0e6c58145112e9b2ddf56ebbde15f73001a9592de7a02f6fc3e6c78b2e070b7b444"}]}}, {{0x9, 0x5, 0xa, 0x14, 0x208, 0x7, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x3}]}}]}}]}}]}}, &(0x7f0000003140)={0xa, &(0x7f0000003000)={0xa, 0x6, 0x310, 0x5, 0x8, 0x3f, 0x8, 0x1}, 0x16, &(0x7f0000003040)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x64, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x9}]}, 0x2, [{0x4, &(0x7f0000003080)=@lang_id={0x4, 0x3, 0xf0c6}}, {0x56, &(0x7f00000030c0)=@string={0x56, 0x3, "7650200962de98d9a020bdeef1542b04e50c5d2504fdd73d6d3522fa43b51f83d1772bb7d2b8d8907253aa01b2157f86e036e4e2daa4d3b7714f0a3d4a394080c1e2f998d9787c6837982951d0f5df83ab8e7388"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000003380)={0x24, &(0x7f0000003180)={0x20, 0x11, 0x8b, {0x8b, 0x23, "ea9a5ff0c5b2bcf1b0fce974e9d94a26954eb43b9d8be46676bcc1cbfea762c28a9a14633b5a7e66ec151b510978a41620032914d857d18493706009899d28a3b27688ffa81000c16445167d753a631f47b1dcf5c45169029242776b4e703e1c0e6bb2ad6737f73e8bd5b361077660db7920992aa95b9ca2c5f7fa0887a5c2ab217d766d6886caf6df"}}, &(0x7f0000003240)={0x0, 0x3, 0x80, @string={0x80, 0x3, "5cf7b295be687b14a48458c9ecb6a724b91ee15b1a11f8b075bbd01488ce204e0df673d95ad009d894407320fa05594ebb8a8147bfcb3760e0498a1dab758bd02c7214d66ac6c9d73e0cc953de097d8ba33567bfbbf518b63466f7095ab570ac8c555dc307478885600758f7d1b16e594d51098d4dab558af56aa0920cf9"}}, &(0x7f0000003300)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "34a3906c"}]}}, &(0x7f0000003340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x7f, 0x1, {0x22, 0x907}}}}, &(0x7f0000003640)={0x2c, &(0x7f00000033c0)={0x40, 0x0, 0xf7, "bf213e8b7d381f5871b67e33642e1231c06797a3abdf7bfe08fa360da96ef3041037ff3194c389d372a3369eac87dca5ccf9e02c34d748bbfb1f1922976140e95dacf0a3b91dab0de953e352edfcf00f69c82f7110dfac9dccd3c252be09896084c564b32189a4b64692b004991a1ef95b29bd05b27f6972ec1e7b23a87b4427b484c3309574366505f2808befd9629b6ba823e0a2120c1f11ab2235e4a9f2764dc568d46af6a127f082ff2f408a18333696766bbd4f9ebb99fe6c62f8ad6e597abfd28a252efee3c5367ada8c0c3e042ed67257248e77c36fa6994015ed710a38b0b5aadc1bdcb846579f199eba83c7518303d2e1a6c7"}, &(0x7f00000034c0)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000003500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003540)={0x20, 0x1, 0xa4, "b9f9dcbd4089b7052448f202079c494803113561e411b4f5082f60228e463e6cc3bab627bda55868edea8226c6e277c571fe889c146949a7a3745ca3b7ceecabf7559e800ead7d91f2d65107c4bd47bfe5402467e65d5dfa9906f1d2248667ac46dcd483b6042007d6bf2983fad265997b97fbb397dc918a48cc68da141e3217da2316b9ae7e2ea52e2be49ea9b60d600f618f2251e6d36b22116bce0220887987977518"}, &(0x7f0000003600)={0x20, 0x3, 0x1, 0x7f}}) (async) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, &(0x7f0000000600)={0x40, 0x1, 0x1c, {0x1c, 0x1, "77cd95299959b7d90e717aa2d5f398cf2b0f30b52add074ec2c9"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0e}}, &(0x7f0000000740)={0x0, 0x22, 0x21, {[@local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "e24fa543"}, @global=@item_4={0x3, 0x1, 0x9, "f112398d"}, @local=@item_012={0x1, 0x2, 0xa, "cd"}, @main=@item_4={0x3, 0x0, 0x9, "b270e1f8"}, @global=@item_4={0x3, 0x1, 0xb, "d7899203"}, @global=@item_4={0x3, 0x1, 0xa, "92424b4c"}, @global=@item_4={0x3, 0x1, 0x1, "74569ff1"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0xca72, 0x2, 0x1, {0x22, 0xc69}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000800)={0x0, 0x34, 0x5b, "1d9c6434629c4cb0cb8268b0c66cae45f29f7f1f3a880425eb1c42dc168cd4eb72ade1a7033f4f6bd18678b2510f7f2cecfac947f4a7c98fdbc2bda66c744caa0bc2f33bc77e73c6a3a2f23f4f8bab2221e2d5b6f702df16bcb313"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7a}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000900)={0x20, 0x1, 0xeb, "fb088b13ad5c39e62ed270089a398f61ce3a76d54367d09bb659f956f8ba934a06769b7c5597852b23df2823a6bb3670f9bd9fbd2b0caf63bac4fdf097e0edc58561366308a73fa704692ad6e7a1df29a5055fe2f0441781dd350363864a007457a0ca360732f09edc880e732a6130ea7a5daa75c1b71ade6d88756954a6c18e18f54ce4d1ebf8c601ae195a6024df0e93509958b8bce63688c4c1e6601b696b423868d27a9008b30ece59761e7ef51cb2f3ef27de066df40acf63497de807e5244643cdb0c4a5d9c914b93e64debb28fc6c1b3c87dc8f3660d0a444cb0657f0d0697aa892da84bc87a986"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x1}}) 09:31:54 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 09:31:54 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x420) 09:31:54 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12f0) 09:31:54 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12f0) 09:31:54 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1308) 09:31:54 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x438) [ 1702.958930][ T72] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1702.988961][ T4035] usb 6-1: Service connection timeout for: 256 [ 1702.995202][ T4035] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1703.003687][ T4035] ath9k_htc: Failed to initialize the device [ 1703.010348][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1703.349092][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.360045][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.368985][ T9824] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1703.369820][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1703.390154][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1703.399248][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.416887][ T72] usb 2-1: config 0 descriptor?? [ 1703.749117][ T9824] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1703.766887][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1703.778081][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1703.900893][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.908349][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.915813][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.923263][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.930726][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.938142][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.945614][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.953066][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.960528][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.967942][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.975495][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.982940][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.989148][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1703.990385][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1703.999422][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.006770][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.014769][ T9824] usb 6-1: Product: syz [ 1704.022123][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.026243][ T9824] usb 6-1: Manufacturer: syz [ 1704.033623][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.038180][ T9824] usb 6-1: SerialNumber: syz [ 1704.045558][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.057666][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.065134][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.072579][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.080016][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.087428][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.094875][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.102314][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.109761][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.117178][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.124627][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.132075][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.139517][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.146933][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.154377][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.159823][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1704.161797][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.170761][T20325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.177197][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.193003][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.199844][T20325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.200439][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.215657][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.220318][T20348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.223089][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.238834][ T72] plantronics 0003:047F:FFFF.00CE: unknown main item tag 0x0 [ 1704.245382][T20348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.253136][ T72] plantronics 0003:047F:FFFF.00CE: No inputs registered, leaving [ 1704.280524][ T72] plantronics 0003:047F:FFFF.00CE: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1704.294628][ T72] usb 2-1: USB disconnect, device number 80 [ 1704.749177][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1704.760945][ T9824] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1704.775065][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1704.959566][ T718] usb 6-1: USB disconnect, device number 51 09:31:57 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x3}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:57 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1308) 09:31:57 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1320) 09:31:57 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x450) 09:31:57 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x2}}}}]}}, 0x0) 09:31:57 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0xf8, 0x4, 0x1, {0x22, 0x67b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x81, 0xd0, 0x0, 0x40, 0x6}, 0xdc, &(0x7f0000000200)={0x5, 0xf, 0xdc, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x6, 0x81, 0x3960}, @generic={0xb9, 0x10, 0xb, "5c42e82bb5fb9b5409c09ea703d1f898600214b68b56ce2f6d1ca27734eac13df9623d34648ec16d29ba93b04872ec815e340fe48c60ee1c056b8cbda9e6acffdc481e5fdb7725814ed535fb25cf24bc48e488d85cfbbb9859f0e5974dfe19e039d188743985fa8b1ae5f0543c883ee6d5bbd38458599a37cd1c8e7381565e8ea4100768ac29ebf8e177a54f16637d95eed917439e59c01c9a925a246b73eed85d1e656430198c947cf72c428b8384a533686a892c18"}, @ss_container_id={0x14, 0x10, 0x4, 0x16, "5338e3f00b482b5ca4a7224912f61bc0"}]}, 0x6, [{0xc3, &(0x7f0000000300)=@string={0xc3, 0x3, "17d5c54d4b11841b26d3e0cdb06b9e09d082d574545b98805a61a326935b0315a837d95a9ada7c3b8f432524a702155a053121cda03942a6d0e4065156144ec530939707a19d30324c9d6073752046cd667ae5e91c9ad11d6316a6dca3184b9474ef508f7aa0661c6b8458506055985e13f864351a032ed5138fcd5f6447d3687f7c4c06d7e0acc9002a735195fdf38910452fc08cfd1bd4c7c7e6a937d011432623c6456892f7989a06cfe4ae2721c75229211a984f275a185e3bb662c38d0b2f"}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "693edc5c40a4cd287a7801cb50b853c486dd7f78219932d47525284258e678922f86aaff021ae93ffd537dcaa6d14cc7ceb8f7c79181ace02cc585640f05476ff63543a41213317842b8bb95807ef6cd198353ef6a5e8db557ca32c18f3979ffdabad4338bc372667771bc8b0dab61ef93"}}, {0xbb, &(0x7f0000000480)=@string={0xbb, 0x3, "edc2d646878601811b9ebe4b4274e5a6d4c497dbba2602e2ca4042151f8eb67696fd25d2f973055ac093030a025d6f82e54598f8dc424967a3cdafbb96a350bd07d3fd0f14edab5de29857b8fc53b2e1eb10478ffdcf04d3860da47fe37ec2998b75664b89495840b34b630432069604c148e76b35a004944c80d919da69851b6504f493b482b56f2e8ca755f80e06173b84d5c29f0531b09657d9bf8e0d011888885600d774bd63aaa9385cd3dc98585b6bbb49afaa23cd73"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3009}}, {0x6d, &(0x7f00000005c0)=@string={0x6d, 0x3, "38d203fb388100e95e1326a5c752cfb15e25c3c1085d388fa6a38c645525d2fcc82f1552c631456297434668c3dbcaf6dace14ee9b8a5cbe13a878a19c0d847922c13da72cf725e675e1aed61369191fcc2a82d29a5fcd38b932422496552e639cdb28aad5b1301c230c00"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:31:57 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x468) 09:31:57 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1338) 09:31:57 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1320) 09:31:57 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x480) 09:31:57 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1350) 09:31:57 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1338) [ 1705.788951][ T72] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1705.809224][ T4035] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1706.189073][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.200056][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.209853][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1706.222833][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1706.231943][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.259523][ T72] usb 2-1: config 0 descriptor?? [ 1706.289037][ T4035] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.302137][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1706.313303][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1706.509306][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1706.518476][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.526532][ T4035] usb 6-1: Product: syz [ 1706.530745][ T4035] usb 6-1: Manufacturer: syz [ 1706.535362][ T4035] usb 6-1: SerialNumber: syz [ 1706.602083][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1706.829079][ T72] usbhid 2-1:0.0: can't add hid device: -71 [ 1706.835157][ T72] usbhid: probe of 2-1:0.0 failed with error -71 [ 1706.844188][ T72] usb 2-1: USB disconnect, device number 81 [ 1707.238988][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1707.261875][ T4035] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1707.268665][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1707.489510][ T718] usb 6-1: USB disconnect, device number 52 09:31:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x4}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:31:59 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x498) 09:31:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1368) 09:31:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1350) 09:31:59 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x3}}}}]}}, 0x0) 09:31:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0xf8, 0x4, 0x1, {0x22, 0x67b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x81, 0xd0, 0x0, 0x40, 0x6}, 0xdc, &(0x7f0000000200)={0x5, 0xf, 0xdc, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x6, 0x81, 0x3960}, @generic={0xb9, 0x10, 0xb, "5c42e82bb5fb9b5409c09ea703d1f898600214b68b56ce2f6d1ca27734eac13df9623d34648ec16d29ba93b04872ec815e340fe48c60ee1c056b8cbda9e6acffdc481e5fdb7725814ed535fb25cf24bc48e488d85cfbbb9859f0e5974dfe19e039d188743985fa8b1ae5f0543c883ee6d5bbd38458599a37cd1c8e7381565e8ea4100768ac29ebf8e177a54f16637d95eed917439e59c01c9a925a246b73eed85d1e656430198c947cf72c428b8384a533686a892c18"}, @ss_container_id={0x14, 0x10, 0x4, 0x16, "5338e3f00b482b5ca4a7224912f61bc0"}]}, 0x6, [{0xc3, &(0x7f0000000300)=@string={0xc3, 0x3, "17d5c54d4b11841b26d3e0cdb06b9e09d082d574545b98805a61a326935b0315a837d95a9ada7c3b8f432524a702155a053121cda03942a6d0e4065156144ec530939707a19d30324c9d6073752046cd667ae5e91c9ad11d6316a6dca3184b9474ef508f7aa0661c6b8458506055985e13f864351a032ed5138fcd5f6447d3687f7c4c06d7e0acc9002a735195fdf38910452fc08cfd1bd4c7c7e6a937d011432623c6456892f7989a06cfe4ae2721c75229211a984f275a185e3bb662c38d0b2f"}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "693edc5c40a4cd287a7801cb50b853c486dd7f78219932d47525284258e678922f86aaff021ae93ffd537dcaa6d14cc7ceb8f7c79181ace02cc585640f05476ff63543a41213317842b8bb95807ef6cd198353ef6a5e8db557ca32c18f3979ffdabad4338bc372667771bc8b0dab61ef93"}}, {0xbb, &(0x7f0000000480)=@string={0xbb, 0x3, "edc2d646878601811b9ebe4b4274e5a6d4c497dbba2602e2ca4042151f8eb67696fd25d2f973055ac093030a025d6f82e54598f8dc424967a3cdafbb96a350bd07d3fd0f14edab5de29857b8fc53b2e1eb10478ffdcf04d3860da47fe37ec2998b75664b89495840b34b630432069604c148e76b35a004944c80d919da69851b6504f493b482b56f2e8ca755f80e06173b84d5c29f0531b09657d9bf8e0d011888885600d774bd63aaa9385cd3dc98585b6bbb49afaa23cd73"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3009}}, {0x6d, &(0x7f00000005c0)=@string={0x6d, 0x3, "38d203fb388100e95e1326a5c752cfb15e25c3c1085d388fa6a38c645525d2fcc82f1552c631456297434668c3dbcaf6dace14ee9b8a5cbe13a878a19c0d847922c13da72cf725e675e1aed61369191fcc2a82d29a5fcd38b932422496552e639cdb28aad5b1301c230c00"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0xf8, 0x4, 0x1, {0x22, 0x67b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x81, 0xd0, 0x0, 0x40, 0x6}, 0xdc, &(0x7f0000000200)={0x5, 0xf, 0xdc, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x6, 0x81, 0x3960}, @generic={0xb9, 0x10, 0xb, "5c42e82bb5fb9b5409c09ea703d1f898600214b68b56ce2f6d1ca27734eac13df9623d34648ec16d29ba93b04872ec815e340fe48c60ee1c056b8cbda9e6acffdc481e5fdb7725814ed535fb25cf24bc48e488d85cfbbb9859f0e5974dfe19e039d188743985fa8b1ae5f0543c883ee6d5bbd38458599a37cd1c8e7381565e8ea4100768ac29ebf8e177a54f16637d95eed917439e59c01c9a925a246b73eed85d1e656430198c947cf72c428b8384a533686a892c18"}, @ss_container_id={0x14, 0x10, 0x4, 0x16, "5338e3f00b482b5ca4a7224912f61bc0"}]}, 0x6, [{0xc3, &(0x7f0000000300)=@string={0xc3, 0x3, "17d5c54d4b11841b26d3e0cdb06b9e09d082d574545b98805a61a326935b0315a837d95a9ada7c3b8f432524a702155a053121cda03942a6d0e4065156144ec530939707a19d30324c9d6073752046cd667ae5e91c9ad11d6316a6dca3184b9474ef508f7aa0661c6b8458506055985e13f864351a032ed5138fcd5f6447d3687f7c4c06d7e0acc9002a735195fdf38910452fc08cfd1bd4c7c7e6a937d011432623c6456892f7989a06cfe4ae2721c75229211a984f275a185e3bb662c38d0b2f"}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "693edc5c40a4cd287a7801cb50b853c486dd7f78219932d47525284258e678922f86aaff021ae93ffd537dcaa6d14cc7ceb8f7c79181ace02cc585640f05476ff63543a41213317842b8bb95807ef6cd198353ef6a5e8db557ca32c18f3979ffdabad4338bc372667771bc8b0dab61ef93"}}, {0xbb, &(0x7f0000000480)=@string={0xbb, 0x3, "edc2d646878601811b9ebe4b4274e5a6d4c497dbba2602e2ca4042151f8eb67696fd25d2f973055ac093030a025d6f82e54598f8dc424967a3cdafbb96a350bd07d3fd0f14edab5de29857b8fc53b2e1eb10478ffdcf04d3860da47fe37ec2998b75664b89495840b34b630432069604c148e76b35a004944c80d919da69851b6504f493b482b56f2e8ca755f80e06173b84d5c29f0531b09657d9bf8e0d011888885600d774bd63aaa9385cd3dc98585b6bbb49afaa23cd73"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3009}}, {0x6d, &(0x7f00000005c0)=@string={0x6d, 0x3, "38d203fb388100e95e1326a5c752cfb15e25c3c1085d388fa6a38c645525d2fcc82f1552c631456297434668c3dbcaf6dace14ee9b8a5cbe13a878a19c0d847922c13da72cf725e675e1aed61369191fcc2a82d29a5fcd38b932422496552e639cdb28aad5b1301c230c00"}}]}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) 09:32:00 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1380) 09:32:00 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1368) 09:32:00 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4b0) 09:32:00 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1398) 09:32:00 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4c8) 09:32:00 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1380) [ 1708.278941][ T4035] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1708.289124][ T72] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1708.659098][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.670066][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.679934][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1708.692771][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1708.701854][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.710287][ T72] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.722448][ T72] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 1708.733484][ T72] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1708.759872][ T4035] usb 2-1: config 0 descriptor?? [ 1708.939166][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1708.948260][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.956351][ T72] usb 6-1: Product: syz [ 1708.960581][ T72] usb 6-1: Manufacturer: syz [ 1708.965204][ T72] usb 6-1: SerialNumber: syz [ 1709.030317][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1709.212392][T20376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.224841][T20376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.339052][ T4035] usbhid 2-1:0.0: can't add hid device: -71 [ 1709.345134][ T4035] usbhid: probe of 2-1:0.0 failed with error -71 [ 1709.353949][ T4035] usb 2-1: USB disconnect, device number 82 [ 1709.679074][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1709.688640][ T72] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1709.699030][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1709.919594][ T4035] usb 6-1: USB disconnect, device number 53 09:32:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x5}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:02 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4e0) 09:32:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13b0) 09:32:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1398) 09:32:02 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x4}}}}]}}, 0x0) 09:32:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0xf8, 0x4, 0x1, {0x22, 0x67b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x81, 0xd0, 0x0, 0x40, 0x6}, 0xdc, &(0x7f0000000200)={0x5, 0xf, 0xdc, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x6, 0x81, 0x3960}, @generic={0xb9, 0x10, 0xb, "5c42e82bb5fb9b5409c09ea703d1f898600214b68b56ce2f6d1ca27734eac13df9623d34648ec16d29ba93b04872ec815e340fe48c60ee1c056b8cbda9e6acffdc481e5fdb7725814ed535fb25cf24bc48e488d85cfbbb9859f0e5974dfe19e039d188743985fa8b1ae5f0543c883ee6d5bbd38458599a37cd1c8e7381565e8ea4100768ac29ebf8e177a54f16637d95eed917439e59c01c9a925a246b73eed85d1e656430198c947cf72c428b8384a533686a892c18"}, @ss_container_id={0x14, 0x10, 0x4, 0x16, "5338e3f00b482b5ca4a7224912f61bc0"}]}, 0x6, [{0xc3, &(0x7f0000000300)=@string={0xc3, 0x3, "17d5c54d4b11841b26d3e0cdb06b9e09d082d574545b98805a61a326935b0315a837d95a9ada7c3b8f432524a702155a053121cda03942a6d0e4065156144ec530939707a19d30324c9d6073752046cd667ae5e91c9ad11d6316a6dca3184b9474ef508f7aa0661c6b8458506055985e13f864351a032ed5138fcd5f6447d3687f7c4c06d7e0acc9002a735195fdf38910452fc08cfd1bd4c7c7e6a937d011432623c6456892f7989a06cfe4ae2721c75229211a984f275a185e3bb662c38d0b2f"}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "693edc5c40a4cd287a7801cb50b853c486dd7f78219932d47525284258e678922f86aaff021ae93ffd537dcaa6d14cc7ceb8f7c79181ace02cc585640f05476ff63543a41213317842b8bb95807ef6cd198353ef6a5e8db557ca32c18f3979ffdabad4338bc372667771bc8b0dab61ef93"}}, {0xbb, &(0x7f0000000480)=@string={0xbb, 0x3, "edc2d646878601811b9ebe4b4274e5a6d4c497dbba2602e2ca4042151f8eb67696fd25d2f973055ac093030a025d6f82e54598f8dc424967a3cdafbb96a350bd07d3fd0f14edab5de29857b8fc53b2e1eb10478ffdcf04d3860da47fe37ec2998b75664b89495840b34b630432069604c148e76b35a004944c80d919da69851b6504f493b482b56f2e8ca755f80e06173b84d5c29f0531b09657d9bf8e0d011888885600d774bd63aaa9385cd3dc98585b6bbb49afaa23cd73"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3009}}, {0x6d, &(0x7f00000005c0)=@string={0x6d, 0x3, "38d203fb388100e95e1326a5c752cfb15e25c3c1085d388fa6a38c645525d2fcc82f1552c631456297434668c3dbcaf6dace14ee9b8a5cbe13a878a19c0d847922c13da72cf725e675e1aed61369191fcc2a82d29a5fcd38b932422496552e639cdb28aad5b1301c230c00"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:02 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4f8) 09:32:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13b0) 09:32:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13c8) 09:32:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13e0) 09:32:02 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x510) 09:32:02 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13c8) [ 1710.718952][ T4035] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1710.758927][ T718] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1711.079090][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.090055][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.099859][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1711.112723][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1711.121827][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.135293][ T4035] usb 2-1: config 0 descriptor?? [ 1711.169033][ T718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.179417][ T718] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1711.190454][ T718] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1711.389083][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1711.398180][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.406384][ T718] usb 6-1: Product: syz [ 1711.410595][ T718] usb 6-1: Manufacturer: syz [ 1711.415211][ T718] usb 6-1: SerialNumber: syz [ 1711.469828][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1711.699151][ T4035] usbhid 2-1:0.0: can't add hid device: -71 [ 1711.705239][ T4035] usbhid: probe of 2-1:0.0 failed with error -71 [ 1711.714769][ T4035] usb 2-1: USB disconnect, device number 83 [ 1712.129125][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1712.138710][ T718] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1712.154104][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1712.389515][ T4035] usb 6-1: USB disconnect, device number 54 09:32:04 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:04 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13f8) 09:32:04 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x528) 09:32:04 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13e0) 09:32:04 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x5}}}}]}}, 0x0) 09:32:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x4}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x4, 0x2fb, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x81, 0x8c, 0xcd, 0x8, 0x846, 0x68d3, 0xb4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e9, 0x1, 0xab, 0x9, 0xb0, 0x8, [{{0x9, 0x4, 0x8, 0x8, 0x6, 0xfb, 0xd2, 0x4e, 0x96, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3404e097"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x200, 0x6}, {0x6, 0x24, 0x1a, 0x8001, 0x2}, [@call_mgmt={0x5}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4ef, 0x3, 0x0, 0x4, 0xa6}]}], [{{0x9, 0x5, 0x0, 0x8, 0x80, 0x80, 0x1, 0x1f}}, {{0x9, 0x5, 0x4, 0x3, 0x1b7, 0x15, 0xe0, 0x4, [@generic={0x57, 0xc, "89e3be2fc9792ff1088a5ced1b044b27c3ead0690f93e2296d38883cd959c79f65c8e9fd706d916a196aecf43aca05227bbdbf19b161401804c6c46135109b80a915e25af54786b9cd49da7575389d8161ee5d2940"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x80, 0x1f, 0x7, [@generic={0xa4, 0x8, "54c78f0c3b4a9120d9af2f8d6c6f8b0fefb3cc5ce9793e17122617b4f26461f91055e7c996a6ae62fe929cdfd164277fe95311b0f2f9f9dd80472c4ac8c0fe2cf12b4c9dea1799e21f43b2b81f40422fe46f0fc6ffeaf988f5af5917f91899bfc9644450a5c07923156bc2ee6bd271caff7adcc9fbe5a4887d3e879a6950df8496605a61971fcc085584f8dccccc3134319e4b216e34c4807d83ff581f523c1fbc5d"}, @generic={0xa2, 0x10, "1afde68de08b2c2a80b8e28e41164c0a79db5abd4c579a8c42ae6ff749e18b8513c903703b8160ff047111eb7e74a7b329ef68344585906d07af895806818274779050aa8bd19704d4528f179e475e4d28b3bf8cb182626a8b3017ac5f5400913491b114861abdf03068714273fae1975b92c2704f233e61b1e537e316312f55f0545ac002c225fdbb283d59a4d8926b00cd3856fff933199ca21bfded4c47cd"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xf9, 0x4, 0x20, [@generic={0xa4, 0x9, "68356e055412ef8342dac60ec39c339d9ae516a922d4d43aad99a5a4ce6e15e9eae812dc080aa9ea6ffe9506f2d38f65980f9da149dcf07f16074eef867786f9296790472b31086062420fb083ae94f81684c7a79f380dba4de4c36a2f3853b679ab04b404d28ecc289c654b2c34fbbbe7843b95525ca1bc815ee934a615524104f2f005e1aaba977f0b6109f7ce4cd6b8f9bf8e40b8865013b873060bda2c8eb949"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x0, 0x9d, 0x1f}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x8, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x32}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x80}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x2, 0x1, 0x27, 0x8, 0x8}, 0x1be, &(0x7f0000000500)={0x5, 0xf, 0x1be, 0x4, [@generic={0x9d, 0x10, 0xa, "5b06dccd185a4769b59b6175af487a4c9f9446f0aa0f95297eb2fda2d25fdc1fd8ac68521c75540b6110f0189251ad3f25014f055c0bfea4e181d103c3fdc7e886ba60f87b386a8393b5a499c079dfcc5f3927e07b5d020cedec6f8a46c3aa8b19ec850f6323c3739ae8fe04ddeba0fb227503240e193e5c101b5d997c4ffb93679f9d48d4475063067ba0e5253df996f9f55e60001c724b820c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x2, 0x18, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b6935d4ff76a4aae27f9ff1a6c6bf498"}, @generic={0xfe, 0x10, 0x3, "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"}]}, 0x4, [{0xe, &(0x7f0000000140)=@string={0xe, 0x3, "c7a0bac8ebdcb18f2b6b1204"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1007}}]}) 09:32:04 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x13f8) 09:32:04 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1410) 09:32:04 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x540) 09:32:05 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1410) 09:32:05 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1428) 09:32:05 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x558) [ 1713.188950][ T718] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1713.218932][ T9824] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1713.549138][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.560190][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.570133][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1713.582983][ T718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1713.592092][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.603920][ T9824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.614117][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 1713.625150][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1713.650233][ T718] usb 2-1: config 0 descriptor?? [ 1713.789130][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1713.798264][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.806336][ T9824] usb 6-1: Product: syz [ 1713.810546][ T9824] usb 6-1: Manufacturer: syz [ 1713.815160][ T9824] usb 6-1: SerialNumber: syz [ 1713.859780][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1714.179113][ T718] usbhid 2-1:0.0: can't add hid device: -71 [ 1714.185135][ T718] usbhid: probe of 2-1:0.0 failed with error -71 [ 1714.198274][ T718] usb 2-1: USB disconnect, device number 84 [ 1714.429087][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1714.438649][ T9824] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1714.445860][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1714.669510][ T4035] usb 6-1: USB disconnect, device number 55 09:32:07 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x7}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:07 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1428) 09:32:07 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1440) 09:32:07 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x570) 09:32:07 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x6}}}}]}}, 0x0) 09:32:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x4}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_connect(0x4, 0x2fb, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x81, 0x8c, 0xcd, 0x8, 0x846, 0x68d3, 0xb4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e9, 0x1, 0xab, 0x9, 0xb0, 0x8, [{{0x9, 0x4, 0x8, 0x8, 0x6, 0xfb, 0xd2, 0x4e, 0x96, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3404e097"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x200, 0x6}, {0x6, 0x24, 0x1a, 0x8001, 0x2}, [@call_mgmt={0x5}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4ef, 0x3, 0x0, 0x4, 0xa6}]}], [{{0x9, 0x5, 0x0, 0x8, 0x80, 0x80, 0x1, 0x1f}}, {{0x9, 0x5, 0x4, 0x3, 0x1b7, 0x15, 0xe0, 0x4, [@generic={0x57, 0xc, "89e3be2fc9792ff1088a5ced1b044b27c3ead0690f93e2296d38883cd959c79f65c8e9fd706d916a196aecf43aca05227bbdbf19b161401804c6c46135109b80a915e25af54786b9cd49da7575389d8161ee5d2940"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x80, 0x1f, 0x7, [@generic={0xa4, 0x8, "54c78f0c3b4a9120d9af2f8d6c6f8b0fefb3cc5ce9793e17122617b4f26461f91055e7c996a6ae62fe929cdfd164277fe95311b0f2f9f9dd80472c4ac8c0fe2cf12b4c9dea1799e21f43b2b81f40422fe46f0fc6ffeaf988f5af5917f91899bfc9644450a5c07923156bc2ee6bd271caff7adcc9fbe5a4887d3e879a6950df8496605a61971fcc085584f8dccccc3134319e4b216e34c4807d83ff581f523c1fbc5d"}, @generic={0xa2, 0x10, "1afde68de08b2c2a80b8e28e41164c0a79db5abd4c579a8c42ae6ff749e18b8513c903703b8160ff047111eb7e74a7b329ef68344585906d07af895806818274779050aa8bd19704d4528f179e475e4d28b3bf8cb182626a8b3017ac5f5400913491b114861abdf03068714273fae1975b92c2704f233e61b1e537e316312f55f0545ac002c225fdbb283d59a4d8926b00cd3856fff933199ca21bfded4c47cd"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xf9, 0x4, 0x20, [@generic={0xa4, 0x9, "68356e055412ef8342dac60ec39c339d9ae516a922d4d43aad99a5a4ce6e15e9eae812dc080aa9ea6ffe9506f2d38f65980f9da149dcf07f16074eef867786f9296790472b31086062420fb083ae94f81684c7a79f380dba4de4c36a2f3853b679ab04b404d28ecc289c654b2c34fbbbe7843b95525ca1bc815ee934a615524104f2f005e1aaba977f0b6109f7ce4cd6b8f9bf8e40b8865013b873060bda2c8eb949"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x0, 0x9d, 0x1f}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x8, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x32}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x80}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x2, 0x1, 0x27, 0x8, 0x8}, 0x1be, &(0x7f0000000500)={0x5, 0xf, 0x1be, 0x4, [@generic={0x9d, 0x10, 0xa, "5b06dccd185a4769b59b6175af487a4c9f9446f0aa0f95297eb2fda2d25fdc1fd8ac68521c75540b6110f0189251ad3f25014f055c0bfea4e181d103c3fdc7e886ba60f87b386a8393b5a499c079dfcc5f3927e07b5d020cedec6f8a46c3aa8b19ec850f6323c3739ae8fe04ddeba0fb227503240e193e5c101b5d997c4ffb93679f9d48d4475063067ba0e5253df996f9f55e60001c724b820c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x2, 0x18, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b6935d4ff76a4aae27f9ff1a6c6bf498"}, @generic={0xfe, 0x10, 0x3, "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"}]}, 0x4, [{0xe, &(0x7f0000000140)=@string={0xe, 0x3, "c7a0bac8ebdcb18f2b6b1204"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1007}}]}) 09:32:07 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x588) 09:32:07 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1458) 09:32:07 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1440) 09:32:07 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1458) 09:32:07 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x5a0) 09:32:07 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1470) [ 1715.469049][ T9824] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1715.499053][ T4035] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1715.869105][ T4035] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.883765][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1715.899253][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.910168][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.919970][ T9824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1715.932809][ T9824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1715.941917][ T9824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.953459][ T9824] usb 2-1: config 0 descriptor?? [ 1716.049154][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1716.058252][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.066325][ T4035] usb 6-1: Product: syz [ 1716.070540][ T4035] usb 6-1: Manufacturer: syz [ 1716.075157][ T4035] usb 6-1: SerialNumber: syz [ 1716.119939][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1716.319009][ T9824] usbhid 2-1:0.0: can't add hid device: -71 [ 1716.325068][ T9824] usbhid: probe of 2-1:0.0 failed with error -71 [ 1716.334531][ T9824] usb 2-1: USB disconnect, device number 85 [ 1716.699042][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1716.712754][ T4035] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1716.726027][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1716.949531][ T9824] usb 6-1: USB disconnect, device number 56 09:32:09 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x8}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:09 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1470) 09:32:09 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x5b8) 09:32:09 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x7}}}}]}}, 0x0) 09:32:09 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1488) 09:32:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x4}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) syz_usb_connect(0x4, 0x2fb, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x81, 0x8c, 0xcd, 0x8, 0x846, 0x68d3, 0xb4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e9, 0x1, 0xab, 0x9, 0xb0, 0x8, [{{0x9, 0x4, 0x8, 0x8, 0x6, 0xfb, 0xd2, 0x4e, 0x96, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3404e097"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x200, 0x6}, {0x6, 0x24, 0x1a, 0x8001, 0x2}, [@call_mgmt={0x5}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4ef, 0x3, 0x0, 0x4, 0xa6}]}], [{{0x9, 0x5, 0x0, 0x8, 0x80, 0x80, 0x1, 0x1f}}, {{0x9, 0x5, 0x4, 0x3, 0x1b7, 0x15, 0xe0, 0x4, [@generic={0x57, 0xc, "89e3be2fc9792ff1088a5ced1b044b27c3ead0690f93e2296d38883cd959c79f65c8e9fd706d916a196aecf43aca05227bbdbf19b161401804c6c46135109b80a915e25af54786b9cd49da7575389d8161ee5d2940"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x80, 0x1f, 0x7, [@generic={0xa4, 0x8, "54c78f0c3b4a9120d9af2f8d6c6f8b0fefb3cc5ce9793e17122617b4f26461f91055e7c996a6ae62fe929cdfd164277fe95311b0f2f9f9dd80472c4ac8c0fe2cf12b4c9dea1799e21f43b2b81f40422fe46f0fc6ffeaf988f5af5917f91899bfc9644450a5c07923156bc2ee6bd271caff7adcc9fbe5a4887d3e879a6950df8496605a61971fcc085584f8dccccc3134319e4b216e34c4807d83ff581f523c1fbc5d"}, @generic={0xa2, 0x10, "1afde68de08b2c2a80b8e28e41164c0a79db5abd4c579a8c42ae6ff749e18b8513c903703b8160ff047111eb7e74a7b329ef68344585906d07af895806818274779050aa8bd19704d4528f179e475e4d28b3bf8cb182626a8b3017ac5f5400913491b114861abdf03068714273fae1975b92c2704f233e61b1e537e316312f55f0545ac002c225fdbb283d59a4d8926b00cd3856fff933199ca21bfded4c47cd"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xf9, 0x4, 0x20, [@generic={0xa4, 0x9, "68356e055412ef8342dac60ec39c339d9ae516a922d4d43aad99a5a4ce6e15e9eae812dc080aa9ea6ffe9506f2d38f65980f9da149dcf07f16074eef867786f9296790472b31086062420fb083ae94f81684c7a79f380dba4de4c36a2f3853b679ab04b404d28ecc289c654b2c34fbbbe7843b95525ca1bc815ee934a615524104f2f005e1aaba977f0b6109f7ce4cd6b8f9bf8e40b8865013b873060bda2c8eb949"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x0, 0x9d, 0x1f}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x8, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x32}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x80}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x2, 0x1, 0x27, 0x8, 0x8}, 0x1be, &(0x7f0000000500)={0x5, 0xf, 0x1be, 0x4, [@generic={0x9d, 0x10, 0xa, "5b06dccd185a4769b59b6175af487a4c9f9446f0aa0f95297eb2fda2d25fdc1fd8ac68521c75540b6110f0189251ad3f25014f055c0bfea4e181d103c3fdc7e886ba60f87b386a8393b5a499c079dfcc5f3927e07b5d020cedec6f8a46c3aa8b19ec850f6323c3739ae8fe04ddeba0fb227503240e193e5c101b5d997c4ffb93679f9d48d4475063067ba0e5253df996f9f55e60001c724b820c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x2, 0x18, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b6935d4ff76a4aae27f9ff1a6c6bf498"}, @generic={0xfe, 0x10, 0x3, "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"}]}, 0x4, [{0xe, &(0x7f0000000140)=@string={0xe, 0x3, "c7a0bac8ebdcb18f2b6b1204"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1007}}]}) (rerun: 32) 09:32:09 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1488) 09:32:09 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14a0) 09:32:09 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x5d0) 09:32:09 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x5e8) 09:32:09 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14b8) 09:32:09 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14a0) [ 1717.738972][ T4035] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1717.778928][ T9824] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1718.119131][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.131219][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.139092][ T9824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.140996][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1718.157950][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1718.163902][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1718.163940][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.199177][ T4035] usb 2-1: config 0 descriptor?? [ 1718.349024][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1718.358114][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.366227][ T9824] usb 6-1: Product: syz [ 1718.370583][ T9824] usb 6-1: Manufacturer: syz [ 1718.375199][ T9824] usb 6-1: SerialNumber: syz [ 1718.439578][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1718.579003][ T4035] usbhid 2-1:0.0: can't add hid device: -71 [ 1718.585051][ T4035] usbhid: probe of 2-1:0.0 failed with error -71 [ 1718.594032][ T4035] usb 2-1: USB disconnect, device number 86 [ 1719.009075][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1719.022884][ T9824] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1719.031664][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1719.249482][ T4035] usb 6-1: USB disconnect, device number 57 09:32:11 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x600) 09:32:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14b8) 09:32:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14d0) 09:32:11 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x18}}}}]}}, 0x0) 09:32:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0xd, 0x8c, {0x8c, 0x3, "0308a45b39158af1de5cc77deab139663f61f952bcbae539dddb607e81f8ac49daff4c5f111db27df6385a88496b6ef87d6e1515eef31c60f85425439893d7973153cdbf72bb8a4ff81267bf225918bdb447e017acd872bf8d690b0c96151eb37557ae19239be0235425f2e1530e6d14df8c9bad7fea6b112c54747cd1cc3ce01211c04810d0420f509e"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0xf, 0x96, "334342782a71e72bf2625879d81ee3f963de3bdfe6bcc6f1a84e02cd7fc670571a13d63c3ba0b01ceffef19b1b62406fb042b6369e11a14c613597710ba437206d4e3cddf473204ed15e6e9e19ec569cd1566d5ba3c4d3b8b0bbcd9e89e00e6684cea9fe67daa87150644f383433af365dde6d64c7dbb87811db2c97313f65842d76bb57618a8ca6fd03760f4939704d96a3746f02ef"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7d}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x4, 0x81, 0xfffffffc, 0x80, 0x40, 0x8, 0x2, 0x6d8, 0xf69, 0x9, 0x46, 0x9}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x1000}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) 09:32:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14e8) 09:32:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14d0) 09:32:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x618) 09:32:11 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1500) 09:32:11 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x14e8) 09:32:11 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x630) [ 1720.049027][ T718] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1720.056728][ T9824] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1720.419130][ T718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.429442][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.440400][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.450192][ T9824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1720.463185][ T9824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1720.472312][ T9824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.483302][ T718] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1720.510002][ T9824] usb 2-1: config 0 descriptor?? [ 1720.659024][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1720.668119][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.676207][ T718] usb 6-1: Product: syz [ 1720.680445][ T718] usb 6-1: Manufacturer: syz [ 1720.685059][ T718] usb 6-1: SerialNumber: syz [ 1720.741405][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1720.980786][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1720.988673][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1720.996196][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.003931][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.011392][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.018810][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.026262][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.033739][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.041198][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.048615][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.056089][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.063538][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.070999][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.078414][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.085884][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.093335][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.100804][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.108223][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.115688][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.123306][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.130763][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.138174][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.145636][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.153080][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.160572][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.168002][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.175581][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.183059][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.190543][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.197969][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.205452][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.212903][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.220395][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.227809][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.235283][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.242729][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.250032][T20512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.250179][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.258636][T20512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.265846][ T9824] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1721.284240][ T9824] plantronics 0003:047F:FFFF.00CF: No inputs registered, leaving [ 1721.295489][ T9824] plantronics 0003:047F:FFFF.00CF: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1721.322898][ T9824] usb 2-1: USB disconnect, device number 87 [ 1721.629070][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1721.638636][ T718] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1721.649774][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1721.869555][ T4035] usb 6-1: USB disconnect, device number 58 09:32:14 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xb}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1518) 09:32:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1500) 09:32:14 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 09:32:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x648) 09:32:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0xd, 0x8c, {0x8c, 0x3, "0308a45b39158af1de5cc77deab139663f61f952bcbae539dddb607e81f8ac49daff4c5f111db27df6385a88496b6ef87d6e1515eef31c60f85425439893d7973153cdbf72bb8a4ff81267bf225918bdb447e017acd872bf8d690b0c96151eb37557ae19239be0235425f2e1530e6d14df8c9bad7fea6b112c54747cd1cc3ce01211c04810d0420f509e"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0xf, 0x96, "334342782a71e72bf2625879d81ee3f963de3bdfe6bcc6f1a84e02cd7fc670571a13d63c3ba0b01ceffef19b1b62406fb042b6369e11a14c613597710ba437206d4e3cddf473204ed15e6e9e19ec569cd1566d5ba3c4d3b8b0bbcd9e89e00e6684cea9fe67daa87150644f383433af365dde6d64c7dbb87811db2c97313f65842d76bb57618a8ca6fd03760f4939704d96a3746f02ef"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7d}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x4, 0x81, 0xfffffffc, 0x80, 0x40, 0x8, 0x2, 0x6d8, 0xf69, 0x9, 0x46, 0x9}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x1000}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) (rerun: 64) 09:32:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1518) 09:32:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x660) 09:32:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1530) 09:32:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1530) 09:32:14 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1548) 09:32:14 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x678) [ 1722.678949][ T9824] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1722.718922][ T4035] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1723.039112][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.050106][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.059914][ T9824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1723.072766][ T9824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1723.081863][ T9824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.109862][ T9824] usb 2-1: config 0 descriptor?? [ 1723.129480][ T4035] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 1723.141087][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1723.339092][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1723.348195][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.356403][ T4035] usb 6-1: Product: syz [ 1723.360622][ T4035] usb 6-1: Manufacturer: syz [ 1723.365240][ T4035] usb 6-1: SerialNumber: syz [ 1723.373801][T20552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.382471][T20552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.439859][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1723.469055][ T9824] usbhid 2-1:0.0: can't add hid device: -71 [ 1723.475110][ T9824] usbhid: probe of 2-1:0.0 failed with error -71 [ 1723.485189][ T9824] usb 2-1: USB disconnect, device number 88 [ 1724.098980][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1724.108608][ T4035] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1724.123030][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1724.349479][ T9824] usb 6-1: USB disconnect, device number 59 09:32:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1548) 09:32:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x690) 09:32:16 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1560) 09:32:16 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x2}}}}]}}, 0x0) 09:32:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0xd, 0x8c, {0x8c, 0x3, "0308a45b39158af1de5cc77deab139663f61f952bcbae539dddb607e81f8ac49daff4c5f111db27df6385a88496b6ef87d6e1515eef31c60f85425439893d7973153cdbf72bb8a4ff81267bf225918bdb447e017acd872bf8d690b0c96151eb37557ae19239be0235425f2e1530e6d14df8c9bad7fea6b112c54747cd1cc3ce01211c04810d0420f509e"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0xf, 0x96, "334342782a71e72bf2625879d81ee3f963de3bdfe6bcc6f1a84e02cd7fc670571a13d63c3ba0b01ceffef19b1b62406fb042b6369e11a14c613597710ba437206d4e3cddf473204ed15e6e9e19ec569cd1566d5ba3c4d3b8b0bbcd9e89e00e6684cea9fe67daa87150644f383433af365dde6d64c7dbb87811db2c97313f65842d76bb57618a8ca6fd03760f4939704d96a3746f02ef"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7d}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x4, 0x81, 0xfffffffc, 0x80, 0x40, 0x8, 0x2, 0x6d8, 0xf69, 0x9, 0x46, 0x9}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x1000}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0xd, 0x8c, {0x8c, 0x3, "0308a45b39158af1de5cc77deab139663f61f952bcbae539dddb607e81f8ac49daff4c5f111db27df6385a88496b6ef87d6e1515eef31c60f85425439893d7973153cdbf72bb8a4ff81267bf225918bdb447e017acd872bf8d690b0c96151eb37557ae19239be0235425f2e1530e6d14df8c9bad7fea6b112c54747cd1cc3ce01211c04810d0420f509e"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0xf, 0x96, "334342782a71e72bf2625879d81ee3f963de3bdfe6bcc6f1a84e02cd7fc670571a13d63c3ba0b01ceffef19b1b62406fb042b6369e11a14c613597710ba437206d4e3cddf473204ed15e6e9e19ec569cd1566d5ba3c4d3b8b0bbcd9e89e00e6684cea9fe67daa87150644f383433af365dde6d64c7dbb87811db2c97313f65842d76bb57618a8ca6fd03760f4939704d96a3746f02ef"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7d}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x4, 0x81, 0xfffffffc, 0x80, 0x40, 0x8, 0x2, 0x6d8, 0xf69, 0x9, 0x46, 0x9}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x1000}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) (async) 09:32:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x6a8) 09:32:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1560) 09:32:16 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1578) 09:32:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x6c0) 09:32:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1578) 09:32:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x6d8) [ 1725.138934][ T9824] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1725.178985][ T718] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1725.499048][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.510251][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1725.520057][ T9824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1725.532907][ T9824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1725.542017][ T9824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.553714][ T9824] usb 2-1: config 0 descriptor?? [ 1725.589036][ T718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.602017][ T718] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1725.769130][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1725.778273][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.786339][ T718] usb 6-1: Product: syz [ 1725.790552][ T718] usb 6-1: Manufacturer: syz [ 1725.795166][ T718] usb 6-1: SerialNumber: syz [ 1725.839792][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1726.020906][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.028371][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.035847][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.043301][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.050756][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.058168][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.065630][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.073090][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.080565][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.087997][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.095494][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.102976][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.110464][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.117881][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.125345][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.132797][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.140261][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.147685][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.155234][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.162692][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.170171][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.177602][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.185066][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.192529][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.200015][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.207431][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.214935][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.222392][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.229864][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.237288][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.244778][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.252237][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.259717][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.267136][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.270451][T20564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.274689][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.290424][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.292745][T20564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.297817][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.313014][ T9824] plantronics 0003:047F:FFFF.00D0: unknown main item tag 0x0 [ 1726.321774][ T9824] plantronics 0003:047F:FFFF.00D0: No inputs registered, leaving [ 1726.331778][ T9824] plantronics 0003:047F:FFFF.00D0: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1726.339701][T20564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.367988][T20564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.388323][ T4035] usb 2-1: USB disconnect, device number 89 [ 1726.699058][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1726.708641][ T718] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1726.719412][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1726.939657][ T9824] usb 6-1: USB disconnect, device number 60 09:32:19 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xd}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:19 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1590) 09:32:19 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1590) 09:32:19 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x6f0) 09:32:19 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x3}}}}]}}, 0x0) 09:32:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0xd0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x15, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf9, 0xf3, 0x80}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0x3f, 0x9, 0xff, 0xfe}, 0xd1, &(0x7f0000000200)={0x5, 0xf, 0xd1, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x57, 0x0, 0x9e4b}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x5, 0x7f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb2, 0x10, 0xa, "f6749b3ba2a131bbc34da69eaeac3c0f22f95667cac8a35c13adf47b82b499f4638a042d7bd66225f7f1b918e3c5f9084ffd1963c70a2a44a78462b621a044803d5a7924e9135fd7ec52fad4b15416ec2a633a5785bb1dbe5620a1c3f6d80688ace3d4d631da8329eac8ff1de6b9b6e1c45f2e26da603bca13aaffcb991cd04e5a665f15e76532704d38d76058a4af887747cf187a574d85a01dcbda065751ba4b41611efda56f091de323180c2558"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "978b92f45452cbdde8e2d834990775aae5ff01b7e5057bf3a910e32e5a4d3c02700e87db23471e55ff13d05e5c3987eb3e0fdd86832265c602345b0198788726bb7192a4f192db4e99b95140d2f864b631706fe0dc0e08b1416009c8827b7dbfbf0d35"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x9018}}, {0xba, &(0x7f00000003c0)=@string={0xba, 0x3, "baec48f3bc930cb7ddc35367fd345095dc48ebdd6046e601c065671407b31782b1a79ea6b3bad9c13de721659d7353cd9e02e9a5378598eddc2e5a7405b87fba7cc8e86a99f80b9bcb42f2e747552cdaabdddc5e86ab556c143ff5ad6c82bbd0cd0a098c779a0bc6931f2846488556faf61b595d64fbc18203f56bf5fbf32c78ed2baabbb6038f413e485458227e03eb269ee7ea0b48cd26754b54da7aa7808c7444bc1e0f918fd85b623109aef99b574f0ac4db3f67ec47"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000500)={0x0, 0x35, 0x11, {0x11, 0x23, "85279ee8f83a88e443e86b10acde07"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xed73fe7fcb3f5ccd}}, &(0x7f0000000580)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x5, "dd637fa4"}, @global=@item_4={0x3, 0x1, 0x0, "c99429bc"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0xb, "be"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "0815dd80"}, @main=@item_4={0x3, 0x0, 0x8, "5d377c95"}, @local=@item_4={0x3, 0x2, 0x3, "43120179"}, @global=@item_4={0x3, 0x1, 0x1, "8a6e22f9"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x2, 0x1, {0x22, 0x666}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x40, 0x7, 0xc, "38dd71118b47e6f1bff4d9f2"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000700)={0x20, 0x1, 0x76, "21b4c1169db62351f4b3579e8ad9c11cc1723f21229ceaa5dc80ab49396ea886b01567857a7219a9459217846fa7763e8ed37f428559f4fcff933b220e80669f11ea60aade445c6e59f24b2bc8a5a3c2dd1b2aa52b5884a1de83864b168f1dfbaf9ee8a73871fca8e7d75d2a6acc53b7044cb95f9cdd"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x6}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:19 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15a8) 09:32:19 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x708) 09:32:19 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15a8) 09:32:19 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15c0) 09:32:19 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x720) 09:32:19 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15c0) [ 1727.759067][ T4035] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1727.778944][ T9824] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1728.159062][ T9824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.169099][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.169426][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1728.180156][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.202825][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1728.215677][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1728.224782][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.240944][ T4035] usb 2-1: config 0 descriptor?? [ 1728.369127][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1728.378252][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.386349][ T9824] usb 6-1: Product: syz [ 1728.390704][ T9824] usb 6-1: Manufacturer: syz [ 1728.395326][ T9824] usb 6-1: SerialNumber: syz [ 1728.449906][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1728.730745][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.738199][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.745706][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.753385][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.760853][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.768265][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.775754][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.783316][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.790886][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.798311][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.805780][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.813228][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.820707][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.828121][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.835602][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.843076][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.850552][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.858016][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.865502][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.872963][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.880445][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.887851][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.895322][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.902783][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.910260][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.917669][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.925143][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.932586][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.940062][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.947479][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.954952][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.960083][T20595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.962382][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.978124][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1728.978258][T20595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.985577][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1729.000694][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1729.008103][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1729.015569][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1729.023013][ T4035] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 1729.032385][ T4035] plantronics 0003:047F:FFFF.00D1: No inputs registered, leaving [ 1729.050218][ T4035] plantronics 0003:047F:FFFF.00D1: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1729.082629][ T4035] usb 2-1: USB disconnect, device number 90 [ 1729.098994][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1729.108820][ T9824] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1729.118004][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1729.349456][ T4035] usb 6-1: USB disconnect, device number 61 09:32:21 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xe}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:21 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15d8) 09:32:21 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15d8) 09:32:21 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x738) 09:32:21 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x4}}}}]}}, 0x0) 09:32:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0xd0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x15, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf9, 0xf3, 0x80}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0x3f, 0x9, 0xff, 0xfe}, 0xd1, &(0x7f0000000200)={0x5, 0xf, 0xd1, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x57, 0x0, 0x9e4b}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x5, 0x7f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb2, 0x10, 0xa, "f6749b3ba2a131bbc34da69eaeac3c0f22f95667cac8a35c13adf47b82b499f4638a042d7bd66225f7f1b918e3c5f9084ffd1963c70a2a44a78462b621a044803d5a7924e9135fd7ec52fad4b15416ec2a633a5785bb1dbe5620a1c3f6d80688ace3d4d631da8329eac8ff1de6b9b6e1c45f2e26da603bca13aaffcb991cd04e5a665f15e76532704d38d76058a4af887747cf187a574d85a01dcbda065751ba4b41611efda56f091de323180c2558"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "978b92f45452cbdde8e2d834990775aae5ff01b7e5057bf3a910e32e5a4d3c02700e87db23471e55ff13d05e5c3987eb3e0fdd86832265c602345b0198788726bb7192a4f192db4e99b95140d2f864b631706fe0dc0e08b1416009c8827b7dbfbf0d35"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x9018}}, {0xba, &(0x7f00000003c0)=@string={0xba, 0x3, "baec48f3bc930cb7ddc35367fd345095dc48ebdd6046e601c065671407b31782b1a79ea6b3bad9c13de721659d7353cd9e02e9a5378598eddc2e5a7405b87fba7cc8e86a99f80b9bcb42f2e747552cdaabdddc5e86ab556c143ff5ad6c82bbd0cd0a098c779a0bc6931f2846488556faf61b595d64fbc18203f56bf5fbf32c78ed2baabbb6038f413e485458227e03eb269ee7ea0b48cd26754b54da7aa7808c7444bc1e0f918fd85b623109aef99b574f0ac4db3f67ec47"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000500)={0x0, 0x35, 0x11, {0x11, 0x23, "85279ee8f83a88e443e86b10acde07"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xed73fe7fcb3f5ccd}}, &(0x7f0000000580)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x5, "dd637fa4"}, @global=@item_4={0x3, 0x1, 0x0, "c99429bc"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0xb, "be"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "0815dd80"}, @main=@item_4={0x3, 0x0, 0x8, "5d377c95"}, @local=@item_4={0x3, 0x2, 0x3, "43120179"}, @global=@item_4={0x3, 0x1, 0x1, "8a6e22f9"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x2, 0x1, {0x22, 0x666}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x40, 0x7, 0xc, "38dd71118b47e6f1bff4d9f2"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000700)={0x20, 0x1, 0x76, "21b4c1169db62351f4b3579e8ad9c11cc1723f21229ceaa5dc80ab49396ea886b01567857a7219a9459217846fa7763e8ed37f428559f4fcff933b220e80669f11ea60aade445c6e59f24b2bc8a5a3c2dd1b2aa52b5884a1de83864b168f1dfbaf9ee8a73871fca8e7d75d2a6acc53b7044cb95f9cdd"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x6}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0xd0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x15, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf9, 0xf3, 0x80}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0x3f, 0x9, 0xff, 0xfe}, 0xd1, &(0x7f0000000200)={0x5, 0xf, 0xd1, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x57, 0x0, 0x9e4b}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x5, 0x7f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb2, 0x10, 0xa, "f6749b3ba2a131bbc34da69eaeac3c0f22f95667cac8a35c13adf47b82b499f4638a042d7bd66225f7f1b918e3c5f9084ffd1963c70a2a44a78462b621a044803d5a7924e9135fd7ec52fad4b15416ec2a633a5785bb1dbe5620a1c3f6d80688ace3d4d631da8329eac8ff1de6b9b6e1c45f2e26da603bca13aaffcb991cd04e5a665f15e76532704d38d76058a4af887747cf187a574d85a01dcbda065751ba4b41611efda56f091de323180c2558"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "978b92f45452cbdde8e2d834990775aae5ff01b7e5057bf3a910e32e5a4d3c02700e87db23471e55ff13d05e5c3987eb3e0fdd86832265c602345b0198788726bb7192a4f192db4e99b95140d2f864b631706fe0dc0e08b1416009c8827b7dbfbf0d35"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x9018}}, {0xba, &(0x7f00000003c0)=@string={0xba, 0x3, "baec48f3bc930cb7ddc35367fd345095dc48ebdd6046e601c065671407b31782b1a79ea6b3bad9c13de721659d7353cd9e02e9a5378598eddc2e5a7405b87fba7cc8e86a99f80b9bcb42f2e747552cdaabdddc5e86ab556c143ff5ad6c82bbd0cd0a098c779a0bc6931f2846488556faf61b595d64fbc18203f56bf5fbf32c78ed2baabbb6038f413e485458227e03eb269ee7ea0b48cd26754b54da7aa7808c7444bc1e0f918fd85b623109aef99b574f0ac4db3f67ec47"}}]}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000500)={0x0, 0x35, 0x11, {0x11, 0x23, "85279ee8f83a88e443e86b10acde07"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xed73fe7fcb3f5ccd}}, &(0x7f0000000580)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x5, "dd637fa4"}, @global=@item_4={0x3, 0x1, 0x0, "c99429bc"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0xb, "be"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "0815dd80"}, @main=@item_4={0x3, 0x0, 0x8, "5d377c95"}, @local=@item_4={0x3, 0x2, 0x3, "43120179"}, @global=@item_4={0x3, 0x1, 0x1, "8a6e22f9"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x2, 0x1, {0x22, 0x666}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x40, 0x7, 0xc, "38dd71118b47e6f1bff4d9f2"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000700)={0x20, 0x1, 0x76, "21b4c1169db62351f4b3579e8ad9c11cc1723f21229ceaa5dc80ab49396ea886b01567857a7219a9459217846fa7763e8ed37f428559f4fcff933b220e80669f11ea60aade445c6e59f24b2bc8a5a3c2dd1b2aa52b5884a1de83864b168f1dfbaf9ee8a73871fca8e7d75d2a6acc53b7044cb95f9cdd"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x6}}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) 09:32:21 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15f0) 09:32:21 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x750) 09:32:21 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x15f0) 09:32:21 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1608) 09:32:22 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x768) 09:32:22 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1608) [ 1730.169976][ T9824] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1730.179089][ T4035] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1730.539046][ T9824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.552083][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1730.589114][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.600098][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.609988][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1730.622859][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.631949][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.642707][ T4035] usb 2-1: config 0 descriptor?? [ 1730.719049][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1730.728154][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.736356][ T9824] usb 6-1: Product: syz [ 1730.740578][ T9824] usb 6-1: Manufacturer: syz [ 1730.745201][ T9824] usb 6-1: SerialNumber: syz [ 1730.789893][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1731.110736][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.118199][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.125684][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.133345][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.140831][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.148253][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.155713][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.163176][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.170646][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.178076][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.185527][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.192985][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.200445][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.207877][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.215343][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.222800][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.230248][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.237680][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.245131][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.252580][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.260053][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.267555][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.275015][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.282462][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.289927][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.297344][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.304816][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.312268][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.319737][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.327155][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.330334][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.334632][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.350373][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.352546][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.357771][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.365907][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1731.372996][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.389463][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.393704][ T9824] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1731.396894][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.410406][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.414527][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.417804][ T4035] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0 [ 1731.420582][ T4035] plantronics 0003:047F:FFFF.00D2: No inputs registered, leaving [ 1731.433199][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1731.435845][ T4035] plantronics 0003:047F:FFFF.00D2: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1731.463915][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.489431][ T4134] usb 2-1: USB disconnect, device number 91 [ 1731.599908][ T4035] usb 6-1: USB disconnect, device number 62 09:32:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xf}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:24 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1620) 09:32:24 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1620) 09:32:24 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x780) 09:32:24 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x5}}}}]}}, 0x0) 09:32:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0xd0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x15, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf9, 0xf3, 0x80}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0x3f, 0x9, 0xff, 0xfe}, 0xd1, &(0x7f0000000200)={0x5, 0xf, 0xd1, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x57, 0x0, 0x9e4b}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x5, 0x7f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb2, 0x10, 0xa, "f6749b3ba2a131bbc34da69eaeac3c0f22f95667cac8a35c13adf47b82b499f4638a042d7bd66225f7f1b918e3c5f9084ffd1963c70a2a44a78462b621a044803d5a7924e9135fd7ec52fad4b15416ec2a633a5785bb1dbe5620a1c3f6d80688ace3d4d631da8329eac8ff1de6b9b6e1c45f2e26da603bca13aaffcb991cd04e5a665f15e76532704d38d76058a4af887747cf187a574d85a01dcbda065751ba4b41611efda56f091de323180c2558"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "978b92f45452cbdde8e2d834990775aae5ff01b7e5057bf3a910e32e5a4d3c02700e87db23471e55ff13d05e5c3987eb3e0fdd86832265c602345b0198788726bb7192a4f192db4e99b95140d2f864b631706fe0dc0e08b1416009c8827b7dbfbf0d35"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x9018}}, {0xba, &(0x7f00000003c0)=@string={0xba, 0x3, "baec48f3bc930cb7ddc35367fd345095dc48ebdd6046e601c065671407b31782b1a79ea6b3bad9c13de721659d7353cd9e02e9a5378598eddc2e5a7405b87fba7cc8e86a99f80b9bcb42f2e747552cdaabdddc5e86ab556c143ff5ad6c82bbd0cd0a098c779a0bc6931f2846488556faf61b595d64fbc18203f56bf5fbf32c78ed2baabbb6038f413e485458227e03eb269ee7ea0b48cd26754b54da7aa7808c7444bc1e0f918fd85b623109aef99b574f0ac4db3f67ec47"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000500)={0x0, 0x35, 0x11, {0x11, 0x23, "85279ee8f83a88e443e86b10acde07"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xed73fe7fcb3f5ccd}}, &(0x7f0000000580)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x5, "dd637fa4"}, @global=@item_4={0x3, 0x1, 0x0, "c99429bc"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0xb, "be"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "0815dd80"}, @main=@item_4={0x3, 0x0, 0x8, "5d377c95"}, @local=@item_4={0x3, 0x2, 0x3, "43120179"}, @global=@item_4={0x3, 0x1, 0x1, "8a6e22f9"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x2, 0x1, {0x22, 0x666}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x40, 0x7, 0xc, "38dd71118b47e6f1bff4d9f2"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000700)={0x20, 0x1, 0x76, "21b4c1169db62351f4b3579e8ad9c11cc1723f21229ceaa5dc80ab49396ea886b01567857a7219a9459217846fa7763e8ed37f428559f4fcff933b220e80669f11ea60aade445c6e59f24b2bc8a5a3c2dd1b2aa52b5884a1de83864b168f1dfbaf9ee8a73871fca8e7d75d2a6acc53b7044cb95f9cdd"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x6}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:24 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1638) 09:32:24 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x798) 09:32:24 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1638) 09:32:24 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7b0) 09:32:24 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1650) 09:32:24 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1650) [ 1732.408952][ T4035] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1732.439039][ T25] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1732.809038][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.820042][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.830034][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1732.843227][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1732.852313][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.860808][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.874277][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1732.891832][ T4035] usb 2-1: config 0 descriptor?? [ 1733.059062][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1733.068199][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.076404][ T25] usb 6-1: Product: syz [ 1733.080613][ T25] usb 6-1: Manufacturer: syz [ 1733.085224][ T25] usb 6-1: SerialNumber: syz [ 1733.139779][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1733.360661][T20663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.369450][T20663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.390856][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.398320][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.405794][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.413242][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.420706][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.428121][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.435590][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.443038][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.450493][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.457904][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.465369][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.472905][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.480373][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.487788][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.495260][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.502706][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.510161][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.517578][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.525042][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.532494][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.539950][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.547375][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.554852][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.562303][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.569763][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.577171][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.584627][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.592068][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.599514][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.606932][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.614400][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.621844][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.629313][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.636739][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.644203][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.651747][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.659208][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.666622][ T4035] plantronics 0003:047F:FFFF.00D3: unknown main item tag 0x0 [ 1733.678756][ T4035] plantronics 0003:047F:FFFF.00D3: No inputs registered, leaving [ 1733.699197][ T4035] plantronics 0003:047F:FFFF.00D3: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1733.713957][ T4035] usb 2-1: USB disconnect, device number 92 [ 1734.099080][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1734.108654][ T25] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1734.117989][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1734.339580][ T4035] usb 6-1: USB disconnect, device number 63 09:32:26 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x10}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:26 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7c8) 09:32:26 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1668) 09:32:26 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1668) 09:32:26 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x6}}}}]}}, 0x0) 09:32:26 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0xc6, 0x290000) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:26 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7e0) 09:32:26 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1680) 09:32:26 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1680) 09:32:26 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 09:32:26 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7f8) 09:32:26 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1735.148924][ T4035] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1735.168930][ T4134] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1735.539066][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.551169][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.559086][ T4035] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.560960][ T4134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1735.577803][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1735.583821][ T4134] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1735.605721][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.618879][ T4134] usb 2-1: config 0 descriptor?? [ 1735.809031][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1735.818173][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.826244][ T4035] usb 6-1: Product: syz [ 1735.830451][ T4035] usb 6-1: Manufacturer: syz [ 1735.835067][ T4035] usb 6-1: SerialNumber: syz [ 1735.900427][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1736.159016][ T4134] usbhid 2-1:0.0: can't add hid device: -71 [ 1736.165093][ T4134] usbhid: probe of 2-1:0.0 failed with error -71 [ 1736.174411][ T4134] usb 2-1: USB disconnect, device number 93 [ 1736.579085][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1736.600196][ T4035] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1736.608676][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1736.829509][ T25] usb 6-1: USB disconnect, device number 64 09:32:29 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x11}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:29 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16b0) 09:32:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16b0) 09:32:29 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x810) 09:32:29 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x7}}}}]}}, 0x0) 09:32:29 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0xc6, 0x290000) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:29 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x828) 09:32:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16c8) 09:32:29 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16c8) 09:32:29 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x840) 09:32:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16e0) 09:32:29 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16e0) [ 1737.618932][ T4134] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1737.648945][ T9824] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1737.979248][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.990269][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.000079][ T4134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1738.012932][ T4134] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1738.022031][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.035594][ T4134] usb 2-1: config 0 descriptor?? [ 1738.049274][ T9824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.059864][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1738.229113][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1738.238216][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.246342][ T9824] usb 6-1: Product: syz [ 1738.250574][ T9824] usb 6-1: Manufacturer: syz [ 1738.255198][ T9824] usb 6-1: SerialNumber: syz [ 1738.299689][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1738.599087][ T4134] usbhid 2-1:0.0: can't add hid device: -71 [ 1738.605148][ T4134] usbhid: probe of 2-1:0.0 failed with error -71 [ 1738.614101][ T4134] usb 2-1: USB disconnect, device number 94 [ 1738.959057][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1738.968610][ T9824] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1738.977613][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1739.209557][ T25] usb 6-1: USB disconnect, device number 65 09:32:31 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x12}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:31 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x858) 09:32:31 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16f8) 09:32:31 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x16f8) 09:32:31 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x18}}}}]}}, 0x0) 09:32:31 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0xc6, 0x290000) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:31 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1710) 09:32:31 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x870) 09:32:31 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1710) 09:32:31 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x888) 09:32:31 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1728) 09:32:31 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1728) [ 1740.009106][ T25] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1740.038980][ T4035] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1740.399181][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.410156][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.420142][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1740.432994][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1740.442124][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.453559][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1740.473335][ T25] usb 2-1: config 0 descriptor?? [ 1740.619038][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1740.628132][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.636250][ T4035] usb 6-1: Product: syz [ 1740.640468][ T4035] usb 6-1: Manufacturer: syz [ 1740.645086][ T4035] usb 6-1: SerialNumber: syz [ 1740.699731][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1741.009114][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 1741.015152][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 1741.027915][ T25] usb 2-1: USB disconnect, device number 95 [ 1741.269045][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1741.278610][ T4035] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1741.287678][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1741.689857][ T25] usb 6-1: USB disconnect, device number 66 09:32:34 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x18}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:34 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8a0) 09:32:34 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1740) 09:32:34 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1740) 09:32:34 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x3}}}}]}}, 0x0) 09:32:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x8d, {0x8d, 0xf, "579a5657b14dabc397ea3d66d7071f0e567dd884bab28aaed6577ae9fef82fd0236d6a6062c3928ec5a6e0b7cf021e9e066cbf20221d4d3458f10c3c9fb9eddb3a73c3800693adacda5e30e65e8cef480ed8506ee72703de53991c49d0009bb97b53b1d79a5bcdebf5645c0a3c1f42defccf6c4c33079db8dfb6856756ed427ddd07729d1e261b507e49c8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000240)={0x0, 0x22, 0x20, {[@local=@item_4={0x3, 0x2, 0xa, "f7b959e1"}, @global=@item_4={0x3, 0x1, 0x0, "0239de15"}, @global=@item_4={0x3, 0x1, 0x1, "33b79ec9"}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "d318be3c"}, @global=@item_4={0x3, 0x1, 0x0, "3bab7d7d"}, @main=@item_4={0x3, 0x0, 0x9, "85bb28b5"}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x9, 0x1, {0x22, 0xce8}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0x2c, "14c4d7d847a1c0fe5c1b7bc7d1cb1b74ab17e722409dc31661f99e7951373f9043d008dfad1813d2aa60c422"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x1, 0xcf, "cc8d00fc6dcdb24822c06bda39bb510a2d4fd42d09cac002b809eeef76291966d659eadf761101d8533248690344a6f318b45350ff69d3982d2dbe46bc09210e0b6f144ccd3ce36f17324ccbb8a104831eb88493d8150281186fe2095f8bf65ba5723099535c41673d849e89de42b19e7e327321ffeff8abde38ca05c80a5b3f015806cdacf1085e5562fd6ea5ba4bc2df7d7531c869e29073e5cb898d9903a2fc0d1092732f08eb4a82e61944b67e05fdaffab376cd8934f0cfc193735d1b3273568f899bef7bad6d99f662d9cdab"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x14}}) 09:32:34 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1758) 09:32:34 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1758) 09:32:34 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8b8) 09:32:34 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1770) 09:32:34 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1770) 09:32:34 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8d0) [ 1742.469090][ T9824] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1742.498933][ T25] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1742.839177][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.850470][ T9824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.860292][ T9824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1742.873155][ T9824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1742.882264][ T9824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.893761][ T9824] usb 2-1: config 0 descriptor?? [ 1742.899181][ T25] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1742.916554][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1743.139177][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1743.148272][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.156343][ T25] usb 6-1: Product: syz [ 1743.160557][ T25] usb 6-1: Manufacturer: syz [ 1743.165195][ T25] usb 6-1: SerialNumber: syz [ 1743.230005][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1743.380743][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.388210][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.395716][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.403194][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.410660][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.418085][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.425551][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.433020][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.440503][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.447920][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.455370][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.462854][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.470359][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.477778][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.485245][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.492718][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.500193][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.507629][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.515107][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.522605][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.530075][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.537582][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.545062][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.552538][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.560018][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.567443][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.574924][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.582385][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.589863][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.597285][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.604761][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.612264][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.619743][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.627164][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.634658][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.642132][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.649611][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.657032][ T9824] plantronics 0003:047F:FFFF.00D4: unknown main item tag 0x0 [ 1743.659958][T20744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.665279][ T9824] plantronics 0003:047F:FFFF.00D4: No inputs registered, leaving [ 1743.673688][T20744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.700965][ T9824] plantronics 0003:047F:FFFF.00D4: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1743.717520][ T9824] usb 2-1: USB disconnect, device number 96 [ 1743.849120][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1743.858716][ T25] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1743.866029][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1744.109542][ T9824] usb 6-1: USB disconnect, device number 67 09:32:36 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x3e}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:36 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1788) 09:32:36 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1788) 09:32:36 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x8e8) 09:32:36 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x4}}}}]}}, 0x0) 09:32:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x8d, {0x8d, 0xf, "579a5657b14dabc397ea3d66d7071f0e567dd884bab28aaed6577ae9fef82fd0236d6a6062c3928ec5a6e0b7cf021e9e066cbf20221d4d3458f10c3c9fb9eddb3a73c3800693adacda5e30e65e8cef480ed8506ee72703de53991c49d0009bb97b53b1d79a5bcdebf5645c0a3c1f42defccf6c4c33079db8dfb6856756ed427ddd07729d1e261b507e49c8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000240)={0x0, 0x22, 0x20, {[@local=@item_4={0x3, 0x2, 0xa, "f7b959e1"}, @global=@item_4={0x3, 0x1, 0x0, "0239de15"}, @global=@item_4={0x3, 0x1, 0x1, "33b79ec9"}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "d318be3c"}, @global=@item_4={0x3, 0x1, 0x0, "3bab7d7d"}, @main=@item_4={0x3, 0x0, 0x9, "85bb28b5"}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x9, 0x1, {0x22, 0xce8}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0x2c, "14c4d7d847a1c0fe5c1b7bc7d1cb1b74ab17e722409dc31661f99e7951373f9043d008dfad1813d2aa60c422"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x1, 0xcf, "cc8d00fc6dcdb24822c06bda39bb510a2d4fd42d09cac002b809eeef76291966d659eadf761101d8533248690344a6f318b45350ff69d3982d2dbe46bc09210e0b6f144ccd3ce36f17324ccbb8a104831eb88493d8150281186fe2095f8bf65ba5723099535c41673d849e89de42b19e7e327321ffeff8abde38ca05c80a5b3f015806cdacf1085e5562fd6ea5ba4bc2df7d7531c869e29073e5cb898d9903a2fc0d1092732f08eb4a82e61944b67e05fdaffab376cd8934f0cfc193735d1b3273568f899bef7bad6d99f662d9cdab"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x14}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x8d, {0x8d, 0xf, "579a5657b14dabc397ea3d66d7071f0e567dd884bab28aaed6577ae9fef82fd0236d6a6062c3928ec5a6e0b7cf021e9e066cbf20221d4d3458f10c3c9fb9eddb3a73c3800693adacda5e30e65e8cef480ed8506ee72703de53991c49d0009bb97b53b1d79a5bcdebf5645c0a3c1f42defccf6c4c33079db8dfb6856756ed427ddd07729d1e261b507e49c8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000240)={0x0, 0x22, 0x20, {[@local=@item_4={0x3, 0x2, 0xa, "f7b959e1"}, @global=@item_4={0x3, 0x1, 0x0, "0239de15"}, @global=@item_4={0x3, 0x1, 0x1, "33b79ec9"}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "d318be3c"}, @global=@item_4={0x3, 0x1, 0x0, "3bab7d7d"}, @main=@item_4={0x3, 0x0, 0x9, "85bb28b5"}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x9, 0x1, {0x22, 0xce8}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0x2c, "14c4d7d847a1c0fe5c1b7bc7d1cb1b74ab17e722409dc31661f99e7951373f9043d008dfad1813d2aa60c422"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x1, 0xcf, "cc8d00fc6dcdb24822c06bda39bb510a2d4fd42d09cac002b809eeef76291966d659eadf761101d8533248690344a6f318b45350ff69d3982d2dbe46bc09210e0b6f144ccd3ce36f17324ccbb8a104831eb88493d8150281186fe2095f8bf65ba5723099535c41673d849e89de42b19e7e327321ffeff8abde38ca05c80a5b3f015806cdacf1085e5562fd6ea5ba4bc2df7d7531c869e29073e5cb898d9903a2fc0d1092732f08eb4a82e61944b67e05fdaffab376cd8934f0cfc193735d1b3273568f899bef7bad6d99f662d9cdab"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x14}}) (async) 09:32:36 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17a0) 09:32:36 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x900) 09:32:36 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17a0) 09:32:36 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 09:32:36 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17b8) 09:32:36 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17b8) [ 1744.878926][ T25] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1744.898980][ T4035] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1745.239060][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.250033][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.259862][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1745.272715][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1745.281864][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.293017][ T25] usb 2-1: config 0 descriptor?? [ 1745.299751][ T4035] usb 6-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 1745.311347][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1745.479055][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1745.488158][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.496398][ T4035] usb 6-1: Product: syz [ 1745.500625][ T4035] usb 6-1: Manufacturer: syz [ 1745.505245][ T4035] usb 6-1: SerialNumber: syz [ 1745.559744][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1745.770794][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.778299][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.785813][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.793276][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.800740][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.808159][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.815830][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.823308][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.830770][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.838193][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.845665][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.853144][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.860612][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.868038][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.875520][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.882993][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.890476][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.897898][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.905383][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.912844][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.920408][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.927828][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.935339][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.942797][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.950289][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.957720][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.965216][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.972696][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.980172][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.987593][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1745.995084][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.002545][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.010025][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.017452][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.025021][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.029908][T20767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.032456][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.047730][T20767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.048127][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.063337][ T25] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1746.074203][ T25] plantronics 0003:047F:FFFF.00D5: No inputs registered, leaving [ 1746.075653][T20767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.100175][ T25] plantronics 0003:047F:FFFF.00D5: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1746.116365][T20767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.132677][ T9824] usb 2-1: USB disconnect, device number 97 [ 1746.429130][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1746.438926][ T72] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1746.445760][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1746.649634][ T25] usb 6-1: USB disconnect, device number 68 09:32:39 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x2}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:39 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x930) 09:32:39 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17d0) 09:32:39 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17d0) 09:32:39 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x7}}}}]}}, 0x0) 09:32:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x8d, {0x8d, 0xf, "579a5657b14dabc397ea3d66d7071f0e567dd884bab28aaed6577ae9fef82fd0236d6a6062c3928ec5a6e0b7cf021e9e066cbf20221d4d3458f10c3c9fb9eddb3a73c3800693adacda5e30e65e8cef480ed8506ee72703de53991c49d0009bb97b53b1d79a5bcdebf5645c0a3c1f42defccf6c4c33079db8dfb6856756ed427ddd07729d1e261b507e49c8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000240)={0x0, 0x22, 0x20, {[@local=@item_4={0x3, 0x2, 0xa, "f7b959e1"}, @global=@item_4={0x3, 0x1, 0x0, "0239de15"}, @global=@item_4={0x3, 0x1, 0x1, "33b79ec9"}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "d318be3c"}, @global=@item_4={0x3, 0x1, 0x0, "3bab7d7d"}, @main=@item_4={0x3, 0x0, 0x9, "85bb28b5"}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x9, 0x1, {0x22, 0xce8}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0x2c, "14c4d7d847a1c0fe5c1b7bc7d1cb1b74ab17e722409dc31661f99e7951373f9043d008dfad1813d2aa60c422"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x1, 0xcf, "cc8d00fc6dcdb24822c06bda39bb510a2d4fd42d09cac002b809eeef76291966d659eadf761101d8533248690344a6f318b45350ff69d3982d2dbe46bc09210e0b6f144ccd3ce36f17324ccbb8a104831eb88493d8150281186fe2095f8bf65ba5723099535c41673d849e89de42b19e7e327321ffeff8abde38ca05c80a5b3f015806cdacf1085e5562fd6ea5ba4bc2df7d7531c869e29073e5cb898d9903a2fc0d1092732f08eb4a82e61944b67e05fdaffab376cd8934f0cfc193735d1b3273568f899bef7bad6d99f662d9cdab"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x14}}) 09:32:39 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17e8) 09:32:39 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x948) 09:32:39 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x17e8) 09:32:39 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1800) 09:32:39 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1800) 09:32:39 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x960) [ 1747.448948][ T25] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1747.459036][ T9824] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1747.819027][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.830004][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.839815][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1747.852690][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1747.861822][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.879023][ T9824] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1747.881350][ T25] usb 2-1: config 0 descriptor?? [ 1747.887918][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1748.099023][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1748.108147][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.116229][ T9824] usb 6-1: Product: syz [ 1748.120619][ T9824] usb 6-1: Manufacturer: syz [ 1748.125244][ T9824] usb 6-1: SerialNumber: syz [ 1748.189748][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1748.380744][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.388204][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.395722][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.403382][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.410859][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.418274][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.425755][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.433212][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.440689][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.448193][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.455666][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.463116][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.470586][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.477999][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.485461][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.492912][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.500364][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.507779][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.515240][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.522797][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.530253][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.537670][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.545142][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.552592][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.560069][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.567484][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.574968][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.580933][T20817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.582412][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.598182][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.598354][T20817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.605634][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.620749][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.628168][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.635646][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.643124][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.650601][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.658015][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.665491][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.672943][ T25] plantronics 0003:047F:FFFF.00D6: unknown main item tag 0x0 [ 1748.683427][ T25] plantronics 0003:047F:FFFF.00D6: No inputs registered, leaving [ 1748.700159][ T25] plantronics 0003:047F:FFFF.00D6: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1748.732110][ T25] usb 2-1: USB disconnect, device number 98 [ 1748.849016][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1749.255260][ T4134] usb 6-1: USB disconnect, device number 69 09:32:41 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x3}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:41 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1818) 09:32:41 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x978) 09:32:41 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1818) 09:32:41 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0xf}}}}]}}, 0x0) 09:32:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4da, 0x104d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, {0x9, 0x21, 0xa77, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x7f, 0xe5}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:41 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1830) 09:32:41 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1830) 09:32:41 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x990) 09:32:41 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1848) 09:32:41 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9a8) 09:32:41 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1848) [ 1750.078941][ T25] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1750.109035][ T9824] usb 6-1: Service connection timeout for: 256 [ 1750.115272][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1750.126119][ T9824] ath9k_htc: Failed to initialize the device [ 1750.132506][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1750.488996][ T4134] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1750.499035][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1750.569007][ T25] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1750.576667][ T25] usb 2-1: can't read configurations, error -71 [ 1750.879006][ T4134] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1751.049123][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1751.058269][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.066351][ T4134] usb 6-1: Product: syz [ 1751.070562][ T4134] usb 6-1: Manufacturer: syz [ 1751.075182][ T4134] usb 6-1: SerialNumber: syz [ 1751.119727][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1751.688998][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1752.105043][ T25] usb 6-1: USB disconnect, device number 70 09:32:44 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x4}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:44 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9c0) 09:32:44 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1860) 09:32:44 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1860) 09:32:44 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xf}}}}]}}, 0x0) 09:32:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4da, 0x104d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, {0x9, 0x21, 0xa77, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x7f, 0xe5}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:44 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9d8) 09:32:44 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1878) 09:32:44 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1878) 09:32:44 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x9f0) 09:32:44 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1890) 09:32:44 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1890) [ 1752.908975][ T9824] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1752.988984][ T4134] usb 6-1: Service connection timeout for: 256 [ 1752.995189][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1753.005453][ T4134] ath9k_htc: Failed to initialize the device [ 1753.011811][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1753.268989][ T9824] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1753.329081][ T9824] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1753.336744][ T9824] usb 2-1: can't read configurations, error -71 [ 1753.398946][ T25] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1753.829088][ T25] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 1753.837181][ T25] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1753.848033][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1753.861140][ T25] usb 6-1: config 1 interface 1 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 0 [ 1753.874087][ T25] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1754.039231][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1754.048360][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.056434][ T25] usb 6-1: Product: syz [ 1754.060654][ T25] usb 6-1: Manufacturer: syz [ 1754.065266][ T25] usb 6-1: SerialNumber: syz [ 1754.109993][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1754.120578][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1754.688990][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1754.698559][ T25] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1754.706882][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1754.908971][ T4035] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1754.918026][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1754.939681][ T9824] usb 6-1: USB disconnect, device number 71 09:32:47 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:47 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa08) 09:32:47 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18a8) 09:32:47 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18a8) 09:32:47 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 09:32:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4da, 0x104d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, {0x9, 0x21, 0xa77, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x7f, 0xe5}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4da, 0x104d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, {0x9, 0x21, 0xa77, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x7f, 0xe5}}]}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) 09:32:47 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa20) 09:32:47 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18c0) 09:32:47 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18c0) 09:32:47 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa38) 09:32:47 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18d8) 09:32:47 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18d8) [ 1755.688976][ T4035] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1755.739034][ T9824] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1756.049122][ T4035] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1756.108984][ T4035] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1756.116686][ T4035] usb 2-1: can't read configurations, error -71 [ 1756.189018][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1756.389170][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1756.398276][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.406351][ T9824] usb 6-1: Product: syz [ 1756.410575][ T9824] usb 6-1: Manufacturer: syz [ 1756.415201][ T9824] usb 6-1: SerialNumber: syz [ 1756.499879][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1757.088987][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1757.494684][ T4134] usb 6-1: USB disconnect, device number 72 09:32:50 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x7}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:50 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa50) 09:32:50 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18f0) 09:32:50 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18f0) 09:32:50 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x2}}}}]}}, 0x0) 09:32:50 executing program 1: r0 = syz_usb_connect$hid(0x1, 0xffffffffffffffcd, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040ac0564020000000000010902240001000000000904000009030001000921000000012229000905810300040000005b302d9e0de3f6213108e391bcfcdd5be6deab83b051fd65e95322cc19fb2284e97c485ee568a76d8b135234911a9cb0cc0d36fb662b5ce0b064fca0c3555ecd30d2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:50 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa68) 09:32:50 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1908) 09:32:50 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1908) 09:32:50 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa80) 09:32:50 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1920) 09:32:50 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa98) [ 1758.308932][ T4035] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 1758.349042][ T9824] usb 6-1: Service connection timeout for: 256 [ 1758.355262][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1758.367506][ T9824] ath9k_htc: Failed to initialize the device [ 1758.374004][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1758.569078][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1758.718927][ T4035] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 1758.729020][ T4134] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1759.009018][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1759.015963][ T4035] usb usb2-port1: attempt power cycle [ 1759.089014][ T4134] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1759.259126][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1759.268229][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.276321][ T4134] usb 6-1: Product: syz [ 1759.280540][ T4134] usb 6-1: Manufacturer: syz [ 1759.285162][ T4134] usb 6-1: SerialNumber: syz [ 1759.330002][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1759.448940][ T4035] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 1759.549018][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1759.719049][ T4035] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1759.829184][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1759.834692][ T4035] usb usb2-port1: unable to enumerate USB device [ 1759.899013][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1760.305174][ T9824] usb 6-1: USB disconnect, device number 73 09:32:52 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x8}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:52 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1920) 09:32:52 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xab0) 09:32:52 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1938) 09:32:52 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x3}}}}]}}, 0x0) 09:32:53 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1938) 09:32:53 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1950) 09:32:53 executing program 1: r0 = syz_usb_connect$hid(0x1, 0xffffffffffffffcd, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040ac0564020000000000010902240001000000000904000009030001000921000000012229000905810300040000005b302d9e0de3f6213108e391bcfcdd5be6deab83b051fd65e95322cc19fb2284e97c485ee568a76d8b135234911a9cb0cc0d36fb662b5ce0b064fca0c3555ecd30d2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x1, 0xffffffffffffffcd, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040ac0564020000000000010902240001000000000904000009030001000921000000012229000905810300040000005b302d9e0de3f6213108e391bcfcdd5be6deab83b051fd65e95322cc19fb2284e97c485ee568a76d8b135234911a9cb0cc0d36fb662b5ce0b064fca0c3555ecd30d2"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) 09:32:53 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xac8) 09:32:53 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xae0) 09:32:53 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1950) 09:32:53 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1968) [ 1761.148926][ T4134] usb 6-1: Service connection timeout for: 256 [ 1761.155157][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1761.166059][ T4134] ath9k_htc: Failed to initialize the device [ 1761.172381][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized [ 1761.528940][ T9824] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1761.528972][ T4035] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1761.798941][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1761.899022][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1761.958975][ T4035] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1762.069122][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1762.078258][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.086341][ T9824] usb 6-1: Product: syz [ 1762.090558][ T9824] usb 6-1: Manufacturer: syz [ 1762.095172][ T9824] usb 6-1: SerialNumber: syz [ 1762.139773][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1762.208994][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1762.214648][ T4035] usb usb2-port1: attempt power cycle [ 1762.629024][ T4035] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1762.708989][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1762.739011][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1762.898928][ T4035] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1762.999097][ T4035] usb 2-1: Invalid ep0 maxpacket: 64 [ 1763.007845][ T4035] usb usb2-port1: unable to enumerate USB device [ 1763.115907][ T4035] usb 6-1: USB disconnect, device number 74 09:32:55 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x9}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:55 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xaf8) 09:32:55 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1980) 09:32:55 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1968) 09:32:55 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x4}}}}]}}, 0x0) 09:32:55 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1980) [ 1763.948986][ T9824] usb 6-1: Service connection timeout for: 256 [ 1763.955203][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1763.967869][ T9824] ath9k_htc: Failed to initialize the device [ 1763.977255][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized 09:32:56 executing program 1: r0 = syz_usb_connect$hid(0x1, 0xffffffffffffffcd, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040ac0564020000000000010902240001000000000904000009030001000921000000012229000905810300040000005b302d9e0de3f6213108e391bcfcdd5be6deab83b051fd65e95322cc19fb2284e97c485ee568a76d8b135234911a9cb0cc0d36fb662b5ce0b064fca0c3555ecd30d2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x1, 0xffffffffffffffcd, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040ac0564020000000000010902240001000000000904000009030001000921000000012229000905810300040000005b302d9e0de3f6213108e391bcfcdd5be6deab83b051fd65e95322cc19fb2284e97c485ee568a76d8b135234911a9cb0cc0d36fb662b5ce0b064fca0c3555ecd30d2"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) 09:32:56 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb10) 09:32:56 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1998) 09:32:56 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1998) 09:32:56 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19b0) 09:32:56 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19b0) [ 1764.368973][ T4035] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1764.548931][ T4134] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 1764.749106][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1764.818959][ T4134] usb 2-1: Invalid ep0 maxpacket: 64 [ 1764.919029][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1764.928192][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.936402][ T4035] usb 6-1: Product: syz [ 1764.940626][ T4035] usb 6-1: Manufacturer: syz [ 1764.945244][ T4035] usb 6-1: SerialNumber: syz [ 1764.988923][ T4134] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 1764.989841][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1765.258955][ T4134] usb 2-1: Invalid ep0 maxpacket: 64 [ 1765.264605][ T4134] usb usb2-port1: attempt power cycle [ 1765.569056][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1765.689054][ T4134] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 1765.799064][ T4134] usb 2-1: Invalid ep0 maxpacket: 64 [ 1765.958926][ T4134] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 1765.975647][ T9824] usb 6-1: USB disconnect, device number 75 [ 1766.049008][ T4134] usb 2-1: Invalid ep0 maxpacket: 64 [ 1766.054758][ T4134] usb usb2-port1: unable to enumerate USB device 09:32:58 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0xa}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:32:58 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb28) 09:32:58 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19c8) 09:32:58 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19c8) 09:32:58 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x5}}}}]}}, 0x0) 09:32:58 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19e0) [ 1766.838996][ T4035] usb 6-1: Service connection timeout for: 256 [ 1766.845225][ T4035] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1766.855311][ T4035] ath9k_htc: Failed to initialize the device [ 1766.861641][ T9824] usb 6-1: ath9k_htc: USB layer deinitialized 09:32:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "b90f"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8, "8ec96f2c"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xbb, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x54, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0xf7, 0x5}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') r1 = syz_usb_connect$cdc_ncm(0x1, 0x9c, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x6, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x6600, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1000, 0x5, 0x2, 0x4, 0x80}, @acm={0x4, 0x24, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x0, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x3f, [0xd07, 0x1, 0x8000, 0x6, 0x3f, 0x71]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0xa6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6f, 0xc, 0x7}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x80, 0x7, 0x0, 0x8, 0x5}, 0xab, &(0x7f0000000240)={0x5, 0xf, 0xab, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x275c483b0e8ce44d, 0x1, 0xff, 0x40, 0x100}, @generic={0x9c, 0x10, 0xb, "c93c2becfda6950267f19f83cf0de0712cfc774c9636ddd4c1894b8fdfb7e6f9a6d269869a9a5fab17d51c14b84f98cd50a3dacb38873b0a126f2dc76bdb385c36ee4e3ef3bc4e3953cab1b4b631cd33873954601dda518d9cd7ec6f726c38e7cd3cd8b6cdbc446e5c33ad3f41262919f635951db0c2da3abd47e9aef26d2da9d5a2a77ab2d2d1fb753cd435b23665f6b614b31f2faba7ce43"}]}, 0xa, [{0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "ccbce7abc66626c0c438c28be085a021b00b29347afe056705ca78"}}, {0xe7, &(0x7f0000001300)=ANY=[@ANYBLOB="e703eb745ef252af3a5cb1f8706fd3f62d9411fcb7ee94e887b88317bdcca5011bcb438d46d9857ac7feeb8f93e092b61b5e6035db7f3e0203a05b159cefe8e55e966914f12e3b13759efc5b06f35a339ac7cd58bd81252970bee773cca38c6d585c38a5d9a6d84e7619589c672b9ac5d2a8342ca108c6cd7147624c0417aca221b8141af295db8ab9872114e187b68828d22ccf533501c367a89225013ac0d12eca589ef7a8ef343778739ce7f2d3608ab6d9bae115ad846d87f4618d2490a69278e765384c4616d382460fde858dc47b2c3afa0a4059d555a95f34b54ba342b20a3ce3a4636eb42057422f5baf8f09bc8b8cb76ae5585db38fbfd39a388b52ae16ac05cd5c182aa015e9cf4e66e9a18cc2420dbfe4c89a0c519b04ab0dc08e3985ad1c7ab2b22e5abf5d365201540497f85abcf487bf7df615320c6157b11bc1f31193080d6cde2291b1f7c961b00f1eaf467416a5f1c922f2b82c925859b72810fe512aaac57d8ee14db2c2218503c4d62845c66b0d3efbe6c82f1f5e12937c1ac3b2322b861ff4fc1ab3cd0193c62610359fdbe2293f9f12c0f67cfcb65d150e6153173c9838527ca4"]}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "d061f7a5d66643573e962ed61b9f6398f273ef3f51e1065e20ef425860f1ad4887188badb9873ed8f035a83ec1f4bf3426ecad8e05a3632a7f8eedd8b552e47699ac0e95cdcca135f34dc61a500a5e98a0387d4401cee9d8cc6e77225d8b5ce7238ea083ac7daf28436c7ee3ae4824af86c655b36331444a2ad2095811a051814ded71dea74ce9024ed5f5a0a667ee36bb8b8e0618bd72"}}, {0xdc, &(0x7f0000000500)=@string={0xdc, 0x3, "254f69f92a3f576c6967b1e31a3dde83d13586df2e2327abeb581339b82d999060edc00e3d948cf2da44a03baacacaf3203ccb6d55475d703d633f429dd260b47e331f07e69f786240a45ee210b4b6dc26124e5abd51214db2543056649730f88e98c911f7988880fc57f9e4d86f6addb7cfc85973066c38e31548d37c3f0bd2068de85ba7074fa69c7e930730771724d87611b487824460755cacf46b81c5d750b974c690309c2882c4b8dac92036a3a1f8e5fe8b45ddbb033f3dce6ef2daf88c8077cb22d162c45ecaa2ef99e4f5a2f12063f261b29c58a17c"}}, {0xda, &(0x7f0000000600)=@string={0xda, 0x3, "36bf2e1e0afa1d20f6994be1f74240021966f1dfc924683f199272fa738f7749275a7068a4537ec99c1e4522761da8bf9c9baf28f0c50fc72f3f51c7fd1bf80c6b199747d3823b351681df861fe19276aebebad0aca8810938186032a0d9e18370a2429756230abd72f8360f0c746e3edb2781ef7b8154ebb72404625c73fd024a9167e0996f6f9fd8d8d5da275d26b8cc31bcf6415b37f8d348512b215282cf185a12ef473bf55af840996ecb218d5d55b8577314dcbc342bdf4d2ff67a6d69c35d3babf858c46607d125f088e6ef76c21fada562d4fb46"}}, {0xcd, &(0x7f0000000700)=@string={0xcd, 0x3, "cef4bd6d84a54e1f1a5eceed3c82916a83950c0421b1132ce30fbd95c0a1153fd1001089264d03e3ceab7a793e491129ba3259592f758122dd3f2109ce849eee4422c2ceeff21b43c440bd144dae603f9ca983c40f42aa7bc63df3b647e120130b4ee91636bef83b85d7e99d67b2eccf76255e658b4fc7e06c8309018acae510ca6a0c647f06d05a212df56f7b17c0ac1ca327b6791149a9868cdf964c7910f381f091cbec0076eae9a6c1ac57208cb64677b0db861bc6edc0c893974bc431e914df8abf482d1f7d047ef0"}}, {0xea, &(0x7f0000000800)=@string={0xea, 0x3, "f267cb1c4dc33997dd5d9c8353cb35a3d9b069f4ee11d4ec777bfb7c35966c83ac11072f2345ea6f8a06b6a9e6b3ba265546ec7d1f6f51b876b7596d84c67897641aa664274b3b7417798e653a261f98da3effd417d7273efb878b170c3b5d1fa947017827aefec41597562dbed9b3a5bd1e26b41e317f2ef6e96e6fbe32504857c90e43f97290ea004250859ad050ee9d0d0a9c5ebc9cc32246e80e557ba5abc203a533deb928df5b2ee78a85f5092e45389aac9525b96dd2db89a3ff9ad6abdd520a6d25ca70e5997f8a6d0e01ee11343b93ec4f11ea79eefc04567bb5919c871029af2e669b29"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44f}}, {0x102, &(0x7f0000000940)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io(r1, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b80)={0x0, 0x30, 0x5f, {0x5f, 0x22, "cf1d79fc8774fe3a15bbd70cd53f4e5d20fa1af503409cf8fcd0f3fec99e39ae567ae1ffa6705cf4c6a0dfea93d08d7ead0dba7c3e54e6511558d0e990947b9a8bd08d0da146f071aa2d3e2ded7771a94c78c2b13eef590b0a85d4ea39"}}, &(0x7f0000000c00)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "d6c1b5941e993ecdf0ba6ffebca6174f547956af70359e1d52d7b027f473b07317426ff0b754ea1a222d0bc8f655dcea38697b629502a0bdb0aec70313d72993c54a63e2b53cf9710731e6e54dcc50324910b82d163a2c7e3b3bdd58f0d2a40334673b7b74c4510f2cb0245b389dc6b981bbc5c3cc908dfe420e4cee01e7f6fa5fd86f0babff3ab8791d159855deab273a4536430897a84e09d7f80eccba0596c81e8bdfd11db1f95cc5cac8d98fd958c178975d20db8c2029fcd74624e8dcaa6729f7f151d13390bd430fb41727ab5bd15db4370ce405ef500d51"}}, &(0x7f0000000d00)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1f, 0x40, 0x359}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1000, 0x0, 0x8, [0x5faf846d3953d84b]}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x7, 0x80, "ba3d332d", "cf2b987c"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x18, 0x1, 0x0, 0xbd, 0x7, 0x8}}}, &(0x7f0000001240)={0x84, &(0x7f0000000e00)={0x20, 0xe, 0x4d, "1d3154c6362ce561fc10afa4093cc728855bbc7d6304b51b79c1aef790ed9212ba9542ec38d070a525a1d6eb34fdd12210dba1f98614befacec2194921e6591fffaef3e8b8d5cb1956539b166f"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x200, 0x81, [0x1e0f]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001000)={0x40, 0xb, 0x2, "7dcc"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0xff4b}, &(0x7f0000001080)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @random="e97d7b69909f"}, &(0x7f0000001100)={0x40, 0x19, 0x2, "6de3"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x47f9}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x80}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:32:59 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19e0) 09:32:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19f8) 09:32:59 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb40) 09:32:59 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x6}}}}]}}, 0x0) 09:32:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a10) [ 1767.219192][ T9824] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1767.579057][ T9824] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1767.608926][ T25] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1767.749182][ T9824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1767.758316][ T9824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.766390][ T9824] usb 6-1: Product: syz [ 1767.770609][ T9824] usb 6-1: Manufacturer: syz [ 1767.775227][ T9824] usb 6-1: SerialNumber: syz [ 1767.819837][ T9824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1767.878923][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1768.029001][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.039994][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1768.052945][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1768.062051][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.082734][ T25] usb 2-1: config 0 descriptor?? [ 1768.389117][ T9824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1768.564351][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00D7/input/input282 [ 1768.750016][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.758633][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.795844][ T4134] usb 6-1: USB disconnect, device number 76 [ 1768.828564][ T25] microsoft 0003:045E:07DA.00D7: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1768.985094][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.993951][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.003950][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.012802][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.022755][ T718] usb 2-1: USB disconnect, device number 117 09:33:01 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0xb}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:01 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x19f8) 09:33:01 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a28) 09:33:01 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb58) 09:33:01 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x7}}}}]}}, 0x0) 09:33:01 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb70) 09:33:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "b90f"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8, "8ec96f2c"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xbb, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x54, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0xf7, 0x5}}}}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') (async) r1 = syz_usb_connect$cdc_ncm(0x1, 0x9c, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x6, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x6600, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1000, 0x5, 0x2, 0x4, 0x80}, @acm={0x4, 0x24, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x0, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x3f, [0xd07, 0x1, 0x8000, 0x6, 0x3f, 0x71]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0xa6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6f, 0xc, 0x7}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x80, 0x7, 0x0, 0x8, 0x5}, 0xab, &(0x7f0000000240)={0x5, 0xf, 0xab, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x275c483b0e8ce44d, 0x1, 0xff, 0x40, 0x100}, @generic={0x9c, 0x10, 0xb, "c93c2becfda6950267f19f83cf0de0712cfc774c9636ddd4c1894b8fdfb7e6f9a6d269869a9a5fab17d51c14b84f98cd50a3dacb38873b0a126f2dc76bdb385c36ee4e3ef3bc4e3953cab1b4b631cd33873954601dda518d9cd7ec6f726c38e7cd3cd8b6cdbc446e5c33ad3f41262919f635951db0c2da3abd47e9aef26d2da9d5a2a77ab2d2d1fb753cd435b23665f6b614b31f2faba7ce43"}]}, 0xa, [{0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "ccbce7abc66626c0c438c28be085a021b00b29347afe056705ca78"}}, {0xe7, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "d061f7a5d66643573e962ed61b9f6398f273ef3f51e1065e20ef425860f1ad4887188badb9873ed8f035a83ec1f4bf3426ecad8e05a3632a7f8eedd8b552e47699ac0e95cdcca135f34dc61a500a5e98a0387d4401cee9d8cc6e77225d8b5ce7238ea083ac7daf28436c7ee3ae4824af86c655b36331444a2ad2095811a051814ded71dea74ce9024ed5f5a0a667ee36bb8b8e0618bd72"}}, {0xdc, &(0x7f0000000500)=@string={0xdc, 0x3, "254f69f92a3f576c6967b1e31a3dde83d13586df2e2327abeb581339b82d999060edc00e3d948cf2da44a03baacacaf3203ccb6d55475d703d633f429dd260b47e331f07e69f786240a45ee210b4b6dc26124e5abd51214db2543056649730f88e98c911f7988880fc57f9e4d86f6addb7cfc85973066c38e31548d37c3f0bd2068de85ba7074fa69c7e930730771724d87611b487824460755cacf46b81c5d750b974c690309c2882c4b8dac92036a3a1f8e5fe8b45ddbb033f3dce6ef2daf88c8077cb22d162c45ecaa2ef99e4f5a2f12063f261b29c58a17c"}}, {0xda, &(0x7f0000000600)=@string={0xda, 0x3, "36bf2e1e0afa1d20f6994be1f74240021966f1dfc924683f199272fa738f7749275a7068a4537ec99c1e4522761da8bf9c9baf28f0c50fc72f3f51c7fd1bf80c6b199747d3823b351681df861fe19276aebebad0aca8810938186032a0d9e18370a2429756230abd72f8360f0c746e3edb2781ef7b8154ebb72404625c73fd024a9167e0996f6f9fd8d8d5da275d26b8cc31bcf6415b37f8d348512b215282cf185a12ef473bf55af840996ecb218d5d55b8577314dcbc342bdf4d2ff67a6d69c35d3babf858c46607d125f088e6ef76c21fada562d4fb46"}}, {0xcd, &(0x7f0000000700)=@string={0xcd, 0x3, "cef4bd6d84a54e1f1a5eceed3c82916a83950c0421b1132ce30fbd95c0a1153fd1001089264d03e3ceab7a793e491129ba3259592f758122dd3f2109ce849eee4422c2ceeff21b43c440bd144dae603f9ca983c40f42aa7bc63df3b647e120130b4ee91636bef83b85d7e99d67b2eccf76255e658b4fc7e06c8309018acae510ca6a0c647f06d05a212df56f7b17c0ac1ca327b6791149a9868cdf964c7910f381f091cbec0076eae9a6c1ac57208cb64677b0db861bc6edc0c893974bc431e914df8abf482d1f7d047ef0"}}, {0xea, &(0x7f0000000800)=@string={0xea, 0x3, "f267cb1c4dc33997dd5d9c8353cb35a3d9b069f4ee11d4ec777bfb7c35966c83ac11072f2345ea6f8a06b6a9e6b3ba265546ec7d1f6f51b876b7596d84c67897641aa664274b3b7417798e653a261f98da3effd417d7273efb878b170c3b5d1fa947017827aefec41597562dbed9b3a5bd1e26b41e317f2ef6e96e6fbe32504857c90e43f97290ea004250859ad050ee9d0d0a9c5ebc9cc32246e80e557ba5abc203a533deb928df5b2ee78a85f5092e45389aac9525b96dd2db89a3ff9ad6abdd520a6d25ca70e5997f8a6d0e01ee11343b93ec4f11ea79eefc04567bb5919c871029af2e669b29"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44f}}, {0x102, &(0x7f0000000940)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io(r1, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b80)={0x0, 0x30, 0x5f, {0x5f, 0x22, "cf1d79fc8774fe3a15bbd70cd53f4e5d20fa1af503409cf8fcd0f3fec99e39ae567ae1ffa6705cf4c6a0dfea93d08d7ead0dba7c3e54e6511558d0e990947b9a8bd08d0da146f071aa2d3e2ded7771a94c78c2b13eef590b0a85d4ea39"}}, &(0x7f0000000c00)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "d6c1b5941e993ecdf0ba6ffebca6174f547956af70359e1d52d7b027f473b07317426ff0b754ea1a222d0bc8f655dcea38697b629502a0bdb0aec70313d72993c54a63e2b53cf9710731e6e54dcc50324910b82d163a2c7e3b3bdd58f0d2a40334673b7b74c4510f2cb0245b389dc6b981bbc5c3cc908dfe420e4cee01e7f6fa5fd86f0babff3ab8791d159855deab273a4536430897a84e09d7f80eccba0596c81e8bdfd11db1f95cc5cac8d98fd958c178975d20db8c2029fcd74624e8dcaa6729f7f151d13390bd430fb41727ab5bd15db4370ce405ef500d51"}}, &(0x7f0000000d00)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1f, 0x40, 0x359}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1000, 0x0, 0x8, [0x5faf846d3953d84b]}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x7, 0x80, "ba3d332d", "cf2b987c"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x18, 0x1, 0x0, 0xbd, 0x7, 0x8}}}, &(0x7f0000001240)={0x84, &(0x7f0000000e00)={0x20, 0xe, 0x4d, "1d3154c6362ce561fc10afa4093cc728855bbc7d6304b51b79c1aef790ed9212ba9542ec38d070a525a1d6eb34fdd12210dba1f98614befacec2194921e6591fffaef3e8b8d5cb1956539b166f"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x200, 0x81, [0x1e0f]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001000)={0x40, 0xb, 0x2, "7dcc"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0xff4b}, &(0x7f0000001080)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @random="e97d7b69909f"}, &(0x7f0000001100)={0x40, 0x19, 0x2, "6de3"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x47f9}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x80}}) (async, rerun: 32) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:33:01 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a10) 09:33:01 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a40) 09:33:01 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xb88) 09:33:01 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a58) 09:33:01 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a28) [ 1769.628932][ T9824] usb 6-1: Service connection timeout for: 256 [ 1769.635183][ T9824] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1769.652396][ T9824] ath9k_htc: Failed to initialize the device [ 1769.658666][ T4134] usb 6-1: ath9k_htc: USB layer deinitialized [ 1769.848960][ T718] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1770.009054][ T4134] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1770.128933][ T718] usb 2-1: Using ep0 maxpacket: 16 [ 1770.259029][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.270037][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1770.282907][ T718] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1770.292012][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.302901][ T718] usb 2-1: config 0 descriptor?? [ 1770.459108][ T4134] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1770.629115][ T4134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1770.638263][ T4134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.646345][ T4134] usb 6-1: Product: syz [ 1770.650649][ T4134] usb 6-1: Manufacturer: syz [ 1770.655264][ T4134] usb 6-1: SerialNumber: syz [ 1770.699803][ T4134] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1770.785050][T21015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.793907][T21015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.858991][ T718] usbhid 2-1:0.0: can't add hid device: -71 [ 1770.864981][ T718] usbhid: probe of 2-1:0.0 failed with error -71 [ 1770.880886][ T718] usb 2-1: USB disconnect, device number 118 [ 1771.269104][ T4134] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1771.684415][ T718] usb 6-1: USB disconnect, device number 77 09:33:04 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0xc}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:04 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xba0) 09:33:04 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a40) 09:33:04 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a70) 09:33:04 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x18}}}}]}}, 0x0) 09:33:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "b90f"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8, "8ec96f2c"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xbb, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x54, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0xf7, 0x5}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') (async) r1 = syz_usb_connect$cdc_ncm(0x1, 0x9c, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x6, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x6600, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1000, 0x5, 0x2, 0x4, 0x80}, @acm={0x4, 0x24, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x0, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x3f, [0xd07, 0x1, 0x8000, 0x6, 0x3f, 0x71]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0xa6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6f, 0xc, 0x7}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x80, 0x7, 0x0, 0x8, 0x5}, 0xab, &(0x7f0000000240)={0x5, 0xf, 0xab, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x275c483b0e8ce44d, 0x1, 0xff, 0x40, 0x100}, @generic={0x9c, 0x10, 0xb, "c93c2becfda6950267f19f83cf0de0712cfc774c9636ddd4c1894b8fdfb7e6f9a6d269869a9a5fab17d51c14b84f98cd50a3dacb38873b0a126f2dc76bdb385c36ee4e3ef3bc4e3953cab1b4b631cd33873954601dda518d9cd7ec6f726c38e7cd3cd8b6cdbc446e5c33ad3f41262919f635951db0c2da3abd47e9aef26d2da9d5a2a77ab2d2d1fb753cd435b23665f6b614b31f2faba7ce43"}]}, 0xa, [{0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "ccbce7abc66626c0c438c28be085a021b00b29347afe056705ca78"}}, {0xe7, &(0x7f0000001300)=ANY=[@ANYBLOB="e703eb745ef252af3a5cb1f8706fd3f62d9411fcb7ee94e887b88317bdcca5011bcb438d46d9857ac7feeb8f93e092b61b5e6035db7f3e0203a05b159cefe8e55e966914f12e3b13759efc5b06f35a339ac7cd58bd81252970bee773cca38c6d585c38a5d9a6d84e7619589c672b9ac5d2a8342ca108c6cd7147624c0417aca221b8141af295db8ab9872114e187b68828d22ccf533501c367a89225013ac0d12eca589ef7a8ef343778739ce7f2d3608ab6d9bae115ad846d87f4618d2490a69278e765384c4616d382460fde858dc47b2c3afa0a4059d555a95f34b54ba342b20a3ce3a4636eb42057422f5baf8f09bc8b8cb76ae5585db38fbfd39a388b52ae16ac05cd5c182aa015e9cf4e66e9a18cc2420dbfe4c89a0c519b04ab0dc08e3985ad1c7ab2b22e5abf5d365201540497f85abcf487bf7df615320c6157b11bc1f31193080d6cde2291b1f7c961b00f1eaf467416a5f1c922f2b82c925859b72810fe512aaac57d8ee14db2c2218503c4d62845c66b0d3efbe6c82f1f5e12937c1ac3b2322b861ff4fc1ab3cd0193c62610359fdbe2293f9f12c0f67cfcb65d150e6153173c9838527ca4"]}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "d061f7a5d66643573e962ed61b9f6398f273ef3f51e1065e20ef425860f1ad4887188badb9873ed8f035a83ec1f4bf3426ecad8e05a3632a7f8eedd8b552e47699ac0e95cdcca135f34dc61a500a5e98a0387d4401cee9d8cc6e77225d8b5ce7238ea083ac7daf28436c7ee3ae4824af86c655b36331444a2ad2095811a051814ded71dea74ce9024ed5f5a0a667ee36bb8b8e0618bd72"}}, {0xdc, &(0x7f0000000500)=@string={0xdc, 0x3, "254f69f92a3f576c6967b1e31a3dde83d13586df2e2327abeb581339b82d999060edc00e3d948cf2da44a03baacacaf3203ccb6d55475d703d633f429dd260b47e331f07e69f786240a45ee210b4b6dc26124e5abd51214db2543056649730f88e98c911f7988880fc57f9e4d86f6addb7cfc85973066c38e31548d37c3f0bd2068de85ba7074fa69c7e930730771724d87611b487824460755cacf46b81c5d750b974c690309c2882c4b8dac92036a3a1f8e5fe8b45ddbb033f3dce6ef2daf88c8077cb22d162c45ecaa2ef99e4f5a2f12063f261b29c58a17c"}}, {0xda, &(0x7f0000000600)=@string={0xda, 0x3, "36bf2e1e0afa1d20f6994be1f74240021966f1dfc924683f199272fa738f7749275a7068a4537ec99c1e4522761da8bf9c9baf28f0c50fc72f3f51c7fd1bf80c6b199747d3823b351681df861fe19276aebebad0aca8810938186032a0d9e18370a2429756230abd72f8360f0c746e3edb2781ef7b8154ebb72404625c73fd024a9167e0996f6f9fd8d8d5da275d26b8cc31bcf6415b37f8d348512b215282cf185a12ef473bf55af840996ecb218d5d55b8577314dcbc342bdf4d2ff67a6d69c35d3babf858c46607d125f088e6ef76c21fada562d4fb46"}}, {0xcd, &(0x7f0000000700)=@string={0xcd, 0x3, "cef4bd6d84a54e1f1a5eceed3c82916a83950c0421b1132ce30fbd95c0a1153fd1001089264d03e3ceab7a793e491129ba3259592f758122dd3f2109ce849eee4422c2ceeff21b43c440bd144dae603f9ca983c40f42aa7bc63df3b647e120130b4ee91636bef83b85d7e99d67b2eccf76255e658b4fc7e06c8309018acae510ca6a0c647f06d05a212df56f7b17c0ac1ca327b6791149a9868cdf964c7910f381f091cbec0076eae9a6c1ac57208cb64677b0db861bc6edc0c893974bc431e914df8abf482d1f7d047ef0"}}, {0xea, &(0x7f0000000800)=@string={0xea, 0x3, "f267cb1c4dc33997dd5d9c8353cb35a3d9b069f4ee11d4ec777bfb7c35966c83ac11072f2345ea6f8a06b6a9e6b3ba265546ec7d1f6f51b876b7596d84c67897641aa664274b3b7417798e653a261f98da3effd417d7273efb878b170c3b5d1fa947017827aefec41597562dbed9b3a5bd1e26b41e317f2ef6e96e6fbe32504857c90e43f97290ea004250859ad050ee9d0d0a9c5ebc9cc32246e80e557ba5abc203a533deb928df5b2ee78a85f5092e45389aac9525b96dd2db89a3ff9ad6abdd520a6d25ca70e5997f8a6d0e01ee11343b93ec4f11ea79eefc04567bb5919c871029af2e669b29"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44f}}, {0x102, &(0x7f0000000940)=@string={0x102, 0x3, "d13f831cf41d629a70fbfdaa192a4a51caa756387e02fecc25868828dc4be02dcb484f8df005d0ed01685af64b0145b04d1fa7cf1693c367f8d0e6335a9bcee01f0e0979b4accb08f9765682bf88954db36da44a512b48f9d1ee5241cc18a3b9b79d767c825d2bbc536ee95e7abf8e63fccc5d29cf2f9b53d844bf42ec888d1623b46b3c84e9aabc6d5cbc3590fea32da40d9c763ede2590cae5b4eafd9e86174b867cc79ec0b0045f103dc21d61bb7132190ebd0fd0c8a732037dcff691e47cc3142f592cbc0cad06a861c8ce0633e97791f3db0aa6dc4b11fd93728439c4f0ff14d95d17e6b4a9d93d9fbabd622dadddbf58fb92bb653f2bf0bb9e5dd5a4a8"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io(r1, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b80)={0x0, 0x30, 0x5f, {0x5f, 0x22, "cf1d79fc8774fe3a15bbd70cd53f4e5d20fa1af503409cf8fcd0f3fec99e39ae567ae1ffa6705cf4c6a0dfea93d08d7ead0dba7c3e54e6511558d0e990947b9a8bd08d0da146f071aa2d3e2ded7771a94c78c2b13eef590b0a85d4ea39"}}, &(0x7f0000000c00)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "d6c1b5941e993ecdf0ba6ffebca6174f547956af70359e1d52d7b027f473b07317426ff0b754ea1a222d0bc8f655dcea38697b629502a0bdb0aec70313d72993c54a63e2b53cf9710731e6e54dcc50324910b82d163a2c7e3b3bdd58f0d2a40334673b7b74c4510f2cb0245b389dc6b981bbc5c3cc908dfe420e4cee01e7f6fa5fd86f0babff3ab8791d159855deab273a4536430897a84e09d7f80eccba0596c81e8bdfd11db1f95cc5cac8d98fd958c178975d20db8c2029fcd74624e8dcaa6729f7f151d13390bd430fb41727ab5bd15db4370ce405ef500d51"}}, &(0x7f0000000d00)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1f, 0x40, 0x359}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1000, 0x0, 0x8, [0x5faf846d3953d84b]}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x7, 0x80, "ba3d332d", "cf2b987c"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x18, 0x1, 0x0, 0xbd, 0x7, 0x8}}}, &(0x7f0000001240)={0x84, &(0x7f0000000e00)={0x20, 0xe, 0x4d, "1d3154c6362ce561fc10afa4093cc728855bbc7d6304b51b79c1aef790ed9212ba9542ec38d070a525a1d6eb34fdd12210dba1f98614befacec2194921e6591fffaef3e8b8d5cb1956539b166f"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x200, 0x81, [0x1e0f]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001000)={0x40, 0xb, 0x2, "7dcc"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0xff4b}, &(0x7f0000001080)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @random="e97d7b69909f"}, &(0x7f0000001100)={0x40, 0x19, 0x2, "6de3"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x47f9}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x80}}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:33:04 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbb8) 09:33:04 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a58) 09:33:04 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a88) 09:33:04 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbd0) 09:33:04 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1aa0) 09:33:04 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a70) [ 1772.488898][ T25] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1772.518974][ T4134] usb 6-1: Service connection timeout for: 256 [ 1772.525186][ T4134] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1772.533822][ T4134] ath9k_htc: Failed to initialize the device [ 1772.543039][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1772.738936][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1772.859016][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.870027][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1772.882914][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1772.892019][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.909086][ T718] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1772.909936][ T25] usb 2-1: config 0 descriptor?? [ 1773.329022][ T718] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1773.380559][T21042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.390590][T21042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.400318][T21043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.411344][T21043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.419305][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00D8/input/input283 [ 1773.549117][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1773.558243][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.566342][ T718] usb 6-1: Product: syz [ 1773.570541][ T718] usb 6-1: Manufacturer: syz [ 1773.575149][ T718] usb 6-1: SerialNumber: syz [ 1773.659802][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1773.697631][ T25] microsoft 0003:045E:07DA.00D8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1773.711401][ T25] usb 2-1: USB disconnect, device number 119 [ 1774.399053][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1774.805316][ T25] usb 6-1: USB disconnect, device number 78 09:33:07 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0xf}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:07 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a88) 09:33:07 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ab8) 09:33:07 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xbe8) 09:33:07 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 09:33:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x10, 0xe8, {0xe8, 0xa, "42f791b0a7dbeaf14427e0b597617cf80bef7bd57f28ef1a4b7dd59c2027d5baf3673c8e1061173016be75c545865d6a87c39d1c574720e6bc9ff17f5f34ee0fb821bfa1c7bf3e610e6c2b03c0c37764e21513d175184c8e4a1440ad3ec58a285c52131dedf80044e789f3af8aae7e5f3de4b327ba7422971d15db487c418027dade60402dbb368cd35b41daf45580b4ea335857cc5c0b29f9ebd6dddc34c0ad25f399aaa44389c0f919157baaa946cee32d6c6e8f344fc1362e6dff09afbff5cd4a4034847652fd520dbcb34bbbe06f6912121e4f8587f0df813d1830b9e00f742be9ef6498"}}, &(0x7f0000000100)={0x0, 0x3, 0x12, @string={0x12, 0x3, "067041b548ef169847d1bd98340cd194"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e59b5e9d"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff7f, 0x4, 0x1, {0x22, 0x787}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x5d, "7b24ab6e079b99447f350c5057682228164ac90eec88ae6d5a74c11f026dbcbefb35c04c502ecfc76e7184162e365e997b2a4fcb87cc361c37dcb7fa499c499396b33ec4342b7bb896655515347fce70172f4d1339dbe4ce661fbe23d1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0xf8, "eeeebc20c34d87edfbe406213b998b73c63642ec8b726f33d3b944200ed732ec1d159d74f94ff202cd85e83a93b64d73805c1b2c716cce46c8d5a4219c3d983e4481a2a4ac82d0df57c916af500d132e03aab9637b323d638650179b0753308024393cc6562046c0e03def9d06026f76c0bbb2f777c8e434eb01148e3366f01318d46b8d436935939e9c18c535287e08a73cb170bdf4944a1a9f52ee078d669b91e1223278ab1f31075859db8a26dbb633d23aa1dbe6e1513a892e803f1e024fac1146949d7392963c445b1e4a9ded9a74317ab333369c5225857a3372aa473dcf2a5f5bbe58dc3a9b2ebbee18d4edad76fbf11ec0f07664"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) 09:33:07 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ad0) 09:33:07 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1aa0) 09:33:07 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc00) 09:33:07 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ae8) 09:33:07 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b00) 09:33:07 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ab8) [ 1775.598974][ T4035] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1775.638920][ T718] usb 6-1: Service connection timeout for: 256 [ 1775.645183][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1775.655788][ T718] ath9k_htc: Failed to initialize the device [ 1775.662250][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 1775.959083][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.970089][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.979909][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1775.992777][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1776.001886][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.031673][ T4035] usb 2-1: config 0 descriptor?? [ 1776.079077][ T25] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1776.439023][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1776.510889][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.518353][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.525843][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.533299][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.540767][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.548184][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.555646][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.563123][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.570581][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.578001][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.585482][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.592940][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.600396][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.607813][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.615281][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.622760][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.630220][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.637640][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.645120][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.652579][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.660053][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.667499][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.674980][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.682437][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.689913][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.697332][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.704856][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.712314][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.719828][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.727250][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.734738][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.742199][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.749679][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.757106][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.764589][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.772049][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.779530][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.786952][ T4035] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1776.799399][ T4035] plantronics 0003:047F:FFFF.00D9: No inputs registered, leaving [ 1776.829254][ T4035] plantronics 0003:047F:FFFF.00D9: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1776.879022][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1776.888117][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.896218][ T25] usb 6-1: Product: syz [ 1776.900452][ T25] usb 6-1: Manufacturer: syz [ 1776.905070][ T25] usb 6-1: SerialNumber: syz [ 1776.949740][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1777.559022][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1777.965249][ T4035] usb 6-1: USB disconnect, device number 79 [ 1778.336819][ T72] usb 2-1: USB disconnect, device number 120 09:33:10 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x18}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:10 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc18) 09:33:10 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b18) 09:33:10 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ad0) 09:33:10 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x2}}}}]}}, 0x0) 09:33:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x10, 0xe8, {0xe8, 0xa, "42f791b0a7dbeaf14427e0b597617cf80bef7bd57f28ef1a4b7dd59c2027d5baf3673c8e1061173016be75c545865d6a87c39d1c574720e6bc9ff17f5f34ee0fb821bfa1c7bf3e610e6c2b03c0c37764e21513d175184c8e4a1440ad3ec58a285c52131dedf80044e789f3af8aae7e5f3de4b327ba7422971d15db487c418027dade60402dbb368cd35b41daf45580b4ea335857cc5c0b29f9ebd6dddc34c0ad25f399aaa44389c0f919157baaa946cee32d6c6e8f344fc1362e6dff09afbff5cd4a4034847652fd520dbcb34bbbe06f6912121e4f8587f0df813d1830b9e00f742be9ef6498"}}, &(0x7f0000000100)={0x0, 0x3, 0x12, @string={0x12, 0x3, "067041b548ef169847d1bd98340cd194"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e59b5e9d"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff7f, 0x4, 0x1, {0x22, 0x787}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x5d, "7b24ab6e079b99447f350c5057682228164ac90eec88ae6d5a74c11f026dbcbefb35c04c502ecfc76e7184162e365e997b2a4fcb87cc361c37dcb7fa499c499396b33ec4342b7bb896655515347fce70172f4d1339dbe4ce661fbe23d1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0xf8, "eeeebc20c34d87edfbe406213b998b73c63642ec8b726f33d3b944200ed732ec1d159d74f94ff202cd85e83a93b64d73805c1b2c716cce46c8d5a4219c3d983e4481a2a4ac82d0df57c916af500d132e03aab9637b323d638650179b0753308024393cc6562046c0e03def9d06026f76c0bbb2f777c8e434eb01148e3366f01318d46b8d436935939e9c18c535287e08a73cb170bdf4944a1a9f52ee078d669b91e1223278ab1f31075859db8a26dbb633d23aa1dbe6e1513a892e803f1e024fac1146949d7392963c445b1e4a9ded9a74317ab333369c5225857a3372aa473dcf2a5f5bbe58dc3a9b2ebbee18d4edad76fbf11ec0f07664"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x10, 0xe8, {0xe8, 0xa, "42f791b0a7dbeaf14427e0b597617cf80bef7bd57f28ef1a4b7dd59c2027d5baf3673c8e1061173016be75c545865d6a87c39d1c574720e6bc9ff17f5f34ee0fb821bfa1c7bf3e610e6c2b03c0c37764e21513d175184c8e4a1440ad3ec58a285c52131dedf80044e789f3af8aae7e5f3de4b327ba7422971d15db487c418027dade60402dbb368cd35b41daf45580b4ea335857cc5c0b29f9ebd6dddc34c0ad25f399aaa44389c0f919157baaa946cee32d6c6e8f344fc1362e6dff09afbff5cd4a4034847652fd520dbcb34bbbe06f6912121e4f8587f0df813d1830b9e00f742be9ef6498"}}, &(0x7f0000000100)={0x0, 0x3, 0x12, @string={0x12, 0x3, "067041b548ef169847d1bd98340cd194"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e59b5e9d"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff7f, 0x4, 0x1, {0x22, 0x787}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x5d, "7b24ab6e079b99447f350c5057682228164ac90eec88ae6d5a74c11f026dbcbefb35c04c502ecfc76e7184162e365e997b2a4fcb87cc361c37dcb7fa499c499396b33ec4342b7bb896655515347fce70172f4d1339dbe4ce661fbe23d1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0xf8, "eeeebc20c34d87edfbe406213b998b73c63642ec8b726f33d3b944200ed732ec1d159d74f94ff202cd85e83a93b64d73805c1b2c716cce46c8d5a4219c3d983e4481a2a4ac82d0df57c916af500d132e03aab9637b323d638650179b0753308024393cc6562046c0e03def9d06026f76c0bbb2f777c8e434eb01148e3366f01318d46b8d436935939e9c18c535287e08a73cb170bdf4944a1a9f52ee078d669b91e1223278ab1f31075859db8a26dbb633d23aa1dbe6e1513a892e803f1e024fac1146949d7392963c445b1e4a9ded9a74317ab333369c5225857a3372aa473dcf2a5f5bbe58dc3a9b2ebbee18d4edad76fbf11ec0f07664"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) (async) 09:33:10 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b30) 09:33:10 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ae8) 09:33:10 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc30) 09:33:10 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b48) 09:33:10 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc48) 09:33:10 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b00) [ 1778.828979][ T25] usb 6-1: Service connection timeout for: 256 [ 1778.835239][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1778.844386][ T25] ath9k_htc: Failed to initialize the device [ 1778.850877][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1778.909167][ T72] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1779.208999][ T4035] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1779.269005][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.280039][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.289847][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1779.302716][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1779.311956][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.324888][ T72] usb 2-1: config 0 descriptor?? [ 1779.569066][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1779.739057][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1779.748149][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.756259][ T4035] usb 6-1: Product: syz [ 1779.760486][ T4035] usb 6-1: Manufacturer: syz [ 1779.765101][ T4035] usb 6-1: SerialNumber: syz [ 1779.810925][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.818385][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.825862][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.833322][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.840781][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.848201][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.855660][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.863130][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.870583][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.878003][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.885480][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.892934][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.900412][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.907829][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.915313][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.922767][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.930246][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.937660][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.945127][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.952575][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.960043][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.967456][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.974942][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.982399][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.989876][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1779.997298][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.004769][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.012222][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.019696][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.027105][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.034571][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.042021][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.049491][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.056904][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.064375][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.071825][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.079295][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.086705][ T72] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1780.094951][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1780.110884][ T72] plantronics 0003:047F:FFFF.00DA: No inputs registered, leaving [ 1780.120717][ T72] plantronics 0003:047F:FFFF.00DA: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1780.372233][ T718] usb 2-1: USB disconnect, device number 121 [ 1780.689003][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1781.095628][ T4035] usb 6-1: USB disconnect, device number 80 09:33:13 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x3e}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:13 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc60) 09:33:13 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b18) 09:33:13 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b60) 09:33:13 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x3}}}}]}}, 0x0) 09:33:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x10, 0xe8, {0xe8, 0xa, "42f791b0a7dbeaf14427e0b597617cf80bef7bd57f28ef1a4b7dd59c2027d5baf3673c8e1061173016be75c545865d6a87c39d1c574720e6bc9ff17f5f34ee0fb821bfa1c7bf3e610e6c2b03c0c37764e21513d175184c8e4a1440ad3ec58a285c52131dedf80044e789f3af8aae7e5f3de4b327ba7422971d15db487c418027dade60402dbb368cd35b41daf45580b4ea335857cc5c0b29f9ebd6dddc34c0ad25f399aaa44389c0f919157baaa946cee32d6c6e8f344fc1362e6dff09afbff5cd4a4034847652fd520dbcb34bbbe06f6912121e4f8587f0df813d1830b9e00f742be9ef6498"}}, &(0x7f0000000100)={0x0, 0x3, 0x12, @string={0x12, 0x3, "067041b548ef169847d1bd98340cd194"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e59b5e9d"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff7f, 0x4, 0x1, {0x22, 0x787}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x5d, "7b24ab6e079b99447f350c5057682228164ac90eec88ae6d5a74c11f026dbcbefb35c04c502ecfc76e7184162e365e997b2a4fcb87cc361c37dcb7fa499c499396b33ec4342b7bb896655515347fce70172f4d1339dbe4ce661fbe23d1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0xf8, "eeeebc20c34d87edfbe406213b998b73c63642ec8b726f33d3b944200ed732ec1d159d74f94ff202cd85e83a93b64d73805c1b2c716cce46c8d5a4219c3d983e4481a2a4ac82d0df57c916af500d132e03aab9637b323d638650179b0753308024393cc6562046c0e03def9d06026f76c0bbb2f777c8e434eb01148e3366f01318d46b8d436935939e9c18c535287e08a73cb170bdf4944a1a9f52ee078d669b91e1223278ab1f31075859db8a26dbb633d23aa1dbe6e1513a892e803f1e024fac1146949d7392963c445b1e4a9ded9a74317ab333369c5225857a3372aa473dcf2a5f5bbe58dc3a9b2ebbee18d4edad76fbf11ec0f07664"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x40, 0x10, 0xe8, {0xe8, 0xa, "42f791b0a7dbeaf14427e0b597617cf80bef7bd57f28ef1a4b7dd59c2027d5baf3673c8e1061173016be75c545865d6a87c39d1c574720e6bc9ff17f5f34ee0fb821bfa1c7bf3e610e6c2b03c0c37764e21513d175184c8e4a1440ad3ec58a285c52131dedf80044e789f3af8aae7e5f3de4b327ba7422971d15db487c418027dade60402dbb368cd35b41daf45580b4ea335857cc5c0b29f9ebd6dddc34c0ad25f399aaa44389c0f919157baaa946cee32d6c6e8f344fc1362e6dff09afbff5cd4a4034847652fd520dbcb34bbbe06f6912121e4f8587f0df813d1830b9e00f742be9ef6498"}}, &(0x7f0000000100)={0x0, 0x3, 0x12, @string={0x12, 0x3, "067041b548ef169847d1bd98340cd194"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e59b5e9d"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff7f, 0x4, 0x1, {0x22, 0x787}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x5d, "7b24ab6e079b99447f350c5057682228164ac90eec88ae6d5a74c11f026dbcbefb35c04c502ecfc76e7184162e365e997b2a4fcb87cc361c37dcb7fa499c499396b33ec4342b7bb896655515347fce70172f4d1339dbe4ce661fbe23d1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0xf8, "eeeebc20c34d87edfbe406213b998b73c63642ec8b726f33d3b944200ed732ec1d159d74f94ff202cd85e83a93b64d73805c1b2c716cce46c8d5a4219c3d983e4481a2a4ac82d0df57c916af500d132e03aab9637b323d638650179b0753308024393cc6562046c0e03def9d06026f76c0bbb2f777c8e434eb01148e3366f01318d46b8d436935939e9c18c535287e08a73cb170bdf4944a1a9f52ee078d669b91e1223278ab1f31075859db8a26dbb633d23aa1dbe6e1513a892e803f1e024fac1146949d7392963c445b1e4a9ded9a74317ab333369c5225857a3372aa473dcf2a5f5bbe58dc3a9b2ebbee18d4edad76fbf11ec0f07664"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) (async) 09:33:13 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b78) 09:33:13 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc78) 09:33:13 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b30) 09:33:13 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc90) 09:33:13 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b48) 09:33:13 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b90) [ 1781.898962][ T25] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1781.948947][ T72] usb 6-1: Service connection timeout for: 256 [ 1781.955218][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1781.963941][ T72] ath9k_htc: Failed to initialize the device [ 1781.970421][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1782.259176][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.270141][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.279956][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1782.292809][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1782.301915][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.314819][ T25] usb 2-1: config 0 descriptor?? [ 1782.379091][ T4035] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1782.739115][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1782.800771][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.808230][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.816004][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.823453][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.830905][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.838340][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.845811][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.853266][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.860744][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.868156][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.875635][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.883093][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.890572][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.898075][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.905536][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.913073][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.920538][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.927978][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.935480][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.942938][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.950392][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.957804][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.965272][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.972721][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.980195][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.987611][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1782.995096][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.002562][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.010054][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.017479][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.024953][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.032403][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.039882][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.047296][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.054780][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.062232][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.069704][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.077119][ T25] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1783.086593][ T25] plantronics 0003:047F:FFFF.00DB: No inputs registered, leaving [ 1783.096994][ T25] plantronics 0003:047F:FFFF.00DB: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1783.169195][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1783.178308][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.186415][ T4035] usb 6-1: Product: syz [ 1783.190651][ T4035] usb 6-1: Manufacturer: syz [ 1783.195273][ T4035] usb 6-1: SerialNumber: syz [ 1783.239774][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1783.393361][ T72] usb 2-1: USB disconnect, device number 122 [ 1783.809049][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1784.215647][ T718] usb 6-1: USB disconnect, device number 81 09:33:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xca8) 09:33:16 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b60) 09:33:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ba8) 09:33:16 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x4}}}}]}}, 0x0) 09:33:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47c, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x7, 0x9f, 0xc5, 0x8, 0xc45, 0x628f, 0x98a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46a, 0x2, 0x80, 0x7, 0x20, 0x1, [{{0x9, 0x4, 0x8e, 0x40, 0x3, 0xef, 0xfa, 0x1, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a3d2"}, {0x5, 0x24, 0x0, 0x7b}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x784, 0x7, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xc1, 0x3a}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x8a, 0x7f, 0x7f, 0x7fff, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0xff, 0x8, 0x85, [@generic={0x61, 0x2, "340ab98550c4d1605717314de169419dd0f8f8bfb94aeaf216cd49ce0bbadcd24c8bc157d343595d90111181cc1054b1639379c151ddadafbf398ba7db8d84a4ca7f8ee06e5ed82e2cbb9107da11a4642914f1176c5ac5b3193e2af8e3058d"}]}}, {{0x9, 0x5, 0x4, 0x1c, 0x10, 0x7f, 0x8c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x99}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x5, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x61, 0x2, 0xd, 0x75, 0x9a, 0xc0, 0x9e, [@generic={0xc4, 0x23, "562a456101f33a1a4a8b04f6140ba39b1152264a041410407ff900165bf40f7f45107e5967de5e28fedf10638f35041469358f0368beff856d1009e8dde6dc4e77cb07d84ee0ab2c6b12093fcd15ef0ccbc583ace601a3cdac449440e3ca03605a7c9e5b9a8d8cb9e6689c9d7d0d3297022178d11bae761dd6eeb0674eef7d2b005c842a57e284abc7916a4205dbe298174877afe16fb6ae1fa9aa865adbebdb2eac71d4335713725b59cb8da738593591f6fb6d2dda6773cb28eacea2daf7a793a6"}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "55658d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff01, 0x6, 0x80}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xda04, 0xffff, 0x6, 0x5, 0x8001, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x73}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x5, 0x4, 0x10, 0x2, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0xe, 0x482c103a6ca2bcc5, 0x8, 0x9, 0x5, 0x6, [@generic={0x36, 0x15, "72be2233d788916d95ab24f3d85d2a24e40356b89047d6820256bdfd3b53e9283967c939c30a5b6703dc0d68b8d6856dbda41392"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x70, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x5, 0x3}, @generic={0x4f, 0x30, "bc70024005812a9fcf9c44e71085f47d5d9a617d211019934728e1a7476d231e9e7d46138152b1b8a05b28eea8e8baa28085bb4f490bd615c1cf75917168897ed065e2a4c77ce9c384efed9aee"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x4, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x40, 0xde, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x6}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8fcde1b65a363343, 0x2, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x66, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xee, 0xee, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x53, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7, 0xff, 0x6, [@generic={0xfb, 0x2, "44a9cb1483fd23ba7046f317f97adbf66aebbf8da048cde908c8860e017da3f7f546b187bc75365dd5dff69499d081a2f05a69169570547f59b7a691a5500a489460b75b3c45fdde34e0f59948ab89445907c28f49491a3cd4edfe6686b718ab8576001e5388158da940d7a79b771ed5f99b036f15d5a1e175f40044ab70bf692f6d55e3bc728cce35f03f933fea45d5795f7f88371f0581087f2222f334ad30221c783d2f1fd95fd5cd9c857e4012e8ed0cf6a0dab2f9bbe318366c1a9ead7f157fe0db919815961a850b07e264d9a8e3535384657bf16a636db90e0b38693966630a34ecf3aebfd91d2617867d0b27a8ab64e3f73e46db0b"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x1d2ab2450c62993f, 0xf7, 0x2, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe0, 0x7}]}}, {{0x9, 0x5, 0x1, 0x8, 0x260, 0x3, 0x53, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1f, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xcad3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x2, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x200}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x80, 0xff, 0x1f, [@generic={0x3b, 0x6, "d056bd392bc3de9901d46cfa56adb9b18e3d5bbbbf1faec48c697c8a68ae8a1cc3c43931c7b3f856d566debf498c8148b50301c679efafde2a"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x1, 0x20, 0x8, 0x9}, 0x1f, &(0x7f0000000140)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x87, 0x1, 0x8000, 0xf00, 0x7fff, [0x7]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc4db}}, {0x28, &(0x7f0000000680)=@string={0x28, 0x3, "c2258fd604844ef7cb18a7d2791da0a78e57ae22b70ab1da999d3dfd36dd11e0b630e1b22f20"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x814}}, {0x91, &(0x7f0000000700)=@string={0x91, 0x3, "06f69478503798507cbc0303796f58c4302c8bd5b0411face9c179f1f7886bab4a2174f12c394c710c7ffb6a4440223259debe3cce965d307e4a3212cef1fd3a20666f8088fbe74864e66ba9f9dcedaf4e7c80865468f3a5e8098363867a72537581eba8d6d851a34651f908c001ceb1540389337d6c9be6f48f264990be69db48dc744671f7d4c865bbe643c0b04a"}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x0, 0x22, 0x8a, {0x8a, 0x6, "9ae82ddc01393b808e0d17d0638432a305b4040b799879b58619f7ce293412ae116df7354201ef34840bce4f9e72f666f8ee9fb4388fc8530821ec18fb5d8a2a72772bb1a207abef20c7114c07597602998cf98d9ec59a79f84ef1c8f856b0ed8b1f86af5e585ea2979b81b76baf6d09c028cd7c9d181ef9d6362f1fc1516e26814db4e5659fea7f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000940)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "bda51cba"}, @local=@item_012={0x2, 0x2, 0x4, "a996"}, @local=@item_4={0x3, 0x2, 0x0, "38c35f6e"}, @main=@item_012={0x1, 0x0, 0x9, "97"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe3, 0x80, 0x1, {0x22, 0x5b1}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x40, 0x7, 0x9f, "6ba17f73e0f24a403d56288dbf092baf79aa25da541b4e7e6c6224f21338aadc6d76b6853876d018aeb54afd98b708060541d5ee4ded8f4ff6451ade8dd7faeb67aa3a1897848b12a60e8706f6adf24128189e0f9388084e8508c7aa9db23d5f496bc298dc171033da0ce7cfe077e049f381da9564ec2a67ed5aff54bf896a5a97eca875499bcf0840e2369a8df3aecbfa9c092e88389bb8c859d50198441f"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000b40)={0x20, 0x1, 0xc4, "f116d0412ebaddb4347e324185aff740754105b19c6eadf9a754665276cc6ec0ed3e0e8cf48650f3e3aaec8cfc7b7ba5e9d59346ce5007abd13e7e97b9b0fd6366ab473cad4d46fb7b8079189e4b4b2d94ff5dcc6b65c5b0249105429bf97f9487d280c8ff12f3a659b23b699b354f52a866a96684e8a609436aac13d361ff857a12fa6146bcbc0becaeea656053c66f7af0d615402a7c36d2aaf0c6189016a5840641fc4d005cccdcb1872a646b876c13fdc27914c8f5c6b4b7030540f25fc38d3fb114"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x20}}) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x67, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000040)={0xfffffe89, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 09:33:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1bc0) 09:33:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcc0) 09:33:16 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b78) 09:33:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1bd8) 09:33:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcd8) 09:33:16 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b90) 09:33:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1bf0) 09:33:16 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ba8) 09:33:16 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xcf0) [ 1785.048930][ T4134] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1785.068916][ T4035] usb 6-1: Service connection timeout for: 256 [ 1785.075137][ T4035] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1785.083778][ T4035] ath9k_htc: Failed to initialize the device [ 1785.091825][ T718] usb 6-1: ath9k_htc: USB layer deinitialized 09:33:17 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x5}}}}]}}, 0x0) [ 1785.469197][ T718] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1785.489351][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.500345][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.510240][ T4134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1785.523096][ T4134] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1785.532206][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.549894][ T4134] usb 2-1: config 0 descriptor?? [ 1785.919080][ T718] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1786.039986][T21136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.048585][T21136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.057924][T21136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.066705][T21136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.109166][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1786.118347][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.126424][ T718] usb 6-1: Product: syz [ 1786.130667][ T718] usb 6-1: Manufacturer: syz [ 1786.135286][ T718] usb 6-1: SerialNumber: syz [ 1786.189232][ T4134] usbhid 2-1:0.0: can't add hid device: -71 [ 1786.195257][ T4134] usbhid: probe of 2-1:0.0 failed with error -71 [ 1786.202827][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1786.217327][ T4134] usb 2-1: USB disconnect, device number 123 09:33:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47c, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x7, 0x9f, 0xc5, 0x8, 0xc45, 0x628f, 0x98a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46a, 0x2, 0x80, 0x7, 0x20, 0x1, [{{0x9, 0x4, 0x8e, 0x40, 0x3, 0xef, 0xfa, 0x1, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a3d2"}, {0x5, 0x24, 0x0, 0x7b}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x784, 0x7, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xc1, 0x3a}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x8a, 0x7f, 0x7f, 0x7fff, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0xff, 0x8, 0x85, [@generic={0x61, 0x2, "340ab98550c4d1605717314de169419dd0f8f8bfb94aeaf216cd49ce0bbadcd24c8bc157d343595d90111181cc1054b1639379c151ddadafbf398ba7db8d84a4ca7f8ee06e5ed82e2cbb9107da11a4642914f1176c5ac5b3193e2af8e3058d"}]}}, {{0x9, 0x5, 0x4, 0x1c, 0x10, 0x7f, 0x8c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x99}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x5, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x61, 0x2, 0xd, 0x75, 0x9a, 0xc0, 0x9e, [@generic={0xc4, 0x23, "562a456101f33a1a4a8b04f6140ba39b1152264a041410407ff900165bf40f7f45107e5967de5e28fedf10638f35041469358f0368beff856d1009e8dde6dc4e77cb07d84ee0ab2c6b12093fcd15ef0ccbc583ace601a3cdac449440e3ca03605a7c9e5b9a8d8cb9e6689c9d7d0d3297022178d11bae761dd6eeb0674eef7d2b005c842a57e284abc7916a4205dbe298174877afe16fb6ae1fa9aa865adbebdb2eac71d4335713725b59cb8da738593591f6fb6d2dda6773cb28eacea2daf7a793a6"}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "55658d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff01, 0x6, 0x80}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xda04, 0xffff, 0x6, 0x5, 0x8001, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x73}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x5, 0x4, 0x10, 0x2, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0xe, 0x482c103a6ca2bcc5, 0x8, 0x9, 0x5, 0x6, [@generic={0x36, 0x15, "72be2233d788916d95ab24f3d85d2a24e40356b89047d6820256bdfd3b53e9283967c939c30a5b6703dc0d68b8d6856dbda41392"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x70, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x5, 0x3}, @generic={0x4f, 0x30, "bc70024005812a9fcf9c44e71085f47d5d9a617d211019934728e1a7476d231e9e7d46138152b1b8a05b28eea8e8baa28085bb4f490bd615c1cf75917168897ed065e2a4c77ce9c384efed9aee"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x4, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x40, 0xde, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x6}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8fcde1b65a363343, 0x2, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x66, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xee, 0xee, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x53, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7, 0xff, 0x6, [@generic={0xfb, 0x2, "44a9cb1483fd23ba7046f317f97adbf66aebbf8da048cde908c8860e017da3f7f546b187bc75365dd5dff69499d081a2f05a69169570547f59b7a691a5500a489460b75b3c45fdde34e0f59948ab89445907c28f49491a3cd4edfe6686b718ab8576001e5388158da940d7a79b771ed5f99b036f15d5a1e175f40044ab70bf692f6d55e3bc728cce35f03f933fea45d5795f7f88371f0581087f2222f334ad30221c783d2f1fd95fd5cd9c857e4012e8ed0cf6a0dab2f9bbe318366c1a9ead7f157fe0db919815961a850b07e264d9a8e3535384657bf16a636db90e0b38693966630a34ecf3aebfd91d2617867d0b27a8ab64e3f73e46db0b"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x1d2ab2450c62993f, 0xf7, 0x2, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe0, 0x7}]}}, {{0x9, 0x5, 0x1, 0x8, 0x260, 0x3, 0x53, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1f, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xcad3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x2, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x200}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x80, 0xff, 0x1f, [@generic={0x3b, 0x6, "d056bd392bc3de9901d46cfa56adb9b18e3d5bbbbf1faec48c697c8a68ae8a1cc3c43931c7b3f856d566debf498c8148b50301c679efafde2a"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x1, 0x20, 0x8, 0x9}, 0x1f, &(0x7f0000000140)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x87, 0x1, 0x8000, 0xf00, 0x7fff, [0x7]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc4db}}, {0x28, &(0x7f0000000680)=@string={0x28, 0x3, "c2258fd604844ef7cb18a7d2791da0a78e57ae22b70ab1da999d3dfd36dd11e0b630e1b22f20"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x814}}, {0x91, &(0x7f0000000700)=@string={0x91, 0x3, "06f69478503798507cbc0303796f58c4302c8bd5b0411face9c179f1f7886bab4a2174f12c394c710c7ffb6a4440223259debe3cce965d307e4a3212cef1fd3a20666f8088fbe74864e66ba9f9dcedaf4e7c80865468f3a5e8098363867a72537581eba8d6d851a34651f908c001ceb1540389337d6c9be6f48f264990be69db48dc744671f7d4c865bbe643c0b04a"}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x0, 0x22, 0x8a, {0x8a, 0x6, "9ae82ddc01393b808e0d17d0638432a305b4040b799879b58619f7ce293412ae116df7354201ef34840bce4f9e72f666f8ee9fb4388fc8530821ec18fb5d8a2a72772bb1a207abef20c7114c07597602998cf98d9ec59a79f84ef1c8f856b0ed8b1f86af5e585ea2979b81b76baf6d09c028cd7c9d181ef9d6362f1fc1516e26814db4e5659fea7f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000940)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "bda51cba"}, @local=@item_012={0x2, 0x2, 0x4, "a996"}, @local=@item_4={0x3, 0x2, 0x0, "38c35f6e"}, @main=@item_012={0x1, 0x0, 0x9, "97"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe3, 0x80, 0x1, {0x22, 0x5b1}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x40, 0x7, 0x9f, "6ba17f73e0f24a403d56288dbf092baf79aa25da541b4e7e6c6224f21338aadc6d76b6853876d018aeb54afd98b708060541d5ee4ded8f4ff6451ade8dd7faeb67aa3a1897848b12a60e8706f6adf24128189e0f9388084e8508c7aa9db23d5f496bc298dc171033da0ce7cfe077e049f381da9564ec2a67ed5aff54bf896a5a97eca875499bcf0840e2369a8df3aecbfa9c092e88389bb8c859d50198441f"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000b40)={0x20, 0x1, 0xc4, "f116d0412ebaddb4347e324185aff740754105b19c6eadf9a754665276cc6ec0ed3e0e8cf48650f3e3aaec8cfc7b7ba5e9d59346ce5007abd13e7e97b9b0fd6366ab473cad4d46fb7b8079189e4b4b2d94ff5dcc6b65c5b0249105429bf97f9487d280c8ff12f3a659b23b699b354f52a866a96684e8a609436aac13d361ff857a12fa6146bcbc0becaeea656053c66f7af0d615402a7c36d2aaf0c6189016a5840641fc4d005cccdcb1872a646b876c13fdc27914c8f5c6b4b7030540f25fc38d3fb114"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x20}}) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x67, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000040)={0xfffffe89, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x47c, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x7, 0x9f, 0xc5, 0x8, 0xc45, 0x628f, 0x98a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46a, 0x2, 0x80, 0x7, 0x20, 0x1, [{{0x9, 0x4, 0x8e, 0x40, 0x3, 0xef, 0xfa, 0x1, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a3d2"}, {0x5, 0x24, 0x0, 0x7b}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x784, 0x7, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xc1, 0x3a}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x8a, 0x7f, 0x7f, 0x7fff, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0xff, 0x8, 0x85, [@generic={0x61, 0x2, "340ab98550c4d1605717314de169419dd0f8f8bfb94aeaf216cd49ce0bbadcd24c8bc157d343595d90111181cc1054b1639379c151ddadafbf398ba7db8d84a4ca7f8ee06e5ed82e2cbb9107da11a4642914f1176c5ac5b3193e2af8e3058d"}]}}, {{0x9, 0x5, 0x4, 0x1c, 0x10, 0x7f, 0x8c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x99}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x5, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x61, 0x2, 0xd, 0x75, 0x9a, 0xc0, 0x9e, [@generic={0xc4, 0x23, "562a456101f33a1a4a8b04f6140ba39b1152264a041410407ff900165bf40f7f45107e5967de5e28fedf10638f35041469358f0368beff856d1009e8dde6dc4e77cb07d84ee0ab2c6b12093fcd15ef0ccbc583ace601a3cdac449440e3ca03605a7c9e5b9a8d8cb9e6689c9d7d0d3297022178d11bae761dd6eeb0674eef7d2b005c842a57e284abc7916a4205dbe298174877afe16fb6ae1fa9aa865adbebdb2eac71d4335713725b59cb8da738593591f6fb6d2dda6773cb28eacea2daf7a793a6"}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "55658d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff01, 0x6, 0x80}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xda04, 0xffff, 0x6, 0x5, 0x8001, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x73}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x5, 0x4, 0x10, 0x2, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0xe, 0x482c103a6ca2bcc5, 0x8, 0x9, 0x5, 0x6, [@generic={0x36, 0x15, "72be2233d788916d95ab24f3d85d2a24e40356b89047d6820256bdfd3b53e9283967c939c30a5b6703dc0d68b8d6856dbda41392"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x70, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x5, 0x3}, @generic={0x4f, 0x30, "bc70024005812a9fcf9c44e71085f47d5d9a617d211019934728e1a7476d231e9e7d46138152b1b8a05b28eea8e8baa28085bb4f490bd615c1cf75917168897ed065e2a4c77ce9c384efed9aee"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x4, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x40, 0xde, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x6}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8fcde1b65a363343, 0x2, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x66, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xee, 0xee, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x53, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7, 0xff, 0x6, [@generic={0xfb, 0x2, "44a9cb1483fd23ba7046f317f97adbf66aebbf8da048cde908c8860e017da3f7f546b187bc75365dd5dff69499d081a2f05a69169570547f59b7a691a5500a489460b75b3c45fdde34e0f59948ab89445907c28f49491a3cd4edfe6686b718ab8576001e5388158da940d7a79b771ed5f99b036f15d5a1e175f40044ab70bf692f6d55e3bc728cce35f03f933fea45d5795f7f88371f0581087f2222f334ad30221c783d2f1fd95fd5cd9c857e4012e8ed0cf6a0dab2f9bbe318366c1a9ead7f157fe0db919815961a850b07e264d9a8e3535384657bf16a636db90e0b38693966630a34ecf3aebfd91d2617867d0b27a8ab64e3f73e46db0b"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x1d2ab2450c62993f, 0xf7, 0x2, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe0, 0x7}]}}, {{0x9, 0x5, 0x1, 0x8, 0x260, 0x3, 0x53, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1f, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xcad3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x2, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x200}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x80, 0xff, 0x1f, [@generic={0x3b, 0x6, "d056bd392bc3de9901d46cfa56adb9b18e3d5bbbbf1faec48c697c8a68ae8a1cc3c43931c7b3f856d566debf498c8148b50301c679efafde2a"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x1, 0x20, 0x8, 0x9}, 0x1f, &(0x7f0000000140)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x87, 0x1, 0x8000, 0xf00, 0x7fff, [0x7]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc4db}}, {0x28, &(0x7f0000000680)=@string={0x28, 0x3, "c2258fd604844ef7cb18a7d2791da0a78e57ae22b70ab1da999d3dfd36dd11e0b630e1b22f20"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x814}}, {0x91, &(0x7f0000000700)=@string={0x91, 0x3, "06f69478503798507cbc0303796f58c4302c8bd5b0411face9c179f1f7886bab4a2174f12c394c710c7ffb6a4440223259debe3cce965d307e4a3212cef1fd3a20666f8088fbe74864e66ba9f9dcedaf4e7c80865468f3a5e8098363867a72537581eba8d6d851a34651f908c001ceb1540389337d6c9be6f48f264990be69db48dc744671f7d4c865bbe643c0b04a"}}]}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x0, 0x22, 0x8a, {0x8a, 0x6, "9ae82ddc01393b808e0d17d0638432a305b4040b799879b58619f7ce293412ae116df7354201ef34840bce4f9e72f666f8ee9fb4388fc8530821ec18fb5d8a2a72772bb1a207abef20c7114c07597602998cf98d9ec59a79f84ef1c8f856b0ed8b1f86af5e585ea2979b81b76baf6d09c028cd7c9d181ef9d6362f1fc1516e26814db4e5659fea7f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000940)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "bda51cba"}, @local=@item_012={0x2, 0x2, 0x4, "a996"}, @local=@item_4={0x3, 0x2, 0x0, "38c35f6e"}, @main=@item_012={0x1, 0x0, 0x9, "97"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe3, 0x80, 0x1, {0x22, 0x5b1}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x40, 0x7, 0x9f, "6ba17f73e0f24a403d56288dbf092baf79aa25da541b4e7e6c6224f21338aadc6d76b6853876d018aeb54afd98b708060541d5ee4ded8f4ff6451ade8dd7faeb67aa3a1897848b12a60e8706f6adf24128189e0f9388084e8508c7aa9db23d5f496bc298dc171033da0ce7cfe077e049f381da9564ec2a67ed5aff54bf896a5a97eca875499bcf0840e2369a8df3aecbfa9c092e88389bb8c859d50198441f"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000b40)={0x20, 0x1, 0xc4, "f116d0412ebaddb4347e324185aff740754105b19c6eadf9a754665276cc6ec0ed3e0e8cf48650f3e3aaec8cfc7b7ba5e9d59346ce5007abd13e7e97b9b0fd6366ab473cad4d46fb7b8079189e4b4b2d94ff5dcc6b65c5b0249105429bf97f9487d280c8ff12f3a659b23b699b354f52a866a96684e8a609436aac13d361ff857a12fa6146bcbc0becaeea656053c66f7af0d615402a7c36d2aaf0c6189016a5840641fc4d005cccdcb1872a646b876c13fdc27914c8f5c6b4b7030540f25fc38d3fb114"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x20}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x67, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000040)={0xfffffe89, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) [ 1786.868923][ T4035] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1786.909018][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1787.229122][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.240142][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.250102][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1787.262968][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1787.272085][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.299610][ T4035] usb 2-1: config 0 descriptor?? [ 1787.325715][ T72] usb 6-1: USB disconnect, device number 82 [ 1787.760022][T21161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.768633][T21161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.777558][T21161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.786180][T21161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.798480][T21161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 09:33:19 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1bc0) 09:33:19 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd08) 09:33:19 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c08) 09:33:19 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x6}}}}]}}, 0x0) 09:33:19 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47c, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x7, 0x9f, 0xc5, 0x8, 0xc45, 0x628f, 0x98a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46a, 0x2, 0x80, 0x7, 0x20, 0x1, [{{0x9, 0x4, 0x8e, 0x40, 0x3, 0xef, 0xfa, 0x1, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a3d2"}, {0x5, 0x24, 0x0, 0x7b}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x784, 0x7, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xc1, 0x3a}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x8a, 0x7f, 0x7f, 0x7fff, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0xff, 0x8, 0x85, [@generic={0x61, 0x2, "340ab98550c4d1605717314de169419dd0f8f8bfb94aeaf216cd49ce0bbadcd24c8bc157d343595d90111181cc1054b1639379c151ddadafbf398ba7db8d84a4ca7f8ee06e5ed82e2cbb9107da11a4642914f1176c5ac5b3193e2af8e3058d"}]}}, {{0x9, 0x5, 0x4, 0x1c, 0x10, 0x7f, 0x8c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x99}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x5, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x61, 0x2, 0xd, 0x75, 0x9a, 0xc0, 0x9e, [@generic={0xc4, 0x23, "562a456101f33a1a4a8b04f6140ba39b1152264a041410407ff900165bf40f7f45107e5967de5e28fedf10638f35041469358f0368beff856d1009e8dde6dc4e77cb07d84ee0ab2c6b12093fcd15ef0ccbc583ace601a3cdac449440e3ca03605a7c9e5b9a8d8cb9e6689c9d7d0d3297022178d11bae761dd6eeb0674eef7d2b005c842a57e284abc7916a4205dbe298174877afe16fb6ae1fa9aa865adbebdb2eac71d4335713725b59cb8da738593591f6fb6d2dda6773cb28eacea2daf7a793a6"}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "55658d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff01, 0x6, 0x80}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xda04, 0xffff, 0x6, 0x5, 0x8001, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x73}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x5, 0x4, 0x10, 0x2, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0xe, 0x482c103a6ca2bcc5, 0x8, 0x9, 0x5, 0x6, [@generic={0x36, 0x15, "72be2233d788916d95ab24f3d85d2a24e40356b89047d6820256bdfd3b53e9283967c939c30a5b6703dc0d68b8d6856dbda41392"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x70, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x5, 0x3}, @generic={0x4f, 0x30, "bc70024005812a9fcf9c44e71085f47d5d9a617d211019934728e1a7476d231e9e7d46138152b1b8a05b28eea8e8baa28085bb4f490bd615c1cf75917168897ed065e2a4c77ce9c384efed9aee"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x4, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x40, 0xde, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x6}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8fcde1b65a363343, 0x2, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x66, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xee, 0xee, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x53, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7, 0xff, 0x6, [@generic={0xfb, 0x2, "44a9cb1483fd23ba7046f317f97adbf66aebbf8da048cde908c8860e017da3f7f546b187bc75365dd5dff69499d081a2f05a69169570547f59b7a691a5500a489460b75b3c45fdde34e0f59948ab89445907c28f49491a3cd4edfe6686b718ab8576001e5388158da940d7a79b771ed5f99b036f15d5a1e175f40044ab70bf692f6d55e3bc728cce35f03f933fea45d5795f7f88371f0581087f2222f334ad30221c783d2f1fd95fd5cd9c857e4012e8ed0cf6a0dab2f9bbe318366c1a9ead7f157fe0db919815961a850b07e264d9a8e3535384657bf16a636db90e0b38693966630a34ecf3aebfd91d2617867d0b27a8ab64e3f73e46db0b"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x1d2ab2450c62993f, 0xf7, 0x2, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe0, 0x7}]}}, {{0x9, 0x5, 0x1, 0x8, 0x260, 0x3, 0x53, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1f, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xcad3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x2, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x200}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x80, 0xff, 0x1f, [@generic={0x3b, 0x6, "d056bd392bc3de9901d46cfa56adb9b18e3d5bbbbf1faec48c697c8a68ae8a1cc3c43931c7b3f856d566debf498c8148b50301c679efafde2a"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x1, 0x20, 0x8, 0x9}, 0x1f, &(0x7f0000000140)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x87, 0x1, 0x8000, 0xf00, 0x7fff, [0x7]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc4db}}, {0x28, &(0x7f0000000680)=@string={0x28, 0x3, "c2258fd604844ef7cb18a7d2791da0a78e57ae22b70ab1da999d3dfd36dd11e0b630e1b22f20"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x814}}, {0x91, &(0x7f0000000700)=@string={0x91, 0x3, "06f69478503798507cbc0303796f58c4302c8bd5b0411face9c179f1f7886bab4a2174f12c394c710c7ffb6a4440223259debe3cce965d307e4a3212cef1fd3a20666f8088fbe74864e66ba9f9dcedaf4e7c80865468f3a5e8098363867a72537581eba8d6d851a34651f908c001ceb1540389337d6c9be6f48f264990be69db48dc744671f7d4c865bbe643c0b04a"}}]}) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x0, 0x22, 0x8a, {0x8a, 0x6, "9ae82ddc01393b808e0d17d0638432a305b4040b799879b58619f7ce293412ae116df7354201ef34840bce4f9e72f666f8ee9fb4388fc8530821ec18fb5d8a2a72772bb1a207abef20c7114c07597602998cf98d9ec59a79f84ef1c8f856b0ed8b1f86af5e585ea2979b81b76baf6d09c028cd7c9d181ef9d6362f1fc1516e26814db4e5659fea7f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000940)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "bda51cba"}, @local=@item_012={0x2, 0x2, 0x4, "a996"}, @local=@item_4={0x3, 0x2, 0x0, "38c35f6e"}, @main=@item_012={0x1, 0x0, 0x9, "97"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe3, 0x80, 0x1, {0x22, 0x5b1}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x40, 0x7, 0x9f, "6ba17f73e0f24a403d56288dbf092baf79aa25da541b4e7e6c6224f21338aadc6d76b6853876d018aeb54afd98b708060541d5ee4ded8f4ff6451ade8dd7faeb67aa3a1897848b12a60e8706f6adf24128189e0f9388084e8508c7aa9db23d5f496bc298dc171033da0ce7cfe077e049f381da9564ec2a67ed5aff54bf896a5a97eca875499bcf0840e2369a8df3aecbfa9c092e88389bb8c859d50198441f"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000b40)={0x20, 0x1, 0xc4, "f116d0412ebaddb4347e324185aff740754105b19c6eadf9a754665276cc6ec0ed3e0e8cf48650f3e3aaec8cfc7b7ba5e9d59346ce5007abd13e7e97b9b0fd6366ab473cad4d46fb7b8079189e4b4b2d94ff5dcc6b65c5b0249105429bf97f9487d280c8ff12f3a659b23b699b354f52a866a96684e8a609436aac13d361ff857a12fa6146bcbc0becaeea656053c66f7af0d615402a7c36d2aaf0c6189016a5840641fc4d005cccdcb1872a646b876c13fdc27914c8f5c6b4b7030540f25fc38d3fb114"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x20}}) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x67, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000040)={0xfffffe89, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) [ 1787.809660][T21161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:33:19 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c20) 09:33:19 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1bd8) 09:33:19 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd20) 09:33:19 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c38) 09:33:19 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1bf0) 09:33:19 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd38) [ 1787.899130][ T4035] usbhid 2-1:0.0: can't add hid device: -71 [ 1787.905196][ T4035] usbhid: probe of 2-1:0.0 failed with error -71 [ 1787.927707][ T4035] usb 2-1: USB disconnect, device number 124 09:33:19 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c08) 09:33:20 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c50) 09:33:20 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd50) [ 1788.198996][ T718] usb 6-1: Service connection timeout for: 256 [ 1788.205240][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1788.214157][ T718] ath9k_htc: Failed to initialize the device [ 1788.220562][ T72] usb 6-1: ath9k_htc: USB layer deinitialized [ 1788.288938][ T4035] usb 2-1: new high-speed USB device number 125 using dummy_hcd 09:33:20 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x7}}}}]}}, 0x0) [ 1788.578961][ T72] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1788.649013][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.660062][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.670053][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1788.682921][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1788.692031][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.719505][ T4035] usb 2-1: config 0 descriptor?? [ 1789.099133][ T72] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1789.108292][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.116374][ T72] usb 6-1: Product: syz [ 1789.120587][ T72] usb 6-1: Manufacturer: syz [ 1789.125202][ T72] usb 6-1: SerialNumber: syz [ 1789.170496][ T72] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1789.180258][T21177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.192052][T21177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.200849][T21200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.209976][T21177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.218563][T21177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.228001][T21200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.236757][T21200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.245880][T21177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.254964][T21200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.263327][T21177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.369069][ T4035] usbhid 2-1:0.0: can't add hid device: -71 [ 1789.375112][ T4035] usbhid: probe of 2-1:0.0 failed with error -71 [ 1789.383703][ T4035] usb 2-1: USB disconnect, device number 125 [ 1789.769034][ T72] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1790.185958][ T718] usb 6-1: USB disconnect, device number 83 09:33:22 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:22 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c20) 09:33:22 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c68) 09:33:22 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd68) 09:33:22 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x18}}}}]}}, 0x0) 09:33:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000040407f04ffff000000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000026925f93bca8c7b2eef30102032109021200010000000e09936208c9798d3a85"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x4, 0xbb, {0xbb, 0x21, "edaa2598b2ec14f4574872c0ae0f874657343ba81fbb9d5fb9dceaee20d926e1516ba98a9d0e849f58288512142afdc5fb64e312fd24aa465818e45de5eb60b92648e8de95975d6ff01bd0e7209ab5d9b4248cf5a35455ac42f62bf2974fd40368ae4077495833d41630e3520a5acecd456c7e27310383d033725b3dbf1169d4c4ecd3bb4cca05e41a658f3d4757022e79659465900ec92b339775a81075a23537bf46aea9eb6989c9a24a09ff1520f043e8093b02a5dc0518"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000140)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1e8cd8b51bb5c2139a7caecca014ff6e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x3, 0x4, 0x3, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x20, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0xfffe}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x3b, 0xc170}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x32, 0x8, 0x7, 0x0, "118eec7b", "38fa8173"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x18, 0x3f, 0xef, 0xda, 0x100, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x20, 0x8, 0x6, "ec625f157032"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x20, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6ccf"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "740f"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xde22}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x80}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200007ffed00000000007f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d80)={0x0, 0x22, 0x20, {0x20, 0x5, "80198fed130953d1ca9deb4668ca86f65c1c1d61921a0e237ff608625c81"}}, &(0x7f0000001440)={0x0, 0x3, 0x30, @string={0x30, 0x3, "e92a02c958b079bbf405ea94e27e11323907c04149fd6104e033fab818b9700d22ee43ee9b01372275e472e9e78c"}}, &(0x7f0000000e00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x80, 0x5, 0xfe, "0e8528e2", "5843dfe5"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x1, 0x6, 0xff, 0x9, 0x0, 0x4}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f00)={0x20, 0xd, 0x44, "2a221c0dbfb2b4e3c7c1167887c7f757f9d9563e6bb41c98ecec73218587754840614ec208c842a05a3cca83611143ec8f540001e28cf4d67bcda3e542e4eeb6572f6981"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x200, 0x2}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001100)={0x40, 0xb, 0x2, "f384"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001180)={0x40, 0x13, 0x6}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001200)={0x40, 0x19, 0x2, 'MR'}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x80}}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000ac0)={0x24, &(0x7f0000000880)={0x20, 0x30, 0xf5, {0xf5, 0x2, "d33f5e89c7152be93d4533b8723bf988917db6bf585c0b5255e7ea7e5dd1b0ccf56bdc3f4e1768bcce3098d6c0eca879382deac344217bc2ce22ff2c94e7362efdfac4070a92248960f317607aec996aed508fe5148c5d8004e1c5c64a06ebdc6f65c86a709d3b5fd1081a1ceb7e481328e38714cd9eca2b72149d138d02f88b46b9754ab6dd5cc33f28ff3de77a50e94b09b433a10d9e45fcb57654b6f194d0287564910115703510c92c015b1cac54c9f893558e62aba9ff5ab02ca4a043eaaa556f5d33817657a23c4a2d62cfe9a58c6833579dc4701fd7a9cf4970179386543dfd9c9ba1dc0f7f1cb5596404eeacef2da1"}}, &(0x7f0000000980)={0x0, 0x3, 0x89, @string={0x89, 0x3, "9205d39b8e845f9d4ff6e0199ad3d32c0c29097ddf80a4aa3f65ea2c23a20aafeafb556fd38403f46b03aa3da724d0c6ccda3cb965df24f1f5d9310c3e1dd04b7c6066a32efd9aa79c3bd384bb5a064224ec265c449751b4bba22ee6451913892ac292cb29e186bb0db78e37c800e8a3aa9ea871fc7043a43208bf758b164e915290b233229cab"}}, &(0x7f0000000a40)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "20b61766"}, @local=@item_4={0x3, 0x2, 0x7, "a97b1b1f"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x64, 0x92, 0x1, {0x22, 0x9f5}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x20, 0x9, 0x46, "6c11c50c24a1df08bf655f21005c4ed576b73e439e0eb175774a4541a953b7e778e30aa6177c1e8e112ef6249e70199b9ffa65ee08fbfe7383d73243d8b8097805eac511fe82"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c00)={0x20, 0x1, 0xf0, "5e74644be2579a567925dd036340e0e6f20fba07f5a2ab261b374945ccc0b47d8d26b0f7ff3b12647c8a42652bec5b4cc31582f1ffec05f69e49c2edc6bda17aba93d07e9a02ea7b278fde2a8c2424f31a2bf5fc700251cf5d7a050722691738c376e793d3533d8a941c0643ac3d39100e480e8cf3d21cc2eb67721fcb15e374de501832dd9552caf12eb49e4e94b7785deecd1a88998c9c927c9a6c8c200a1b31eeae5d493e26930db72737e677b51668e5042491193c0a27e4ab4e317f39a893396f7ed3ead874bf14e951cd02fdf7b9e9c48ed13b896e40e63a3238612e145b4a1e2b2c562bac9af2260a2f7023db"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x81}}) r4 = syz_open_dev$hiddev(&(0x7f0000001400), 0x2d4f, 0x100) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) 09:33:22 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c80) 09:33:22 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd80) 09:33:22 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c38) 09:33:22 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c50) 09:33:22 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c98) 09:33:22 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd98) [ 1791.018937][ T4035] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1791.078983][ T72] usb 6-1: Service connection timeout for: 256 [ 1791.085242][ T72] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1791.101100][ T72] ath9k_htc: Failed to initialize the device [ 1791.107454][ T718] usb 6-1: ath9k_htc: USB layer deinitialized [ 1791.458911][ T718] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1791.459133][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.477557][ T4035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.487375][ T4035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1791.500244][ T4035] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1791.509352][ T4035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.529818][ T4035] usb 2-1: config 0 descriptor?? [ 1792.000712][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.008182][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.009050][ T718] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1792.015705][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.024662][ T718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.032062][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.040038][ T718] usb 6-1: Product: syz [ 1792.047396][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.051541][ T718] usb 6-1: Manufacturer: syz [ 1792.058979][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.063480][ T718] usb 6-1: SerialNumber: syz [ 1792.070867][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.083219][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.090677][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.098097][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.105553][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.113029][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.120485][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.127910][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.135380][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.142842][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.150299][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.157724][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.165181][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.169860][ T718] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1792.172610][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.188083][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.195583][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.203067][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.210552][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.218155][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.225633][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.233095][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.240570][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.247997][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.255482][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.262947][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.270424][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.277948][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.280056][T21210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.285411][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.301198][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.304489][T21210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.308599][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.323846][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.331338][ T4035] plantronics 0003:047F:FFFF.00DC: unknown main item tag 0x0 [ 1792.337766][T21210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.340647][ T4035] plantronics 0003:047F:FFFF.00DC: No inputs registered, leaving [ 1792.351818][T21210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.364011][ T4035] plantronics 0003:047F:FFFF.00DC: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1792.366100][T21210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.402489][T21210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.421208][ T4134] usb 2-1: USB disconnect, device number 126 [ 1792.749073][ T718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1793.155295][ T4035] usb 6-1: USB disconnect, device number 84 09:33:25 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:33:25 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c68) 09:33:25 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1cb0) 09:33:25 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdb0) 09:33:25 executing program 4: syz_usb_connect$cdc_ncm(0xc7fb680833fd5a29, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x2}}}}]}}, 0x0) 09:33:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000040407f04ffff000000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000026925f93bca8c7b2eef30102032109021200010000000e09936208c9798d3a85"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x4, 0xbb, {0xbb, 0x21, "edaa2598b2ec14f4574872c0ae0f874657343ba81fbb9d5fb9dceaee20d926e1516ba98a9d0e849f58288512142afdc5fb64e312fd24aa465818e45de5eb60b92648e8de95975d6ff01bd0e7209ab5d9b4248cf5a35455ac42f62bf2974fd40368ae4077495833d41630e3520a5acecd456c7e27310383d033725b3dbf1169d4c4ecd3bb4cca05e41a658f3d4757022e79659465900ec92b339775a81075a23537bf46aea9eb6989c9a24a09ff1520f043e8093b02a5dc0518"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000140)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1e8cd8b51bb5c2139a7caecca014ff6e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x3, 0x4, 0x3, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x20, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0xfffe}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x3b, 0xc170}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x32, 0x8, 0x7, 0x0, "118eec7b", "38fa8173"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x18, 0x3f, 0xef, 0xda, 0x100, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x20, 0x8, 0x6, "ec625f157032"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x20, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6ccf"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "740f"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xde22}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x80}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200007ffed00000000007f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d80)={0x0, 0x22, 0x20, {0x20, 0x5, "80198fed130953d1ca9deb4668ca86f65c1c1d61921a0e237ff608625c81"}}, &(0x7f0000001440)={0x0, 0x3, 0x30, @string={0x30, 0x3, "e92a02c958b079bbf405ea94e27e11323907c04149fd6104e033fab818b9700d22ee43ee9b01372275e472e9e78c"}}, &(0x7f0000000e00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x80, 0x5, 0xfe, "0e8528e2", "5843dfe5"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x1, 0x6, 0xff, 0x9, 0x0, 0x4}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f00)={0x20, 0xd, 0x44, "2a221c0dbfb2b4e3c7c1167887c7f757f9d9563e6bb41c98ecec73218587754840614ec208c842a05a3cca83611143ec8f540001e28cf4d67bcda3e542e4eeb6572f6981"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x200, 0x2}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001100)={0x40, 0xb, 0x2, "f384"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001180)={0x40, 0x13, 0x6}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001200)={0x40, 0x19, 0x2, 'MR'}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x80}}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000ac0)={0x24, &(0x7f0000000880)={0x20, 0x30, 0xf5, {0xf5, 0x2, "d33f5e89c7152be93d4533b8723bf988917db6bf585c0b5255e7ea7e5dd1b0ccf56bdc3f4e1768bcce3098d6c0eca879382deac344217bc2ce22ff2c94e7362efdfac4070a92248960f317607aec996aed508fe5148c5d8004e1c5c64a06ebdc6f65c86a709d3b5fd1081a1ceb7e481328e38714cd9eca2b72149d138d02f88b46b9754ab6dd5cc33f28ff3de77a50e94b09b433a10d9e45fcb57654b6f194d0287564910115703510c92c015b1cac54c9f893558e62aba9ff5ab02ca4a043eaaa556f5d33817657a23c4a2d62cfe9a58c6833579dc4701fd7a9cf4970179386543dfd9c9ba1dc0f7f1cb5596404eeacef2da1"}}, &(0x7f0000000980)={0x0, 0x3, 0x89, @string={0x89, 0x3, "9205d39b8e845f9d4ff6e0199ad3d32c0c29097ddf80a4aa3f65ea2c23a20aafeafb556fd38403f46b03aa3da724d0c6ccda3cb965df24f1f5d9310c3e1dd04b7c6066a32efd9aa79c3bd384bb5a064224ec265c449751b4bba22ee6451913892ac292cb29e186bb0db78e37c800e8a3aa9ea871fc7043a43208bf758b164e915290b233229cab"}}, &(0x7f0000000a40)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "20b61766"}, @local=@item_4={0x3, 0x2, 0x7, "a97b1b1f"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x64, 0x92, 0x1, {0x22, 0x9f5}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x20, 0x9, 0x46, "6c11c50c24a1df08bf655f21005c4ed576b73e439e0eb175774a4541a953b7e778e30aa6177c1e8e112ef6249e70199b9ffa65ee08fbfe7383d73243d8b8097805eac511fe82"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c00)={0x20, 0x1, 0xf0, "5e74644be2579a567925dd036340e0e6f20fba07f5a2ab261b374945ccc0b47d8d26b0f7ff3b12647c8a42652bec5b4cc31582f1ffec05f69e49c2edc6bda17aba93d07e9a02ea7b278fde2a8c2424f31a2bf5fc700251cf5d7a050722691738c376e793d3533d8a941c0643ac3d39100e480e8cf3d21cc2eb67721fcb15e374de501832dd9552caf12eb49e4e94b7785deecd1a88998c9c927c9a6c8c200a1b31eeae5d493e26930db72737e677b51668e5042491193c0a27e4ab4e317f39a893396f7ed3ead874bf14e951cd02fdf7b9e9c48ed13b896e40e63a3238612e145b4a1e2b2c562bac9af2260a2f7023db"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x81}}) r4 = syz_open_dev$hiddev(&(0x7f0000001400), 0x2d4f, 0x100) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000040407f04ffff000000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000026925f93bca8c7b2eef30102032109021200010000000e09936208c9798d3a85"], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x4, 0xbb, {0xbb, 0x21, "edaa2598b2ec14f4574872c0ae0f874657343ba81fbb9d5fb9dceaee20d926e1516ba98a9d0e849f58288512142afdc5fb64e312fd24aa465818e45de5eb60b92648e8de95975d6ff01bd0e7209ab5d9b4248cf5a35455ac42f62bf2974fd40368ae4077495833d41630e3520a5acecd456c7e27310383d033725b3dbf1169d4c4ecd3bb4cca05e41a658f3d4757022e79659465900ec92b339775a81075a23537bf46aea9eb6989c9a24a09ff1520f043e8093b02a5dc0518"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000140)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1e8cd8b51bb5c2139a7caecca014ff6e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x3, 0x4, 0x3, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x20, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0xfffe}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x3b, 0xc170}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x32, 0x8, 0x7, 0x0, "118eec7b", "38fa8173"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x18, 0x3f, 0xef, 0xda, 0x100, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x20, 0x8, 0x6, "ec625f157032"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x20, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6ccf"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "740f"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xde22}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x80}}) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200007ffed00000000007f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d80)={0x0, 0x22, 0x20, {0x20, 0x5, "80198fed130953d1ca9deb4668ca86f65c1c1d61921a0e237ff608625c81"}}, &(0x7f0000001440)={0x0, 0x3, 0x30, @string={0x30, 0x3, "e92a02c958b079bbf405ea94e27e11323907c04149fd6104e033fab818b9700d22ee43ee9b01372275e472e9e78c"}}, &(0x7f0000000e00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x80, 0x5, 0xfe, "0e8528e2", "5843dfe5"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x1, 0x6, 0xff, 0x9, 0x0, 0x4}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f00)={0x20, 0xd, 0x44, "2a221c0dbfb2b4e3c7c1167887c7f757f9d9563e6bb41c98ecec73218587754840614ec208c842a05a3cca83611143ec8f540001e28cf4d67bcda3e542e4eeb6572f6981"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x200, 0x2}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001100)={0x40, 0xb, 0x2, "f384"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001180)={0x40, 0x13, 0x6}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001200)={0x40, 0x19, 0x2, 'MR'}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x26, 0x39, 0xa6, 0x40, 0x10c4, 0x818a, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x3, "78d768"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000ac0)={0x24, &(0x7f0000000880)={0x20, 0x30, 0xf5, {0xf5, 0x2, "d33f5e89c7152be93d4533b8723bf988917db6bf585c0b5255e7ea7e5dd1b0ccf56bdc3f4e1768bcce3098d6c0eca879382deac344217bc2ce22ff2c94e7362efdfac4070a92248960f317607aec996aed508fe5148c5d8004e1c5c64a06ebdc6f65c86a709d3b5fd1081a1ceb7e481328e38714cd9eca2b72149d138d02f88b46b9754ab6dd5cc33f28ff3de77a50e94b09b433a10d9e45fcb57654b6f194d0287564910115703510c92c015b1cac54c9f893558e62aba9ff5ab02ca4a043eaaa556f5d33817657a23c4a2d62cfe9a58c6833579dc4701fd7a9cf4970179386543dfd9c9ba1dc0f7f1cb5596404eeacef2da1"}}, &(0x7f0000000980)={0x0, 0x3, 0x89, @string={0x89, 0x3, "9205d39b8e845f9d4ff6e0199ad3d32c0c29097ddf80a4aa3f65ea2c23a20aafeafb556fd38403f46b03aa3da724d0c6ccda3cb965df24f1f5d9310c3e1dd04b7c6066a32efd9aa79c3bd384bb5a064224ec265c449751b4bba22ee6451913892ac292cb29e186bb0db78e37c800e8a3aa9ea871fc7043a43208bf758b164e915290b233229cab"}}, &(0x7f0000000a40)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "20b61766"}, @local=@item_4={0x3, 0x2, 0x7, "a97b1b1f"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x64, 0x92, 0x1, {0x22, 0x9f5}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x20, 0x9, 0x46, "6c11c50c24a1df08bf655f21005c4ed576b73e439e0eb175774a4541a953b7e778e30aa6177c1e8e112ef6249e70199b9ffa65ee08fbfe7383d73243d8b8097805eac511fe82"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c00)={0x20, 0x1, 0xf0, "5e74644be2579a567925dd036340e0e6f20fba07f5a2ab261b374945ccc0b47d8d26b0f7ff3b12647c8a42652bec5b4cc31582f1ffec05f69e49c2edc6bda17aba93d07e9a02ea7b278fde2a8c2424f31a2bf5fc700251cf5d7a050722691738c376e793d3533d8a941c0643ac3d39100e480e8cf3d21cc2eb67721fcb15e374de501832dd9552caf12eb49e4e94b7785deecd1a88998c9c927c9a6c8c200a1b31eeae5d493e26930db72737e677b51668e5042491193c0a27e4ab4e317f39a893396f7ed3ead874bf14e951cd02fdf7b9e9c48ed13b896e40e63a3238612e145b4a1e2b2c562bac9af2260a2f7023db"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x81}}) (async) syz_open_dev$hiddev(&(0x7f0000001400), 0x2d4f, 0x100) (async) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) (async) 09:33:25 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xdc8) 09:33:25 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1cc8) 09:33:25 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c80) 09:33:25 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ce0) 09:33:25 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0xde0) 09:33:25 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x802b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c98) [ 1793.958983][ T72] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1794.038922][ T718] usb 6-1: Service connection timeout for: 256 [ 1794.045145][ T718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1794.055105][ T718] ath9k_htc: Failed to initialize the device [ 1794.061417][ T4035] usb 6-1: ath9k_htc: USB layer deinitialized [ 1794.319093][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.330107][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1794.339922][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1794.352780][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1794.361907][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.379626][ T72] usb 2-1: config 0 descriptor?? [ 1794.438990][ T4035] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1794.799014][ T4035] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1794.860814][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.868280][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.875863][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.883319][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.890808][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.898237][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.905701][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.913195][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.920679][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.928107][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.935595][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.943070][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.950822][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.958247][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.965733][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.973194][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.980676][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.988106][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1794.995597][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.003065][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.010548][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.017970][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.025452][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.032918][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.040410][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.047835][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.055322][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.062802][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.070283][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.077719][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.085208][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.092667][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.099684][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.100125][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.108566][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.115776][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.130944][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.138373][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.145862][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.146764][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.153407][ T72] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1795.171289][ T72] plantronics 0003:047F:FFFF.00DD: No inputs registered, leaving [ 1795.179188][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.180977][ T72] plantronics 0003:047F:FFFF.00DD: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1795.202529][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.211243][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.229589][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.242993][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.259155][ T4035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1795.268245][ T4035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.276381][ T4035] usb 6-1: Product: syz [ 1795.280614][ T4035] usb 6-1: Manufacturer: syz [ 1795.285239][ T4035] usb 6-1: SerialNumber: syz [ 1795.290707][ T72] usb 2-1: USB disconnect, device number 127 [ 1795.350288][ T4035] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1795.919000][ T4035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1796.139117][ T4035] ------------[ cut here ]------------ [ 1796.144661][ T4035] usb 6-1: BOGUS urb xfer, pipe 1 != type 3 [ 1796.151014][ T4035] WARNING: CPU: 1 PID: 4035 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x1880 [ 1796.161147][ T4035] Modules linked in: [ 1796.165075][ T4035] CPU: 1 PID: 4035 Comm: kworker/1:4 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1796.174873][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1796.185006][ T4035] Workqueue: events request_firmware_work_func [ 1796.191299][ T4035] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 1796.196893][ T4035] Code: 7c 24 18 e8 80 67 89 fd 48 8b 7c 24 18 e8 96 82 16 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 38 ac 86 e8 bd ea 0b 02 <0f> 0b e9 58 f8 ff ff e8 52 67 89 fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 1796.216591][ T4035] RSP: 0018:ffffc90001817810 EFLAGS: 00010286 [ 1796.222725][ T4035] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1796.230765][ T4035] RDX: ffff8881156cb900 RSI: ffffffff812c9988 RDI: fffff52000302ef4 [ 1796.238773][ T4035] RBP: ffff88810f3ae800 R08: 0000000000000005 R09: 0000000000000000 [ 1796.246838][ T4035] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1796.254876][ T4035] R13: ffff8881090e2f28 R14: 0000000000000002 R15: ffff88811b0ec400 [ 1796.262922][ T4035] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 1796.271968][ T4035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1796.278581][ T4035] CR2: 00007fb1c4c760b0 CR3: 000000013572c000 CR4: 00000000003506e0 [ 1796.286648][ T4035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1796.294689][ T4035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1796.302833][ T4035] Call Trace: [ 1796.306133][ T4035] [ 1796.309138][ T4035] ? _raw_spin_unlock+0x22/0x40 [ 1796.314029][ T4035] hif_usb_send+0x4c1/0xcf0 [ 1796.318642][ T4035] ? htc_issue_send.constprop.0+0x105/0x250 [ 1796.324686][ T4035] htc_connect_service+0x612/0x8c0 [ 1796.329874][ T4035] ath9k_wmi_connect+0xc9/0x190 [ 1796.334834][ T4035] ? ath9k_fatal_work+0x20/0x20 [ 1796.339771][ T4035] ? ath9k_hif_usb_exit+0x20/0x20 [ 1796.344825][ T4035] ? ath9k_wmi_event_tasklet+0x450/0x450 [ 1796.350287][ T718] usb 6-1: USB disconnect, device number 85 [ 1796.350568][ T4035] ? kmem_cache_alloc_trace+0x48/0x3b0 [ 1796.361954][ T4035] ath9k_init_htc_services.constprop.0+0xb3/0x640 [ 1796.368490][ T4035] ? lockdep_init_map_type+0x21a/0x7f0 [ 1796.374055][ T4035] ? ath9k_regwrite_flush+0x350/0x350 [ 1796.379503][ T4035] ? lockdep_init_map_type+0x21a/0x7f0 [ 1796.385006][ T4035] ? ath9k_wmi_ctrl_tx+0x20/0x20 [ 1796.390038][ T4035] ath9k_htc_probe_device+0x242/0x1e20 [ 1796.395537][ T4035] ? ath9k_init_htc_services.constprop.0+0x640/0x640 [ 1796.402313][ T4035] ? usb_submit_urb+0x875/0x1880 [ 1796.407294][ T4035] ? _raw_spin_unlock+0x23/0x40 [ 1796.412236][ T4035] ? usb_free_urb+0x5c/0x110 [ 1796.416869][ T4035] ? ath9k_hif_usb_alloc_urbs+0xc08/0x1050 [ 1796.422768][ T4035] ath9k_htc_hw_init+0x31/0x60 [ 1796.427668][ T4035] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 1796.433398][ T4035] ? ath9k_hif_usb_alloc_urbs+0x1050/0x1050 [ 1796.439372][ T4035] request_firmware_work_func+0x12c/0x230 [ 1796.445135][ T4035] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 1796.451583][ T4035] process_one_work+0x991/0x1610 [ 1796.456563][ T4035] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1796.462041][ T4035] ? rwlock_bug.part.0+0x90/0x90 [ 1796.467027][ T4035] ? _raw_spin_lock_irq+0x41/0x50 [ 1796.472231][ T4035] worker_thread+0x665/0x1080 [ 1796.476960][ T4035] ? process_one_work+0x1610/0x1610 [ 1796.482264][ T4035] kthread+0x2ea/0x3a0 [ 1796.486364][ T4035] ? kthread_complete_and_exit+0x40/0x40 [ 1796.492094][ T4035] ret_from_fork+0x1f/0x30 [ 1796.496547][ T4035] [ 1796.499640][ T4035] Kernel panic - not syncing: panic_on_warn set ... [ 1796.506241][ T4035] CPU: 1 PID: 4035 Comm: kworker/1:4 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 1796.515992][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 1796.526083][ T4035] Workqueue: events request_firmware_work_func [ 1796.532278][ T4035] Call Trace: [ 1796.535575][ T4035] [ 1796.538533][ T4035] dump_stack_lvl+0xcd/0x134 [ 1796.543155][ T4035] panic+0x2c8/0x622 [ 1796.547111][ T4035] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1796.553129][ T4035] ? __warn.cold+0x248/0x2c4 [ 1796.557755][ T4035] ? usb_submit_urb+0xed2/0x1880 [ 1796.562737][ T4035] __warn.cold+0x259/0x2c4 [ 1796.567195][ T4035] ? __wake_up_klogd.part.0+0xc6/0xf0 [ 1796.572605][ T4035] ? usb_submit_urb+0xed2/0x1880 [ 1796.577588][ T4035] report_bug+0x1bc/0x210 [ 1796.582014][ T4035] handle_bug+0x3c/0x70 [ 1796.586213][ T4035] exc_invalid_op+0x14/0x40 [ 1796.590760][ T4035] asm_exc_invalid_op+0x16/0x20 [ 1796.595712][ T4035] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 1796.601308][ T4035] Code: 7c 24 18 e8 80 67 89 fd 48 8b 7c 24 18 e8 96 82 16 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 38 ac 86 e8 bd ea 0b 02 <0f> 0b e9 58 f8 ff ff e8 52 67 89 fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 1796.621039][ T4035] RSP: 0018:ffffc90001817810 EFLAGS: 00010286 [ 1796.627138][ T4035] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1796.635133][ T4035] RDX: ffff8881156cb900 RSI: ffffffff812c9988 RDI: fffff52000302ef4 [ 1796.643130][ T4035] RBP: ffff88810f3ae800 R08: 0000000000000005 R09: 0000000000000000 [ 1796.651129][ T4035] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1796.659126][ T4035] R13: ffff8881090e2f28 R14: 0000000000000002 R15: ffff88811b0ec400 [ 1796.667127][ T4035] ? vprintk+0x88/0x90 [ 1796.671411][ T4035] ? _raw_spin_unlock+0x22/0x40 [ 1796.676289][ T4035] hif_usb_send+0x4c1/0xcf0 [ 1796.680827][ T4035] ? htc_issue_send.constprop.0+0x105/0x250 [ 1796.686766][ T4035] htc_connect_service+0x612/0x8c0 [ 1796.691922][ T4035] ath9k_wmi_connect+0xc9/0x190 [ 1796.696807][ T4035] ? ath9k_fatal_work+0x20/0x20 [ 1796.701682][ T4035] ? ath9k_hif_usb_exit+0x20/0x20 [ 1796.706731][ T4035] ? ath9k_wmi_event_tasklet+0x450/0x450 [ 1796.712396][ T4035] ? kmem_cache_alloc_trace+0x48/0x3b0 [ 1796.717897][ T4035] ath9k_init_htc_services.constprop.0+0xb3/0x640 [ 1796.724353][ T4035] ? lockdep_init_map_type+0x21a/0x7f0 [ 1796.729849][ T4035] ? ath9k_regwrite_flush+0x350/0x350 [ 1796.735260][ T4035] ? lockdep_init_map_type+0x21a/0x7f0 [ 1796.740843][ T4035] ? ath9k_wmi_ctrl_tx+0x20/0x20 [ 1796.745811][ T4035] ath9k_htc_probe_device+0x242/0x1e20 [ 1796.751309][ T4035] ? ath9k_init_htc_services.constprop.0+0x640/0x640 [ 1796.758021][ T4035] ? usb_submit_urb+0x875/0x1880 [ 1796.763011][ T4035] ? _raw_spin_unlock+0x23/0x40 [ 1796.767890][ T4035] ? usb_free_urb+0x5c/0x110 [ 1796.772521][ T4035] ? ath9k_hif_usb_alloc_urbs+0xc08/0x1050 [ 1796.778357][ T4035] ath9k_htc_hw_init+0x31/0x60 [ 1796.783165][ T4035] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 1796.788831][ T4035] ? ath9k_hif_usb_alloc_urbs+0x1050/0x1050 [ 1796.794754][ T4035] request_firmware_work_func+0x12c/0x230 [ 1796.800506][ T4035] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 1796.806868][ T4035] process_one_work+0x991/0x1610 [ 1796.811844][ T4035] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1796.817260][ T4035] ? rwlock_bug.part.0+0x90/0x90 [ 1796.822238][ T4035] ? _raw_spin_lock_irq+0x41/0x50 [ 1796.827289][ T4035] worker_thread+0x665/0x1080 [ 1796.832005][ T4035] ? process_one_work+0x1610/0x1610 [ 1796.837236][ T4035] kthread+0x2ea/0x3a0 [ 1796.841332][ T4035] ? kthread_complete_and_exit+0x40/0x40 [ 1796.847005][ T4035] ret_from_fork+0x1f/0x30 [ 1796.851457][ T4035] [ 1796.854787][ T4035] Kernel Offset: disabled [ 1796.859196][ T4035] Rebooting in 86400 seconds..